Firstly, we are under a legal obligation to let you know what personal information we collect about you, what we use it for and on what basis. We always need a good reason and we also have to explain to you your rights in relation to that information. You have the right to know what information we hold about you and to have a copy of it, and you can ask us to change or sometimes delete it.
But whatever we do with your information, we need a legal basis for doing it. We generally rely on one of three grounds (reasons) for our business processing. Firstly, if you have ordered or take a service from us, we are entitled to process your information so that we can provide that service to you and bill you for it.
Secondly, if we want to collect and use your information for other purposes, we may need to ask for your consent (permission) and, if we do, that permission must always be indicated by a positive action from you (such as ticking a box) and be informed. You are also free to withdraw your permission at any time. We tend to need permission when what is proposed is more intrusive (for example, sharing your contact details with other organisations so they can market their own products and services to you).
But we do not always
need permission. In some cases, having assessed
whether our use would be fair and not override
your right to privacy, we may come to the view that it falls within the
third ground – our ‘legitimate interests’ to use the information in a particular way without your permission (for example, to protect our network against
cyber-attacks). But when we do this, we must tell you as you may have a right to object.
And if you object specifically to us sending
you marketing material, or to ‘profiling you’ for marketing purposes, we
must then stop.
Under GDPR, you have rights as an individual which you can exercise in relation to the information we hold about you. These are:
- A right of access to a copy of the information comprised in your personal data
- A right to object to processing that is likely to cause or is causing damage or distress
- A right to prevent processing for direct marketing
- A right to object to decisions being taken by automated means
- A right in certain circumstances to have inaccurate personal data rectified, blocked, erased or destroyed
- A right to claim compensation for damages caused by a breach of the act
What information do we collect and how do we use it?
We may collect, store and use the following information:
- Information about your computer and about your visits to and use of this website (including your IP address, geographical location, browser type, referral source, length of visit and number of page views);
- Information that you provide to us to set up an account in the organisational area of the website;
- Information that you provide to us for the purpose of registering your interest with us (including your e-mail address, telephone number and name);
- Information that you provide to us for the purpose of receiving news about future products and services;
- Any other information that you choose to send to us.
We may use your personal information to:
- Administer the website;
- Enable your use of the services available on the website;
- Contact you in response to a specific enquiry;
- Send you general (non-marketing) commercial communications;
- Send you information about future products and developments and other marketing communications relating to our business where you have specifically agreed to this by email or similar technology (you can inform us at any time if you no longer require marketing communications).
Controlling information about you
When you fill in a form or provide your details on our website, you will see a tick box allowing you to opt-in to receive marketing communications from us by email, telephone, text message or post. If you have agreed that we can use your information for marketing purposes, you may change your mind at any time by emailing us at firstname.lastname@example.org
We will never lease, distribute or sell your personal information to third parties unless we have your permission or the law requires us to.
Visitors to our website
When someone visits the PSBA website, we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in an anonymous way which does not identify anyone individually. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be open about this. We will make it clear when we collect personal information and will explain what we intend to do with it.
Cookies are small text files sent to your computer or mobile device by the websites that you visit. They help make websites work better and provide information to the owners of the site. For example, we use language cookies to know what language you would like the website displayed to you in and Google Analytics cookies to track users’ behaviour whilst on the site. By understanding how people use our site, we can improve navigation and content to better meet people’s needs. The information collected by PSBA includes IP address, pages visited, browser and operating system. The data will not be used to identify any user personally.
Account based cookies:
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks.
If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Cookies (anonymized) that allow us to measure the use of the website which allows us to further improve the website. For example the browser used, time on site, the page that led you to our website and which pages of our website you visit.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
Accessing the organisational area of this website is restricted to PSBA member organisations and requires registration. The registration information we require as mandatory for registration is your email address. This data is stored in the UK and its handling satisfies the provisions of GDPR. This information is stored until such time as you choose to delete your account. You can change your registration preferences, email address and login details through the website at any time. If you are no longer interested in having an account on the organisational area, or receiving information from PSBA, you can delete your account at any time.
How to contact us and further details
If you want to make a complaint on how we have handled your personal information, please contact our data protection officer who will investigate the matter and report back to you. If you are still not satisfied after our response or believe we are not using your personal information in line with the law, you also have the right to complain to the data protection regulator in the country where you live or work. For the UK, that’s the Information Commissioner – https://ico.org.uk/.
We welcome your feedback. If you contact us asking for information, we may need to contact other departments to find that information. We do not pass on any of your personal information when dealing with your enquiry, unless you have given us permission to do so. Once we have replied to you, we keep a record of your message for audit purposes.
Links to other websites
If there is a conflict between the Welsh language version of this cookie notice, and the English language version, the English language version shall prevail