The Event is managed by SPB and the Creative Juice (Design Services) Limited trading as the Creative Juice, company number 13323241 (“CJ”). SPB is headquartered at Regent Mill, Fir Street, Manchester, UK M35 0HS, company number 02394603, and who is the data controller for all Personal Data that is collected via the Event. Studio B01 Limited trading as the Flash Pack, company number 13915512 (“FP”) are data processors for all Personal Data that is collected or processed on behalf of SPB during and after the Event.
Quick links
We recommend that you read this Privacy Notice in full to ensure you are fully informed. However, if you only want to access a particular section of this Notice, then you can click on the relevant link below to jump to that section. For further information on our policies, including our Cookie Policy, click here https://uk.remington-europe.com/cookie-policy.
Information on the processing of your Personal Data
When you use the photobooth experience at the Event, we collect the following types of Personal Data about you, which we will process for the purposes described below:
|
Data processing situation |
Types of personal data, source of the personal data |
Why we collect it |
Legal basis |
|
Collection of your photo image and email address to enable you to participate in the free to use photo experience at the Event and to receive a digital copy of the photo by email. |
A photograph of yourself in digital format.
|
We process this personal data to enable SPB to offer and you to participate in the free to use photo experience at the Event.
|
The legal basis for this processing is Legitimate Interest, to enhance the experience and atmosphere of the Event and grow our business and to inform our marketing strategy. |
|
Collection of your email address and your consent to receiving marketing communications from us. |
Email address. |
We process this data to provide you with electronic marketing communications. |
The legal basis for this processing is Consent, for marketing purposes. |
Sharing of your Personal Data
SPB may disclose your Personal Data to the following categories of recipients:
(a) to our group companies for purposes consistent with this Privacy Notice. We take precautions to allow access to Personal Data only to those staff members who have a legitimate business need for access and with a contractual prohibition of using the Personal Data for any other purpose.
(b) to our third-party vendors, services providers and partners who provide data processing services to us, or who otherwise process Personal Data for purposes that are described in this Notice or notified to you when we collect your Personal Data. This may include disclosures to third party vendors and other service providers we use in connection with the services they provide to us, including to support us in areas such as IT platform management or support services, infrastructure and application services, marketing, data analytics.
(c) to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person.
(d) to our auditors, advisors, legal representatives and similar agents in connection with the advisory services they provide to us for legitimate business purposes and under contractual prohibition of using the Personal Data for any other purpose.
(e) to a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your Personal Data only for the purposes disclosed in this Notice.
(f) to any other person if you have provided your prior consent to the disclosure.
Data storage, retention and deletion
If you are registering to receive electronic marketing communications in the EU or UK, the Personal Data we collect from you is stored on servers located in the European Union (EU), specifically on AWS' servers in Frankfurt, Germany. We retain Personal Data we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).
When we have no ongoing legitimate business need to process your Personal Data, we will either delete or anonymise it or, if this is not possible (for example, because your Personal Data has been stored in backup archives), then we will securely store your Personal Data and isolate it from any further processing until deletion is possible.
Transfers of Personal Data outside the UK, EU, or EEA
Our group companies and third-party service providers and partners operate globally. Your Personal Data may be transferred to and processed in countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country.
Specifically, our servers are located globally, and our group companies and third-party service providers and partners operate in the United States and China. This means that when we collect your Personal Data we may process it in any of these countries.
However, we have taken appropriate safeguards to require that your Personal Data will remain protected in accordance with this Notice. When transferring Personal Data outside the EU/EEA, we rely on the European Commission’s Standard Contractual Clauses for transfers of Personal Data. To request more information or to obtain a copy of the standard contractual clauses we rely on, please reach out, see below at "How to contact us".
Profiling
We do not make any decisions based solely on automated processing of your Personal Data, which either produce legal effects that concern you or similarly significantly affect you.
Minors
The photobooth and consent to receiving marketing emails is not intended for individuals below the age of 16. If you are under 16, please do not enter the photobooth and have your photograph taken and do not provide your email address and consent to receiving electronic marketing communications.
How we keep your personal data secure
We use appropriate technical and organisational measures to protect the personal data that we collect and process about you. The measures are designed to provide a level of security appropriate to the risk of processing. Specific measures we use include encrypting your personal data in transit and at rest.
Your data protection rights
You have the following data protection rights:
If you wish to access, correct, update or request deletion of your Personal Data, you can do so at any time by contacting us using the contact details provided under the “How to contact us” heading below.
In addition, you can object to processing of your Personal Data, ask us to restrict processing of your Personal Data or request portability of your Personal Data. Again, you can exercise these rights by contacting us using the contact details below.
If we have collected and process your Personal Data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Data conducted in reliance on lawful processing grounds other than consent.
If you have a complaint or concern about how we are processing your Personal Data, then we will endeavour to address such concern(s). If you feel we have not sufficiently addressed your complaint or concern, you have the right to complain to a data protection authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority.
You may exercise any of the rights above at any time by contacting us as described under the “How to contact us” section below. We will respond to your request in accordance with applicable data protection laws. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
Updates to this Privacy Notice
We may update this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws. You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.
How to contact us
If you have any questions, concerns or complaints about this Notice or the way we process your Personal Data, or if you want to exercise your rights as described above, please contact us via email at the email address described in our general Privacy Policy, click here https://uk.remington-europe.com/privacy-policy