1. Introduction
Leicester City Council is strongly committed to safeguarding your privacy. This Privacy Policy explains our policy for the collection and use of information about you and your transactions with us.
We reserve the right to make changes to this Policy at any time. Your continued use of the Christmas in Leicester website will signify your acceptance of any and all changes to this Policy made by us from time to time.
Leicester City Council is the data controller in connection with any personal information collected or received by us arising from your use of the Christmas in Leicester website.
2. How we use your personal data
In this section we have set out:
-
the general categories of personal data that we may process
-
the purposes for which we may process personal data; and
-
the legal basis for the processing
We do not capture and store any personal information about website visitors, except where you voluntarily choose to give us your personal details via email, or by using an electronic form, or enquiring about any of our services.
We will process your personal data in accordance with the United Kingdom’s General Data Protection Regulations. We maintain strict security standards and procedures with a view to preventing unauthorised access to your data by anyone, including our staff. We use leading technologies such as (but not limited to) data encryption, fire walls and server authentication to protect the security of your data. Whenever we hire third parties to provide support services, we will require them to observe our privacy standards and to allow us to audit them for compliance.
2.1 Marketing
We may process information that you provide to us for the purpose of e-newsletter subscriptions and competition entry. We will only use your personal information to administer your account and to provide the products and services you have requested from us.
-
E-newsletters – by completing the Visit Leicester e-newsletter signup page you are agreeing to receive email marketing communications from Visit Leicester, and to the Visit Leicester privacy policy.(link) These can be unsubscribed from at any time, simply by clicking the unsubscribe link at the bottom of the email.
-
Competitions – please check the individual terms and conditions associated with each competition. By entering our competitions and completing our entry forms you are agreeing to your data being processed in line with competition terms and conditions.
Visit Leicester does not sell, rent or lease its customer lists to third parties. Visit Leicester may, from time to time, contact you on behalf of external business partners about a particular offering that may be of interest to you. In such an instance, your unique personally identifiable information (e-mail, name, address, telephone number) is not transferred to the third party.
The legal basis for this processing is consent.
2.3 User Generated Content
2.3.1 Social Media
If you use any of our social network pages or applications or you use one of our products or services that allow interaction with social networks, we may receive information relating to your social network accounts. For instance:
-
If you click on a ‘like’, ‘+1’ or ‘tweet’ or similar, we may record the fact that you have done so. We may receive information about further interactions with this posted content (for example, if your contacts click on a link in the posted content), which we may associate with the details that we store about you.
-
If you ‘like’, ‘+1’ or similar one of our pages on a social network site, we may receive information about your social network profile, depending on your social network account privacy settings.
For more information and for details about how you can control access to your social network profile, you should view the privacy policy and other guidance available on your social network’s website.
2.3.2 Reviews, comments and content
Where you have uploaded comments or content to our website and made them publicly visible, we may link to, publish or publicise these materials elsewhere including in our own promotional campaigns.
The legal basis for processing in 2.3.1 and 2.3.2 is legitimate interest.
2.4 Legal Obligation
In addition to the specific purposes for which we may process your personal data set out in this section, we may also process any of your personal data where such processing is necessary for compliance with regulatory and legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another person.
3. Providing your personal data to others
We will only use your personal information to administer your account and to provide the products and services you have requested from us. We may use other third party service providers to provide data processing services for us (acting as our authorised data processors). Examples of authorised data processors could include billing and fulfilment partners, IT solution providers, data analytics providers who process information on our behalf for the purposes outlined above. For example, we may use the services of third parties to personalise content, fulfil orders, deliver packages, send postal mail and emails, send text messages (SMS), provide marketing assistance, process credit card payments, provide fraud checking services and provide customer services.
When acting as our authorised data processors, our service providers are required to only process data in accordance with our instructions, in line with this Policy, and are subject to appropriate confidentiality and security obligations.
4. International transfers of your personal data
We store your data on our secure servers in the United Kingdom and retain it for a reasonable period or as long as the law requires. However, your data may be transferred to, stored at, and processed at a destination inside or outside the European Economic Area by our partners or service providers. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy.
5. Retention and deletion of personal data
This section sets out our data retention policies and procedure, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal data.
Personal data that we process shall only be retained for as long as necessary to administer your account and to provide the products and services you have requested from us..
Personal data will be deleted when the data subject has withdrawn consent to processing or the data is no longer up to date.
Your personal data will be retained for 5 years following the date you cease to be a client, or longer as required to meet our regulatory obligations.
Notwithstanding the other provisions of Section 6, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests.
6. Links to third party sites
Some of our websites may contain links to other third party websites that are not operated by us. While we try to link only to sites that share our high standards and respect for privacy, we are not responsible for the content, security or privacy practices of those third party websites. We strongly encourage you to view the privacy and cookie policies displayed on those third party websites to find out how your personal information may be used.
7. Amendments
We may update this policy from time to time by publishing a new version on our website.
You should check this page occasionally to ensure you are happy with any changes to this policy.
If appropriate, we may notify you of changes to this policy by email or via our website.
8. Your Rights
In this section we have summarised the rights that you have under data protection law. Some of the rights are complex, and not all of the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.
Your principal rights under data protection law are:
(a) the right to access;
(b) the right to rectification;
(c) the right to erasure;
(d) the right to restrict processing;
(e) the right to object to processing;
(f) the right to data portability;
(g) the right to complain to a supervisory authority; and
(h) the right to withdraw consent.
You may instruct us to provide you with any personal information we hold about you; provision of such information will be subject to the supply of appropriate evidence of your identity. For this purpose, we will usually accept a photocopy of your passport certified by a solicitor or bank plus an original copy of a utility bill showing your current address.
In practice, you will expressly agree (opt in) in advance to our use of your personal information for marketing purposes.
To the extent that the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
9. About Us
The website is owned and operated by Leicester City Council.
Our principle place of business is City Hall, 115 Charles Street, Leicester LE1 1FZ
If you wish to ask us anything about data protection or want to ask for a copy of your data, you may contact our Data Protection Officer at:
Data Protection Officer
Information Governance & Risk
Legal Services
4th Floor, Rutland Wing
City Hall
115 Charles Street
Leicester
LE1 1FZ