Data Protection Principles Under the GDPR, there are six data protection principles that the Company must comply with. These provide that the personal information we hold about you must be:
- Processed lawfully, fairly and in a transparent manner.
- Collected only for legitimate purposes that have been clearly explained to you and not further processed in a way that is incompatible with those purposes.
- Adequate, relevant and limited to what is necessary in relation to those purposes.
- Accurate and, where necessary, kept up to date.
- Kept in a form which permits your identification for no longer than is necessary for those purposes.
- Processed in a way that ensures appropriate security of the data.
The Company is responsible for, and must be able to demonstrate compliance with, these principles. This is called accountability. What types of personal information do we collect about you? Personal information is any information about an individual from which that person can be directly or indirectly identified. It doesn’t include anonymised data. In running and maintaining our website and marketing activity we may collect and process the following data about you:
- your contact details, including your name, address, telephone number and personal e-mail address
- your date of birth/age
- your gender
- social media information
- photographs (supplied by you)
- documentation uploaded/supplied by you
- To process your enquiry, reservation or booking.
- To provide information to you that you request from us relating to our products or services.
- To market products and services which we believe would be of interest to you, and for sending out our newsletter, update and special offers. As per the GDPR 2018 legislislation, we will only send you this information if you have ‘opted in’ to receive these updates and we will only contact you via the channels that you have agreed. You have the right at any time to stop us from contacting you for marketing purposes. If you wish to opt out (ie stop receiving marketing communications from us), please email firstname.lastname@example.org using the subject line UNSUBSCRIBE or click on the unsubscribe link on the footer of a promotional email.
- To inform you of specific changes to our website, services or goods and products.
- If you have previously purchased goods or services from us we may provide to you details of similar goods or services, or other goods and services, that you may be interested in.
- Where it is necessary for our legitimate interests (or those of a third party), and your interests or your fundamental rights and freedoms do not override our interests.
- Any information collected is for use by the Lulworth Estate and its employees only. Your information will never be sold or given away to third parties.
- To better tailor your user experience and personalise your repeat visits to our website.
- request access to your personal information – this is usually known as making a data subject access request and it enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it
- request rectification of your personal information – this enables you to have any inaccurate or incomplete personal information we hold about you corrected
- request the erasure of your personal information – this enables you to ask us to delete or remove your personal information where there’s no compelling reason for its continued processing, e.g. it’s no longer necessary in relation to the purpose for which it was originally collected
- restrict the processing of your personal information – this enables you to ask us to suspend the processing of your personal information, e.g. if you contest its accuracy and so want us to verify its accuracy
- object to the processing of your personal information – this enables you to ask us to stop processing your personal information where we are relying on the legitimate interests of the business as our legal basis for processing and there is something relating to your particular situation which makes you decide to object to processing on this ground
- data portability – this gives you the right to request the transfer of your personal information to another party so that you can reuse it across different services for your own purposes.