Your personal information is important to us. We highlight below matters relating to your information that you should be aware of.
We will endeavour to take all due care to protect this information, in accordance with the applicable Data Protection legislation from time to time, for the purposes of which Rooomy is the data controller.
GENERAL DATA PROTECTION REGULATION (GDPR)
The General Data Protection Regulations defines “personal data” as any information relating to an identified or identifiable natural person (a data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
This Policy sets out the procedures that are to be followed when dealing with personal data. The procedures and principles set out herein must be followed at all times by the Company, its employees, agents, contractors, or other parties working on behalf of the Company.
INFORMATION WE MAY COLLECT FROM YOU
We may collect and process the following data about you:
Information that you provide by filling in forms on our site www.rooomy.co.uk (our site). This includes information provided at the time of registering to use our site, subscribing to our service, posting material or requesting further services. We may also ask you for information when you enter a competition or promotion and when you report a problem with our site.
If you contact us, we may keep a record of that correspondence.
We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
Details of your visits to our site and the resources that you access.
We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual.
WHERE WE STORE YOUR PERSONAL DATA
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk.
USES MADE OF THE INFORMATION
We use information held about you in the following ways:
To ensure that content from our site is presented in the most effective manner for you and for your computer.
To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
To allow you to participate in interactive features of our service, when you choose to do so.
To notify you about changes to our service.
DISCLOSURE OF YOUR INFORMATION – ADVERTISERS
We do not share customer details with any 3rd parties.
WHY DO WE PROCESS YOUR INFORMATION?
If you contact us with an enquiry, we will process the personal information that you provide, or we collect from you, including your name, e-mail address, phone number and your country, on the basis that it is necessary for the legitimate interests we have in promoting Rooomy Magazine this does not prejudice or harm your rights and freedoms.
If you subscribe to Rooomy Magazine we will provide your with news of details of offers and other opportunities and on the basis that it is necessary for the legitimate interests we have in promoting Rooomy. We will only contact you in this way if you agree to opt-in. Details of how to do so, and how to opt-out of receiving details of such offers, are on relevant pages of the Rooomy Website, or will be in the forms you complete and/or the emails you receive from us.
If you are under 18, please make sure that you obtain your parent/guardian's permission before you provide your personal information to the Rooomy Website.
Children under the age of 13 must ask permission of an adult before entering a competition or sending any personal information. If you are the parent or guardian of a child under 13, we may process limited personal data about you so you can give consent for the child to enter a competition. We may use your contact details to communicate with you about the child’s account or use of our services.
WHO DO WE SHARE YOUR INFORMATION WITH?
We may disclose your personal data if we need to do so in order to comply with any legal or regulatory obligation or request, or where we have a legitimate interest in doing so, such as in order to enforce or apply our contract, to investigate potential breaches, or to protect the rights, property or safety of the Company or others. This may include exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
Except as set out above, we will never sell, distribute or disclose any of your personal information (except anonymous aggregate information) with any third party without your express consent.
HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?
If you contact us with an enquiry but do not subscribe, we will normally delete your personal data after six months.
If you subscribe your data will be retained until you unsubscribe.
Once unsubscribed your personal data (name and email address) will be deleted within 1 month and you will be notified of this via email.
In certain case, it may not be physically possible to delete certain data (for instance, where it is stored on a secure external server), in which case we will take appropriate steps to ensure that it is not available for re-use or disclosure to third parties.
As a data subject you have certain legal rights including:
The right to access the personal data held about you
The right to ask us not to process your personal data for marketing purposes
The right to withdraw at any time any consent you have given to receive marketing material from us
The right to ask us to rectify inaccurate personal data about you
The right to ask for the restriction of personal data concerning yourself that is inaccurate, unlawfully processed, or no longer required
The right to ask for the erasure of personal data concerning yourself where processing is no longer necessary, or the legitimate interests we have in processing your personal data are overridden by your interests, rights and freedoms as the data subject
The right to make a complaint to the supervisory authority (the Information Commissioner’s Office)
You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can also exercise the right at any time by contacting us at email@example.com
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
ACCESS TO INFORMATION
The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act. Any access request may be subject to a fee of £10 to meet our costs in providing you with details of the information we hold about you.
DATA PROTECTION PRINCIPLES
This Policy aims to ensure compliance with the Regulation. The Regulation sets out the following principles with which any party handling personal data must comply. All personal data must be:
Processed lawfully, fairly, and in a transparent manner in relation to the data subject;
Collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with the initial purposes;
Adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed;
Accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that is inaccurate, having regard to the purposes for which they are processed, is erased or rectified without delay;
Kept in a form which permits identification of Data Subjects for no longer than is necessary for the purposes for which the personal data is processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organisational measures required by the Regulation in order to safeguard the rights and freedoms of the data subject;
Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
LAWFUL, FAIR & TRANSPARENT DATA PROCESSING
The Regulation seeks to ensure that personal data is processed lawfully, fairly, and transparently, without adversely affecting the rights of the data subject. The Regulation states that processing of personal data shall be lawful if at least one of the following applies:
The data subject has given consent to the processing of his or her personal data for one or more specific purposes;
Processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract;
Processing is necessary for compliance with a legal obligation to which the controller is subject;
Processing is necessary to protect the vital interests of the data subject or of another natural person;
Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
on this page and, where appropriate, notified to you by e-mail.