If we collect personal data directly from an individual, we will inform them about:
A. The purpose or purposes for which we intend to process that personal data, as well as the legal basis for the processing.
B. Where we rely upon the legitimate interests of the business to process personal data, the legitimate interests pursued.
C. The types of third parties, if any, with which we will share or disclose that personal data.
D. The fact that the business intends to transfer personal data to a non-EEA country or international organization and the appropriate and suitable safeguards in place.
E. How individuals can limit our use and disclosure of their personal data.
Information about the period that their information will be stored or the criteria used to determine that period.
F. Their right to request from us as the controller access to and rectification or erasure of personal data or restriction of processing.
G. Their right to object to processing and their right to data portability.
H. Their right to withdraw their consent at any time (if consent was given) without affecting the lawfulness of the processing before the consent was withdrawn.
I. The right to lodge a complaint with the Information Commissioner's Office.
J. Other sources where personal data regarding the individual originated from and whether it came from publicly accessible sources.
L. Whether the provision of the personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether the individual is obliged to provide the personal data and any consequences of failure to provide the data.
M. The existence of automated decision-making, including profiling and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the individual.
If we receive personal data about an individual from other sources, we will provide them with this information as soon as possible (in addition to telling them about the categories of personal data concerned) but at the latest within One (1) month.
We will also inform data subjects whose personal data we process, that we are the data controller with regard to that data and our contact detail regarding data protection act is support@gowansmedia.com, and who the Data Protection Compliance Manager/Data Protection Office is.