24 May, 2018
Ruth McLees Art (“We”) are committed to protecting and respecting your privacy
2. Who We Are
Here are the details that the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regards to the processing of personal data and on the free movement of such data, known as General Data Protection Regulation (GDPR) says we have to give you as a ‘data controller’:
- Our site address www.ruthmclees.co.uk
- Our company name is Ruth McLees Art (sole trader)
- Our address is Unit 9 Royal Stuart Workshops, Adelaide Place, Cardiff, CF10 5BR, Wales, UK
- Our nominated representative is Ruth McLees, and they can be contacted at email@example.com
- Our website is ruthmclees.co.uk operated by Ruth McLees (sole trader)
- Our regulator is: Information Commissioner’s Office, 2nd Floor, Churchill House, Churchill Way, Cardiff, CF10 2HH, United Kingdom
3. What we may collect
We may collect and process the following data about you:
- Information you put into forms or surveys on our site at any time (including our mailing list sign up)
- A record of any correspondence between us
- Details of transactions you carry out through our site
- Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access
- Information about your computer (e.g. your IP address, browser, operating system, etc.) for system administration and to report aggregate information to our advertisers. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual.
Under GDPR we will ensure that your personal data is processed lawfully, fairly, and transparently, without adversely affecting your rights. We will only process your personal data if at least one of the following basis applies:
a) you have given consent to the processing of your personal data for one or more specific purposes;
b) processing is necessary for the performance of a contract to which you are a party or in order to take steps at the request of you prior to entering into a contract;
c) processing is necessary for compliance with a legal obligation to which we are subject;
d) processing is necessary to protect the vital interests of you or of another natural person;
e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; and/or
f) processing is necessary for the purposes of the legitimate interests pursued by us or by a third party such as our credit card payment processing, except where such interests are overridden by the fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child
All Cookies used by and on our website are used in accordance with current English and EU Cookie Law.
A few of the cookies we use last only for the duration of your web session and expire when you close your browser. Other cookies are used to remember you when you return to the site and will last for longer.
Most computer and some mobile web browsers automatically accept cookies but, if you prefer, you can change your browser to prevent that or to notify you each time a cookie is set. You can prevent the setting of cookies by adjusting the settings on your browser. Please note however, that by blocking or deleting cookies you may not be able to take full advantage of the site.
Our cookies may be used for:
Essential session management
- recognising when a user of the site has visited before allowing us to identify the number of unique users we receive to the site and make sure we have enough capacity for the number of users that we get;
- recognising if a visitor to the site is registered with us in any way;
- we may also log information from your computer including the existence of cookies, your IP address and information about your browser program in order to allow us to diagnose problems, administer and track your usage of our site.
- customising elements of the promotional layout and/or content of the pages of the site.
Performance and measurement
- collecting statistical information about how our users use the site so that we can improve the site and learn which parts are most popular to users.
5. If you sign up to our mailing list: How we use what we collect
We may use information about you to:
- Present site content effectively to you.
- Provide information, products and services that you request, or (with your consent) updates on Ruth McLees artworks, events and exhibitions.
- Carry out our contracts with you.
- To notify you about changes to our service.
In addition, if you don’t want us to use your personal data for any of the other reasons set out in this section in 5, you can let us know at any time by contacting us at firstname.lastname@example.org and we will delete your data from our systems. However, you acknowledge this will limit our ability to provide the best possible products and services to you.
In some cases, the collection of personal data may be a statutory or contractual requirement, and we will be limited in the products and services we can provide you if you don’t provide your personal data in these cases.
6. Where we store your data
The data that we collect from you will usually be transferred and stored only within the European Economic Area (EEA). On occasion it may be necessary for such data to be transferred to, and stored at, a destination outside European Economic Area (EEA). It may be processed outside the EEA to fulfil your order and deal with payment.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
We only keep your personal data for as long as we need to in order to use it as described above in section 5, and/or for as long as we have your permission to keep it. In any event, we will conduct a review to ascertain whether we need to keep your personal data. Your personal data will be deleted if we no longer need it.
7. Disclosing your information
We are allowed to disclose your information in the following cases:
- In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
- If We or substantially all of our assets are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets.
We may contract with third parties to supply services to you on our behalf, for example payment processing. In some cases, the third parties may require access to some or all of your data.
Where any of your data is required for such a purpose, we will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, our obligations, and the obligations of the third party under GDPR and the law.
8. Your rights
You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by contacting us at email@example.com.
You can unsubscribe from our newsletter at any time. You can do this by ticking the relevant boxes on our forms, by clicking the unsubscribe link at the bottom of every newsletter, or by contacting us at any time at: Ruth McLees Art, Unit 9 Royal Stuart Workshops, Adelaide Place, Cardiff, CF10 5BR, Wales, UK or by email at firstname.lastname@example.org.
Under the GDPR, you have the right to:
- request access to, deletion of or correction of, your personal data held by us at no cost to you;
- request that your personal data be transferred to another person (data portability);
- be informed of what data processing is taking place;
- restrict processing;
- to object to processing of your personal data; and
- complain to a supervisory authority.
9. Links to other sites
Please note that our terms and conditions and our policies will not apply to other websites that you get to via a link from our site. We have no control over how your data is collected, stored or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.