Content Privacy Notice

Introduction

Revell Research Systems Limited (the Company, we, us, our) is providing you with this information in order to comply with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), which require us to tell you what we do with your personal information.

This notice explains how Revell Research Systems Limited processes personal data when you contribute content to our websites, online services, discussion facilities, comment systems or other publication platforms.

The content you contribute (typically for public consumption) may be textual or other media such as audio, video or imagery, all of which may contain personal data. You should read the Terms of Use for our websites and online services.

Content that you submit may be published and may be attributable to you. Once published, the content may be viewed, copied, shared, archived, indexed by search engines and reused by third parties over whom we have no control. We may also syndicate content to other publishers and media organisations. Content obtained from publicly available sources may be reproduced or used in ways that we do not control or endorse. You should therefore consider carefully what information you choose to contribute. We will indicate which information is intended to be published and which information will remain private when you submit content.

We may record information relating to organisations with which you are associated as a prospective or existing business contact. Where such information does not relate to an identified or identifiable individual, it may fall outside the scope of UK data protection legislation.

Who is collecting this personal data?

Revell Research Systems Limited is collecting this data as the Data Controller.

Revell Research Systems Limited is registered with the Information Commissioner in the United Kingdom as a data controller under number Z186392X.

Who are we sharing your personal data with?

We may share personal data processed under this notice where necessary for the purposes described in this notice and where such sharing is lawful, proportionate and appropriate:-

• The courts and those involved in legal proceedings and non-contentious matters, including solicitors and barristers
• Police and law enforcement agencies
• Our subsidiaries, our ultimate holding company and all its subsidiaries
• Members of the public where content is published through our websites, online services or syndicated content channels.
• Third-party publishers and media organisations acting as independent data controllers where content is syndicated, reproduced or republished.
• Agents acting on our behalf
• Service providers (including associates)
• Professional advisers

We will not sell or rent your data to third parties. We will not share it with third parties for marketing purposes.

Why are we collecting and what will we do with your personal data?

We are collecting this information to help us develop our business and provide you with an opportunity to contribute your content to our websites and other online facilities (such as news groups, chat or FTP services).

We process personal data for the following purposes:-

• publishing and displaying contributed content;
• distributing and syndicating published content;
• promoting our business, services and publications;
• communicating with contributors;
• administering our business and online services;
• maintaining backup and business continuity arrangements;
• establishing, exercising or defending legal rights and claims;
• reporting crime and cooperating with law enforcement agencies.

What is the legal basis for processing?

Our lawful basis is legitimate interests:-

• legitimate interests - the Company has legitimate interests in using the content you volunteer to provide as well as in protecting and asserting our, your or another's legal rights; and in properly administering its business and backing up data.

These legitimate interests include:-

• operating and maintaining our websites and online services;
• publishing and displaying contributed content;
• distributing and syndicating published content;
• promoting our services, publications and activities;
• communicating with contributors;
• maintaining business records and backup systems; and
• protecting legal rights and responding to disputes.

This lawful basis is detailed in Article 6 of the UK General Data Protection Regulation (UK GDPR):-

• processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (Article 6(1)(f)).

You may object to subsequent processing of your personal data that you initially volunteer, but please be aware that we may not be able to uphold the request. For instance, you may provide a quote in a contribution that we subsequently use in print media.

How are we collecting this information?

We collect your personal data under this privacy notice directly from you.

Please note that our Usage Log Privacy Notice | Revell Research Systems Prize is also likely to apply to you as our systems record electronic interactions between us.

What information are we collecting?

We typically collect the following personal information when you contribute content:-

• your name and style of address
• gender
• job title
• organisation
• email address
• telephone number
• other contact details
• IP address
• date and time of contribution
• digital account details (if logged in when making the contribution)
• metadata associated with contributed content
• the content itself including any embedded personal data whether textual, audio, video, photographic or other rich media

Who can see your information within the Company?

Access to your personal data is restricted to authorised directors, staff and associates who require it for legitimate business purposes.

Will your personal data be transferred outside the United Kingdom?

Content published through our websites and online services may be accessed, viewed, copied, stored or further processed by individuals and organisations located outside the United Kingdom. In addition, some of our suppliers and service providers may process personal data internationally on our behalf. Where this occurs, we will ensure that appropriate safeguards recognised by the UK General Data Protection Regulation (UK GDPR) are in place before the transfer occurs.

These safeguards may include transfers to countries recognised as providing an adequate level of protection for personal data or the use of approved contractual arrangements between the parties involved in the transfer.

How long is your information kept?

We will only keep your information for as long as necessary. The retention period is either dictated by law or our legitimate requirements. Once your information is no longer needed it will be securely and confidentially destroyed.

We retain content contributions and associated personal data for as long as they remain published or continue to serve the purpose for which they were provided.

Associated administrative records may be retained for longer where necessary to:-

• maintain historical records;
• resolve complaints or disputes;
• comply with legal or regulatory obligations; or
• establish, exercise or defend legal claims.

How secure is your information?

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access. You can read more about our approach to security at www.rrs.co.uk/security.

Who keeps your information updated?

You should notify us if your contact details or other personal information change so that we can maintain accurate records.

Will your information be used for any automated decision making?

No. We do not undertake solely automated decision making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

Our Privacy Statement

You can access the Company's Privacy Statement at www.rrs.co.uk/privacy. This statement provides you with more information about how we address data protection and privacy as well as informing you of your rights.

Other Privacy Notices

You are likely to interact with us in more than one way, so our other privacy notices may apply to you in different scenarios. We are open and transparent about how we use your personal data. You can find all of our Privacy Notices at www.rrs.co.uk/privacy.

Changes to this Notice

Any changes to this privacy notice will take effect when the revised notice is published. If these changes affect how your personal data is processed, the Company will take reasonable steps to make sure you know.

Further Information