Marketing Privacy Notice

Introduction

Revell Research Systems Limited (the Company, we, us, our) is providing you with this information in order to comply with the Data Protection Act 2018 and theGeneral Data Protection Regulation 2016 (GDPR),which require us to tell you what we do with your personal information.

This notice relates to the personal data that we process about you as part of our marketing activities. We use your personal data to send you marketing communications about our business and our solutions.

We may occasionally send you postal marketing communications addressed to you where we believe our business or solutions may be of interest to you. If you object then we will immediately stop.

We may send you electronic marketing material from time-to-time but only where you have consented to receiving this material or have previously negotiated or contracted to receive services from us. You may withdraw your consent at any time. Electronic marketing includes any form of marketing using electronic communication such as email, fax or SMS text.

We may send electronic marketing communications to generic business addresses that are clearly not those of an office holder or individual since these are outside of the scope of privacy legislation. You may receive these communications if your organisation designates you to handle email to such an address. We will respect any wishes not to receive such communications from us.

We do not make unsolicited telephone calls for marketing purposes.

All of our electronic marketing (emarketing) is permission based. If you receive an electronic marketing message from us then our records indicate that (a) you have expressly shared your address for the purpose of receiving information in the future (ie: you have “opted-in”); (b you are a corporate body whose address we have is generic and clearly not that of an individual or office holder; or (c) you have previously bought or negotiated to buy the same or a similar solution to the one being marketed in the communication.

We respect your time and attention by controlling the frequency of our communications. We also do not use any form of web beacon in our marketing messages.

If you believe you have received an unwanted, unsolicited electronic message from us then please contact us. If the message was received by email then please forward a copy of that email with your comments to office@rrs.co.uk for review.

We may send non-personal marketing communications by email that is not within the scope of privacy legislation.

Who is collecting this personal data?

Revell Research Systems Limited is collecting this data as the Data Controller.

Revell Research Systems Limited is registered with the Information Commissioner in the United Kingdom as a data controller under number Z186392X.

Who are we sharing your Personal Data with?

We may share your personal data processed under this notice with the following third parties:-

• The courts and those involved in legal proceedings and non-contentious matters, including solicitors and barristers
• Police and law enforcement agencies
• Our subsidiaries, our ultimate holding company and all its subsidiaries
• Agents acting on our behalf
• Service providers (including associates)
• Other professional advisors

We will not sell or rent your data to third parties. We will not share it with third parties for marketing purposes.

Why are we collecting and what will we do with Your Personal Data?

We provide management and technology solutions to business.

We are collecting your personal data in order to market our business and its solutions to you or your organisation. We process your personal data to send you marketing communications and to help us understand our market.

We may send you marketing communications by post or via electronic means.

We may process this data for the purpose of the proper administration of our business and in communicating with you as well as maintaining backups.

We may share data in reporting crime to, or in co-operating with, the police and law enforcement agencies.

What is the legal basis for processing?

Our lawful purposes are Consent, Contract and Legitimate Interest.

• consent - you have given your consent to receive marketing communications from us.
• contract - the Company has been contracted to supply services or has entered into pre-contractual negotiations to supply services to you in the past that are the same or similar to those services being marketed.
• legitimate interest - the Company has a legitimate interest to process your personal data to market the business and its solutions to you. The law does not allow us to send you electronic marketing communications without your consent as an individual.

These lawful purposes are detailed in Article 6 of the General Data Protection Regulation (GDPR):-

• the data subject has given consent to the processing of his or her personal data for one or more specific purposes (Article 6(1)(a)).
• processing is necessary for the performance of a contract to which the data subject is party or to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b)).
• processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (Article 6(1)(f)).

If we enter pre-contractual negotiations then our Professional Services Privacy Notice | Revell Research Systems Prize will apply.

How are we collecting this information?

We collect personal data about you when you express interest in the business or its solutions. You might do this by calling us, requesting literature from a web site, emailing us or when you meet someone from the Company.

We may also collect information about you from a variety of sources such as your organisation's web site or through your social media presence. We may sometimes acquire marketing lists from third party suppliers.

What information are we collecting?

We typically collect the following personal information when marketing our business or solutions:-

• your name and style of address
• gender
• job title
• organisation
• address
• email address
• telephone numbers
• other contact details
• professional social media
• roles within your organisation
• details of interactions between us
• IP address
• marketing preferences

Who can see your information within the Company?

Only authorised directors, staff and associates may access your data.

How long is your information kept?

We will only keep your information for as long as necessary. The retention period is either dictated by law or our legitimate requirements. Once your information is no longer needed it will be securely and confidentially destroyed.

We typically retain personal data relating to marketing for three years after the financial year in which contact was last received from you or you last gave consent to receive marketing material from us.

How secure is your information?

We take stringent steps to keep your information secure. You can read more about our approach to security at www.rrs.co.uk/security.

Who keeps your information updated?

You are responsible for keeping your personal details up-to-date. Please advise the Company of any changes.

Will your information be used for any automated decision making?

No.

Our Privacy Statement

You can access the Company's Privacy Statement at www.rrs.co.uk/privacy. This statement provides you with more information about how we address data protection and privacy as well as informing you of your rights.

Other Privacy Notices

You are likely to interact with us in more than one way, so our other privacy notices may apply to you in different scenarios. We are open and transparent about how we use your personal data. You can find all of our Privacy Notices at www.rrs.co.uk/privacy.

Changes to this Notice

We may change this privacy notice at any time. Any changes to this privacy notice will apply to you and your data immediately. If these changes affect how your personal data is processed, the Company will take reasonable steps to make sure you know.

Further Information