Marketing Privacy Notice

Introduction

Revell Research Systems Limited (the Company, we, us, our) is providing you with this information in order to comply with the Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), which require us to explain how we collect, use, store and protect your personal data.

This Privacy Notice explains how Revell Research Systems Limited processes personal data for marketing purposes, including sending marketing communications, maintaining marketing preferences, assessing interest in our services and promoting our business and solutions. It also explains your rights and the choices available to you regarding direct marketing.

We may occasionally send you postal marketing communications addressed to you where we believe our business or solutions may be of interest to you. If you object then we will immediately stop.

We may send you electronic marketing communications from time-to-time where you have consented to receiving them, where you have previously purchased or negotiated to purchase the same or similar services from us and applicable legislation permits us to do so, or where the communication is directed to a generic business address that does not identify an individual. You may withdraw your consent at any time. Electronic marketing includes communications sent by email, fax, text message (SMS) and other electronic means.

We may send marketing communications to generic business email addresses such as info@, sales@ or support@ addresses where those addresses do not identify an individual. If your organisation designates you to receive messages sent to such an address then you may receive communications intended for that business function. We will promptly respect any request not to receive further communications.

We do not make unsolicited telephone calls for marketing purposes.

Our electronic marketing activities are undertaken in accordance with applicable data protection and electronic communications legislation. If you receive an electronic marketing communication from us then our records indicate that you have consented to receive such communications, have previously purchased or negotiated to purchase similar services from us where marketing is permitted, or that the communication was sent to a generic business address that does not identify an individual.

We respect your time and attention by controlling the frequency of our communications. We also do not use any form of web beacon in our marketing messages.

If you believe you have received an unwanted, unsolicited electronic message from us then please contact us. If the message was received by email then please forward a copy of that email with your comments to office@rrs.co.uk for review.

Marketing Preferences and Opt-Outs

You may withdraw your consent to receive marketing communications from us at any time.

Every electronic marketing communication that we send includes a mechanism enabling you to request that further marketing communications are not sent. We maintain records of marketing preferences and suppression requests to ensure that your choices are respected.

Opting out of marketing communications does not prevent us from sending communications that are necessary for the administration of services that you have requested from us.

Who is collecting this personal data?

Revell Research Systems Limited is collecting this data as the Data Controller.

Revell Research Systems Limited is registered with the Information Commissioner in the United Kingdom as a data controller under number Z186392X.

Who are we sharing your personal data with?

We may share personal data processed under this notice, where necessary and proportionate, with the following categories of recipient:-

• The courts and those involved in legal proceedings and non-contentious matters, including solicitors and barristers
• Police and law enforcement agencies
• Our subsidiaries, our ultimate holding company and all its subsidiaries
• Agents acting on our behalf
• Service providers (including associates)
• Other professional advisers

We will not sell or rent your data to third parties. We will not share it with third parties for marketing purposes.

Why are we collecting and what will we do with your personal data?

We provide management and technology solutions to business.

We are collecting your personal data in order to market our business and its solutions to you or your organisation. We process your personal data to send marketing communications, maintain marketing preferences, understand the organisations, sectors and professional communities that may benefit from our services, and assess the effectiveness of our marketing activities.

We may send you marketing communications by post or via electronic means.

We may process this data for the purpose of the proper administration of our business and in communicating with you as well as maintaining backups.

We may share data in reporting crime to, or when co-operating with, the police and law enforcement agencies.

What is the legal basis for processing?

Depending upon the circumstances, we rely upon Consent, Contract and Legitimate Interests as our lawful bases for processing personal data for marketing purposes.

• consent - you have given your consent to receive marketing communications from us.
• contract - the Company has been contracted to supply services or has entered into pre-contractual negotiations to supply services to you in the past that are the same or similar to those services being marketed.
• legitimate interests - the Company has legitimate interests in processing your personal data to market the business and its solutions to you. The law does not allow us to send you electronic marketing communications without your consent as an individual.

These lawful bases are detailed in Article 6 of the UK General Data Protection Regulation (UK GDPR):-

• the data subject has given consent to the processing of his or her personal data for one or more specific purposes (Article 6(1)(a)).
• processing is necessary for the performance of a contract to which the data subject is party or to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b)).
• processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (Article 6(1)(f)).

If we enter pre-contractual negotiations then our Professional Services Privacy Notice will apply.

How are we collecting this information?

We collect personal data about you when you express interest in the business or its solutions. You might do this by calling us, requesting literature from a web site, emailing us or when you meet someone from the Company.

We may also collect information about you from a variety of sources such as your organisation's website or through your social media presence. We may sometimes acquire marketing lists from third party suppliers.

Where we receive personal data from third-party marketing list providers, we undertake reasonable due diligence to satisfy ourselves that the personal data has been collected and shared lawfully, that appropriate marketing permissions have been obtained where required, and that the information is suitable for the marketing purposes for which it is being used.

Where contact details are obtained from third parties, we take reasonable steps to ensure that the data has been collected and shared lawfully.

What information are we collecting?

We typically collect the following personal information when marketing our business or solutions:-

• your name and preferred style of address
• job title
• organisation
• address
• email address
• telephone numbers
• other contact details
• professional social media
• roles within your organisation
• details of interactions between us
• IP address and related technical information where you interact with our online services
• marketing preferences

Who can see your information within the Company?

Access to your personal data is restricted to authorised directors, staff and associates who require it for legitimate business purposes.

How long is your information kept?

We will only keep your information for as long as necessary. The retention period is either dictated by law or our legitimate requirements. Once your information is no longer needed it will be securely and confidentially destroyed.

We typically retain personal data relating to marketing for three years after the financial year in which contact was last received from you or you last gave consent to receive marketing material from us.

We may retain records of marketing preferences and suppression requests for longer where necessary to ensure that individuals who have opted out of marketing communications do not receive future marketing messages.

How secure is your information?

We take appropriate technical and organisational measures to protect your information against unauthorised access, disclosure, alteration and destruction. You can read more about our approach to security at www.rrs.co.uk/security.

Who keeps your information updated?

You are responsible for keeping your personal details up-to-date. Please advise the Company of any changes.

Will your information be used for any automated decision making?

No. We do not undertake solely automated decision making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

Our Privacy Statement

You can access the Company's Privacy Statement at www.rrs.co.uk/privacy. This statement provides you with more information about how we address data protection and privacy as well as informing you of your rights.

Other Privacy Notices

You are likely to interact with us in more than one way, so our other privacy notices may apply to you in different scenarios. We are open and transparent about how we use your personal data. You can find all of our Privacy Notices at www.rrs.co.uk/privacy.

Changes to this Notice

Any changes to this privacy notice will take effect when the revised notice is published. If these changes affect how your personal data is processed, the Company will take reasonable steps to make sure you know.

Further Information