Updated October 2018
Any personal data collected through The Gate Edinburgh website will be treated as confidential. We have a legal duty to protect any information we collect from you. We use leading technologies to safeguard your data, and keep strict security standards to prevent any unauthorised access to it.
We’re a strategic and creative agency who believes good ideas make things better – for brands and the world.
Our Data Champions monitor how we gather and process personal information from our website.
We collect several types of information from users: Your personal details if you use the ‘Contact us’ form and your CV should you use the upload facility in the ‘Jobs’ section. We also collect site usage information from session cookies and log files.
We use your submitted personal details and data to:
In order to process and use your personal information lawfully, we rely on the following legal bases:
When users enter the thegateedinburgh.co.uk website, their device will automatically be issued with ‘cookies’. Cookies are text files which identify users’ computers to our server. The website then creates ‘session cookies’ to store some of the preferences of users moving around the website. Cookies in themselves do not identify individual users but identify only the computer used and they are deleted on departure from the website.
Many websites do this to track traffic flows, whenever users visit those websites.
The information collected by thegateedinburgh.co.uk will include IP Address, pages visited, browser type and operating system. The data will not be used to identify any user personally.
Users have the opportunity to set their computers to accept all cookies, to notify them when a cookie is issued, or not to receive cookies at any time. The last of these means that certain personalised services cannot then be provided to that user.
We may share your personal information with third party organisations to enable us to deliver marketing services. These third parties do not retain, share, store or use personally identifiable information for any secondary purposes and are fully appraised by us before we enter into contracts with them. A third-party data processor is an entity that processes Personally Identifiable Information on behalf of a data controller (The Gate Edinburgh). The data processor will not pass on the data or act upon the data without instruction from the data controller.
One example is where we use the third-party service, Google Analytics, to collect information on how you use the site, using cookies and page tagging techniques. The information we – and Google – collect doesn’t identify anyone.
If we do want to collect personally identifiable information through the site, we will be upfront about it.
We will keep your information only for as long as necessary depending on the purpose for which it was provided. When determining the relevant retention periods, we will take into account the guidelines issued by relevant data protection authorities. Otherwise, we securely erase your information once this is no longer needed.
Log files stored on the thegateedinburgh.co.uk web server allow the recording and analysis of users’ use of the website. Log files do not contain any personal information.
This website contains links to other sites. Please be aware that the thegateedinburgh.co.uk is not responsible for the privacy practices of other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of each and every website that collects personally identifiable information. This privacy statement applies solely to information collected by this website.
We do not use your personal information for any form of automated decision-making.
We, or our third-party service providers may host, store and handle your personal information outside of the European Economic Area (EEA).
We will only permit this to happen if adequate safeguards have been put in place to protect your personal information. This means that we will:
Your rights in relation to the personal information we process:
What does this mean?
|1. Right to be informed||You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. This is why we’re providing you with the information in this Privacy Notice.|
|2. Right of access||You have the right to obtain access to your personal data (if we’re processing it) and certain other information (similar to that provided in this Privacy Notice) by making a data subject access request. This is so you’re aware and can check that we’re using your personal data in accordance with data protection law.|
|3. Right to rectification||You are entitled to have your personal data corrected if it’s inaccurate or incomplete.|
|4. Right to erasure||This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there’s no compelling reason for us to keep it. This is not a general right to erasure; there are exceptions.|
|5. Right to restrict processing||You have rights to ‘block’ or suppress further use of your personal data in certain circumstances. When processing is restricted, we can still store your personal data, but may not use it further.|
|6. Right to data portability||You have the right to obtain and reuse your personal data in a structured, commonly used and machine-readable format in certain circumstances. In addition, where certain conditions apply, you have the right to have such information transferred directly to a third party.|
|7. Right to object to processing||You have the right to object to certain types of processing in certain circumstances. In particular, the right to object to the processing of your personal data based on our legitimate interests or on public interest grounds; the right to object to processing for direct marketing purposes (including profiling); the right to object to the use of your personal data for scientific or historical research purposes or statistical purposes in certain circumstances.|
|8. Right to withdraw consent||If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your personal data for direct marketing.|
You have a right of access to any personal data we hold about you, by making a Subject Access Request (SAR). And if you believe that the data we hold is inaccurate or incomplete you can ask us to update our records.
If you are unhappy with the way in which we process your personal data you can request that we stop or restrict the processing we complete using your personal data or ask us to delete the personal data we hold about you. In some circumstances we may not be able to comply with your request. This is because some of these rights are conditional and can only be applied in certain circumstances and/or where there is no compelling reason to continue to process your personal data.
The Gate Edinburgh
100 Ocean Drive,
Edinburgh, EH6 6JJ
If you’re not satisfied with our response to any complaint or believe our processing of your information does not comply with data protection law, you can make a complaint to the Information Commissioner’s Office (ICO) using the following details:
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone number: 0303 123 1113
Notification of Changes
We may update our Privacy Notice from time to time. If we do, we will post the changes to this privacy statement, and other places we deem appropriate so users are always aware of what information we collect, how we use it and under what circumstances. We would encourage you to visit our website regularly to stay informed of the purposes for which we process your information and your rights to control how we process it. If we are going to change the way we use personal data from that currently stated we will notify users via email.