We currently collect and process the following information:
Most of the personal information we process is provided to us directly by you (for example, through a contact form on our website or via email) for one of the following reasons:
We process personal data for the technical and functional management of our website and to make the website easy to use. By using your data, we can check how our website is used and we can improve its content and lay-out. This data also allows us to adequately secure our website.
We process this data based on the legitimate interest of Spotted Zebra in providing a well-functioning and secure website.
If you ask us a question via a contact form on the website, by telephone, email or post, we will process your personal data in order to answer that question.
To this end, we can process data such as your name, your contact information, your correspondence with Spotted Zebra, and any other personal data you provide that may be relevant for answering your question.
We process this information based on our legitimate interest or based on your consent. You are free to provide us with your personal data, and you can object to the processing thereof at any time.
We process your personal data to keep you informed of our activities, for example, with our newsletter and invitations to events.
To this end, we can process data such as your name, your job, your company name, your address, your email address and your preferred language.
We process this information based on our legitimate interest to keep our website users and prospects informed of our activities and services or based on your consent. You can object to the processing of your personal data at any time.
We have to comply with certain legal and regulatory obligations such as with respect to anti-money laundering. We must also comply with our tax and accounting obligations.
We may process your personal data to handle our own disputes and protect and enforce our rights.
To this end, we can process data such as your name, your contact information, your correspondence with Spotted Zebra and your financial data.
The processing of your personal data for this purpose is based on the legitimate interest of Spotted Zebra in safeguarding our rights in the event of disputes.
All our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with the instructions of the data controller. All data transferred to third parties is done so in accordance with the EU's Standard Contractual Clauses (SCC). For a detailed list of these third parties, please contact us by email at email@example.com.
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need-to-know. They will only process your personal information on instruction from the data controller, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach, and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
We do not store your personal data for longer than necessary for the purposes for which it is stored. We will retain and use your personal data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
After this period, we will securely destroy your personal information in accordance with the data controller's instruction, and in accordance with our data retention policy.
If you would like to find out how long we keep your personal data for a particular purpose you can contact us by email at firstname.lastname@example.org.
Some of our external third parties are based outside the European Economic Area (EEA), so their processing of your personal data will involve a transfer of data outside the EEA.
Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at email@example.com. if you wish to make a request.
If you have any concerns about our use of your personal information, you can make a complaint to us at firstname.lastname@example.org.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
The ICO’s address:
Information Commissioner’s Office
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk