In all our relationships and commercial transactions (whether contractual, moral or social) Z/Yen strives to ensure that fairness and reasonableness prevails in all circumstances.
Z/Yen expects all its people, including its subcontractors and partner organisations, to behave legally, decently, fairly and ethically in all circumstances. This expectation includes, but is not restricted to compliance with appropriate professional regulations, standards and guidelines.
Z/Yen is committed to protecting and respecting your privacy.
This policy (together with our terms and conditions of use) set out the basis on which any personal data we collect from you, or that you provide to us, might be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we might treat it.
For the purpose of the Data Protection Act 1998 (the "Act") and the General Data Protection Regulation (EU) 2016/679 (GDPR), the data controller is Z/Yen Group Limited of 41 Lothbury, London EC2R 7HG.
We might collect and process the following data about you:
The transmission of information via the internet is not completely secure. We shall do our best to protect your personal data, but we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
We might use information held about you in the following ways:
Our site might, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
We might disclose your personal information to any company in our group, which means our subsidiaries, our ultimate holding company and its subsidiaries.
We might disclose your personal information to third parties in the event that Z/Yen Group Limited or substantially all of its assets are acquired by a third party; if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms and conditions of use and other agreements; or to protect the rights, property, or safety of Z/Yen Group Limited, our customers or others.
We might hold personal information about you for one or more of the following legal bases for processing:
Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract – if we have proactively contacted you, it is possible that you have or someone in your organization has provided your details for this legal basis.
Legitimate interests: the processing is necessary for your legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests. - if we have proactively contacted you, it is possible that you have or someone connected with you has provided us with your details for this legal basis. We are a research based organization whose objective is to promote societal advance; this results in our legitimate interests being diverse and long-term.
We believe that it is highly unlikely that our use of your data should have any adverse effect on you nor should our use of your data provide you with cause for any legitimate concerns. Nonetheless, we fully endorse the GDPR individual rights and have processes in place to enable you to assert and enforce those rights. This link to the GDPR guidance lists your rights, each of which is a link to a full description of that right.
For example, you have the right to withdraw your consent for us to process your data at any time, by you simply asking to de-register or unsubscribe. As another example, GDPR gives you the right to access information we hold about you. You can exercise these rights, or indeed any of your rights under GDPR by contacting us at firstname.lastname@example.org.
If you think there is a problem with the way we are handling your data and/or you are dissatisfied with the way we have tried to address your requests or concerns, you have the right to complain to the Information Commissioner’s Office (ICO) – click here for a link to the relevant part of the ICO web site.
We continue to hold data for processing while we have a legitimate basis for processing, unless you withdraw consent, at which point we would, within a reasonable time (normally within a few days or weeks) archive the personal data we hold about you. We retain archived data for a minimum of seven years, in many cases indefinitely, unless we receive a legitimate, specific request from an individual who wishes us to remove their personal data from the archive in accordance with their right under GDPR.