Burning Series ("us", "we", or "our") operates the website accessible at londonartworkshop.co.uk, including the App (both hereinafter referred to as the "Service") for which we are acting as a data controller with respect to the personal data of its users.
This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data. We are committed to safeguarding the privacy of our website visitors and service users and therefore we implemented numerous technical and organisational measures to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed.
By using the Service, you agree to the collection and use of information in accordance with this policy.
Personal data means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online id or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Data subject is any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing.
Controller or controller responsible for the processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
We may include links to third party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third party sites and are not responsible for their privacy statements.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to only those persons who need to know. After the expiration of the retention period, which determines how long personal data is going to be stored, the corresponding information is routinely deleted, as long as it is no longer necessary for the fulfilment of the Service or the initiation of using our Service.
Since we operate outside the European Economic Area (EEA), this could involve transferring your data outside the EEA or the origin of where your data is collected. Some of our external third parties are based outside the EEA too, so their processing of your data will also involve a transfer of data outside the EEA. Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring the provider is either part of the Privacy Shield or its country have been deemed to provide an adequate level of protection for personal data by the European Commission.
We may process personal data if it is necessary for the performance of a contract to which the data subject is party, for example, when processing operations are necessary for the supply of goods or to provide any other service, which is covered by Article 6(1) lit. b GDPR. Personal data may also be processed if we obtain consent for a specific purpose as stated in Article 6(1) lit. a GDPR. Processing operations which are not covered by any of the above mentioned legal grounds are based on legitimate interest. Legitimate interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent).
If you have any concerns or questions about our use of your personal data, you can contact our Data Protection Officer through the private messaging system on our website (londonartworkshop.co.uk) by sending a message to one of the Team members.