GDPR 2018 PRIVACY NOTICE
Who We Are
Electric Airwaves is a communications training consultancy based in London, United Kingdom.
Introduction
This document relates to how Electric Airwaves processes personal data held in order to be compliant with the Data Protection Act (DPA), Privacy and Electronic Communications Regulations (PECR) and EU’s General Data Protection Regulation (GDPR). GDPR does not apply to information already in the public domain (for example, if your contact details are available on your company website).
Your Personal Data
Electric Airwaves may collect and store on a customer relationship management (CRM) system the following data about you: name, job title, business email address, business telephone and mobile telephone numbers and office address.
Electric Airwaves uses such data for three purposes:
- To provide and invoice our services to you if you are our client
- To provide information and quotations to you if you contact us inquiring about our services
- To make telephone contact and/ or email marketing information about our services which we believe may be of interest to you in your role as a Communications or related professional.
Legal Basis For Processing Personal Data
In considering our responsibilities under the GDPR, we have assessed the legal basis for collecting and processing personal data to be classified as ‘legitimate interests’ namely, to service Electric Airwaves’ clients, to respond to marketing enquiries and to proactively market our services to you.
‘Legitimate interests’ supposes that in communicating with you, what we send you is in line with what you as a Communications professional could reasonably expect to receive (for example, information about a training date or a crisis communications case study or information about media training which is a service that Communications people regularly purchase) and that it would not have an unwarranted impact on you.
That said, you can of course withdraw consent to us keeping your data or rectify what we hold at any time by emailing team@electricairwaves.com or by phoning +44 (0) 20 7323 2770 or by writing to us at 32-34 Great Marlborough Street, London W1F 7JB.
You should also know that we do not sell anyone’s personal data to third parties nor in sending you marketing information do we ‘profile’ the data to specifically target individuals.
You have a right to complain to the national data protection authority, which in the UK is the Information Commissioner’s Office (ICO).
Third Party Processors
Our carefully selected partners and service providers may process personal information about you on our behalf as described below:
We periodically appoint digital marketing agents to conduct marketing activity on our behalf, such activity may result in the compliant processing of personal information. Our appointed data processors include:
(i) RF Lead Generation Ltd (trading as Create To Generate) Reg. UK Co. 13287097, Suite 318, Dorset House, Duke Street, Chelmsford, CM1 1TB. You can contact Create To Generate and view their privacy policy here: https://createtogenerate.com/privacy-policy. Create To Generate are registered with the ICO Reg: ZA506559
(ii) Prospect Global Ltd (trading as Sopro) Reg. UK Co. 09648733. You can contact Sopro and view their privacy policy here: http://sopro.io. Sopro are registered with the ICO Reg: ZA346877 their Data Protection Officer can be emailed at: dpo@sopro.io.
Our Website
When you visit our website, personal data may be collected when you choose to provide it to us upon completing forms or through your Internet Protocol (IP) addresses being identified through Google Analytics.
Retention Policy
Electric Airwaves will process personal data during the duration of any contract and will continue to store only the personal data needed for six years after the contract has expired to meet any legal obligations. After six years any personal data not needed will be deleted.
Data Storage
For security, our CRM data which is protected by passwords is held in ‘the cloud’ so on different (and possibly multiple) external servers. Should a data breach occur, we will establish the likelihood and severity of the resulting risk to your rights and freedoms and take the appropriate actions.