The Blueprint Guide - Privacy Policy

COMPANY DATA PRIVACY POLICY

Blueprint Travel Media Ltd is committed to protecting and respecting the privacy rights of its employees, customers and future clients.

This policy, our Terms and Conditions and any other documents referred to within this Policy sets out the basis on which the Company will process any personal data. 

1. Definitions

Data controller – is the person or persons who determine the purposes and reasons of processing personal data.

Data processor – is the person or persons who process personal data on behalf of the Data Controller.

Data subject – is the person or persons whose personal data is processed and thus held securely by the Company. 

Categories of data

Personal data - The GDPR applies to ‘personal data’  - any information relating to an identifiable person who can be directly or indirectly identified by reference to an identifier. 

Special categories personal data - The GDPR refers to sensitive personal data as ‘special categories of personal data’. The special categories specifically include genetic data, and biometric data where processed to uniquely identify an individual. 

Processing - Any operation or set of operations that is performed on personal data, such as collection, recording, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction or destruction.

Third party - A legal person, public authority, agency or body other than the data subject, controller, processor who, under the direct authority of the controller or processor, are authorised to process personal data.

2. The Company

Blueprint Travel Media Ltd is the data controller. This means the Company decides how personal data is processed and for what purpose. For all data matters and further explanations contact the Data Protection Officer on gdpr@blueprintmedia.org.uk.

3. Purpose of processing personal data

The Company stores personal data for the purpose of b2b marketing and the distribution of its publications.

4. Categories of personal data concerned

With reference to the categories of personal data described in the definitions section, the Company processes the following categories only:

Name

Email address

Phone Number

Address

Company Name and types of business.

All data has been obtained a result of an enquiry by the Data Subject to the Company at a trade show or as a result of a relationship with an association or society that both parties are a member of.

5. Legal basis for processing personal data 

Consent of the data subject.

Essential for the performance of a contract with the data subject or to take steps to enter into a contract.

Necessary for compliance with a legal obligation.

Needed to protect the interests of a data subject.

Required for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Essential for the purposes of the legitimate interests of the data controller or a third party, except where such interests are overridden by the interests or fundamental rights or freedoms of the data subject.

6. Sharing of personal data

Personal data will be treated as strictly confidential, and will be shared only for the purposes of publication distribution.

7. Storing personal data

The Company keeps personal data for a period of five years. An opt-out opportunity is provided with every correspondence.

8. Providing personal data

Individuals are under no statutory obligation or contractual requirement to provide personal data. 

9. Rights regarding personal data

All Data Subjects have the right to request a copy of the personal data held; correct any data if it is inaccurate; full erasure if it is not necessary to retain; withdraw consent at any time; restrict further processing and object to the processing of personal data.

10. Transfer of Data & Automated Decision Making

The Company do not transfer personal data outside the EEA and do not use automated decision making.

11. Further processing

If the Company wishes to use personal data for a new purpose, not covered by this Data Privacy Notice, then the Company will provide a new notice prior to commencing the processing and defining the relevant purposes and processing conditions including opportunity to opt out. 

12. Changes to the privacy policy

Any changes made to the policy will be posted on the Company website and, if appropriate, notified to all Data Subjects. 

13. How to make a complaint

To exercise all relevant rights please contact the Data Protection Officer on gdpr@blueprintmedia.org.uk.