This Privacy Notice explains how and why Bland Group trading as OSG use your personal data, to make sure you stay informed and can be confident about giving us your information.
We treat the handling of personal data seriously and we respect your privacy and your rights to control your personal data.
The Privacy Notice below details how we will treat your personal data after it has been collected by us through your use of the website, or through providing us with your details when you make an enquiry with us.
We assure you that we will only use your data as specified here and for our legitimate business interests.
In this Privacy Notice, “we”, “us” and “our” refer to Bland Group.
When you fill in forms on our website, register to use our website, complete a booking, sign up to our newsletter, consult with our team, send us an email, participate on social media, enter a competition, promotion or survey, or send us your CV, or communicate with us in any way you are voluntarily giving us your personal data.
This personal data you give us may include name, title, address, date of birth, age, gender, employment status, demographic information, email address, telephone numbers, personal description, photographs, CCTV images or credit/debit card details to take payment for contracted services.
In the interest of your privacy, we only collect, use and retain information required for our legitimate business interests, such as processing bookings and queries or providing you with our Group marketing materials
Where you have actively engaged our services, our holding of your data is in order to process your booking, fulfil your travel arrangements and otherwise perform the contract we have with you. Therefore, the lawful basis for holding and processing your data would be a “contractual” basis.
We would also retain and process your personal data if there is a legal obligation to do so. In order to operate (provide our services to you) and improve our business (enhance your experience), there is also a valid legitimate interest basis for holding and processing your data.
We might also have requested your explicit consent in order to use your personal data. Where we process personal data based on consent, individuals have a right to withdraw consent at any time. We do not generally process personal data based on consent (as we can usually rely on another lawful basis). To withdraw consent to our processing of your personal data please email us at firstname.lastname@example.org.
Bland Group has adopted the following principles to support and govern its collection and processing of Personal Data:
Personal Data shall only be retained for as long as it is required to fulfil contractual requirements, or to provide statistics to our Group.
We may disclose your personal information to any member of our Group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.
We may disclose your personal information to third parties if we sell or buy any business or assets (in which case we may disclose your personal data to the prospective seller or buyer of such business or assets).
We’ll never sell your personal data and will only share it with organisations we work with when it’s necessary and the privacy and security of your data is assured.
We do not transfer personal data outside of the European Economic Area.
We will keep your information for as long as we need it for the purpose it is being processed for, taking into account any legal obligation we have (e.g. to maintain records for fiscal or reporting purposes), any other legal basis we have for using your information (e.g. your consent, performance of a contract with you or our legitimate interests as a business). We will keep the information for a period which enables us to handle or respond to any complaints, queries or concerns relating to our services. The information may also be retained so that we can continue to improve your experience with us.
We will actively review the information we hold and delete it securely, or in some cases anonymise it, when there is no longer a legal, business or customer need for it to be retained. If you stop interacting with us as a customer, we will remove or anonymise your information in a timely manner.
Individuals have certain rights over their personal data and data controllers are responsible for fulfilling these rights. We are the data controllers, where we decide how and why personal data is processed,
You have a right of access to personal data held by us as a data controller. You also have the right to ask Bland Group not to process your personal data for marketing purposes.
Your right to access can be exercised in accordance with the EU General Data Protection Regulation 2016 by completing a Data Subject Access Request (DSAR) Form. You can obtain a copy by emailing email@example.com
To progress your request two forms of identification (ID) will also be required before any data is compiled, please have one form of photo ID (either a valid passport or driving license) AND a valid proof of address, Utility Bill/Council Tax Bill / Bank Statement/Credit Card Statement (One document required). These must be dated within the last three months.
Once we are satisfied that you meet the criteria for disclosure of data under the Data Protection Legislation and you have provided sufficient information for us to confirm your identity and accept your application for processing, you will receive a response within 28 days from that date.
Please note your request may be subject to an extension of up to two calendar months should the situation require it. A charge may be made, for this, if the retrieval of records is unreasonably time consuming.
To update personal data submitted to us, you may email us at firstname.lastname@example.org. When practically possible, once we are informed that any personal data processed by us is no longer accurate, we will make corrections (where appropriate) based on your updated information.
This privacy statement is intended to provide information about what personal data we collect about you and how it is used. As well as rights of access and amendment referred to above, individuals may have other rights in relation to the personal data we hold, such as a right to erasure/deletion, to restrict or object to our processing of personal data and the right to data portability.
If you wish to exercise any of these rights, please send an email to email@example.com.
Recipients of marketing material from any of our Group companies are likely to have previously subscribed to our newsletters, responded to an event invitation or used our services.
If you are a regular recipient and wish to continue receiving our newsletters (including special offers) you do not need to do anything at this point. If you no longer wish to receive these please unsubscribe by sending an email to firstname.lastname@example.org. Your details will be deleted from our records provided there is no other reason to retain them, as described in this privacy Notice.
You can unsubscribe at any point by clicking on the relevant link in any of our future newsletters. You can re‐subscribe again on our website at any time.
We take the security of all the data we hold very seriously. We follow internationally recognised security standards. We have a framework of policies, procedures and training in place covering data protection, confidentiality and security and regularly review the appropriateness of the measures we have in place to keep the data we hold secure.
Bland Group may obtain information about your general internet usage by using a cookie file which is stored on the hard drive of your computer. Cookies contain information that is transferred to your computer’s hard drive. They help us to improve our site and to deliver a better and more personalised service.
They enable us:
Please note that no attempts are made to identify individual users or store personal information. Cookies cannot harm your computer.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
We understand the importance of protecting children’s information, especially in an online environment, and we do not knowingly collect or maintain information about children. If you learn that a child under the age of 13 has provided us with their personal information without having parental consent, please contact us immediately at email@example.com so that we can take appropriate action.
Any information, communications, or materials you submit to us via a social media platform is done at your own risk without any expectation of privacy. We cannot control the actions of other users of these platforms or the actions of the platforms themselves. Your interactions with those features and platforms are governed by the privacy policies of the companies that provide them.
Our website includes links to other websites, whose privacy practices may be different from ours. If you submit personally identifiable information to any of those sites, your information is governed by their privacy policies.
We encourage you to carefully read the privacy Notice of any website you visit
We recognise that transparency is an ongoing responsibility, so we will keep this privacy notice under regular review.
You should check this page occasionally to ensure you are happy with any changes to this Notice.
We may notify you of significant changes to this Notice by email.
This privacy statement was last updated on 25th May 2018.
If you are concerned about an alleged breach of privacy law or any other regulation by Bland Group, you can contact us via email firstname.lastname@example.org.
If you are not satisfied with the way in which Bland Group has resolved your complaint, you have the right to complain to the data protection authority in your country. You may also refer the matter to a court of competent jurisdiction.
If you have any questions or concerns about the information we hold about you, you may email us at email@example.com.