confirmflashcookie

1BANNATYNEPRIVACYANDCOOKIESNOTICEThisistheBannatyneGroupprivacyandcookienotice.
TheBannatyneGroupconsistsofTheBannatyneGroupPLC,BannatyneFitnessLimited,BannatyneFitness(2)LimitedandBannatyneHotelsLimited.
1.
Introductionandsummary1.
1.
IntroductionThanksforreadingourprivacynotice.
Ittellsyouhowwecollect,useandshareyourpersonalinformationandwhatyourrightsare–andhowtoexercisethem.
Thisnoticeappliestoyouifyouare:Acustomer:ahealthclubmember(ortheirguest),spauser,hotel/restaurantguestorsomeonewhobuysproductsfromourwebsite,ahealthclub,hotelorspaAsupplier:asoletraderorpartnershiporacontactforusatacorporatesupplierwhoprovidesservicestousAconsultant:anadviser,consultant,orotherprofessionalexpertAjobapplicant:someonewhoisinterestinginworkingforusAninterestedperson:someonewhomakesanenquiryorcomplaintorcorrespondsorentersacompetitionwithusorvisitsus,whoisn'tinanyofthecategoriesaboveArelativeofamemberofourstaff:aclosefamilymemberornextofkinofamemberofourstaff,orAwebsitevisitororuserofsocialmedia:avisitortoourwebsiteoruserofsocialmedia.
Thisnoticedoesn'tapplytoBannatyneGroupstaff,afreelanceserviceproviders(personaltrainer,swimminginstructororclassinstructor)orshareholders.
Thereareacoupleoftechnicaldefinitionstogetoutofthewayfirst.
Heretheyare.
By"personalinformation"wemeanpersonaldataasdefinedinUKdataprotectionlaw.
Ingeneral,itmeansanyinformationrelatingtoyou,whichidentifiesyouorallowsyoutobeidentified.
Thatmaybeyourname,anIDnumber,location,anonlineidentifierorfactorsspecifictoyou(e.
g.
physical,physiology(thoughts,feelings),genetic,mental,economic,culturalorsocialfactors).
By"sensitive"personalinformationwemeantwothings:1.
what'stechnicallyknownas"specialcategories"(personalinformationrevealingracialorethnicorigin,politicalopinions,religiousorphilosophicalbeliefs,ortradeunionmembership,geneticdata,biometricdataforthepurposeofuniquelyidentifyingan2individual,dataconcerninghealthordataconcerninganindividual'ssexlifeorsexualorientation)and2.
criminaldata(criminaloffencesorrelatedsecuritymeasures,includingtheallegedcommissionofoffences,proceedingsforanoffencecommittedorallegedtohavebeencommittedorthedisposalofthoseproceedings,includingsentencing).
Forease,we'vesplitthisprivacynoticeupintoparts:Part1:IntroductionandsummaryPart2:ImportantinformationaboutyourrightsinrelationtoconsentandtoobjecttoouruseofyourpersonalinformationPart3:KeyinformationrequiredbytheGDPRPart4:CookiesandsimilartechnologiesIfyouhaveanyqueriesaboutthisprivacynotice,pleasecontactus.
Pleasesee"Ouridentityandcontactdetails"insectionaand"Dataprotectionofficer"sectionbof"KeyinformationrequiredbytheGDPR"belowforourdataprotectionofficer'scontactdetails.
1.
2.
SummaryHere'sasummaryoverviewtohelpyounavigate.
Findyourselfinthelefthandcolumn,thenreadacrossthetable.
Typeofindividual(current,pastorprospective)OurmainusesofyourpersonalinformationWheretofindoutmoreHealthclubmembers:amemberofoneofourhealthclubsoraguestofamember.
Toenterintoacontractwithyou,youremployerorathirdpartyproviderofgymservices.
Toprovideagreedhealthclubservicestoyouasourcustomer.
Tokeepaccountsandrecords.
Wemay,ifyouconsent,sendyouoffersandnewsbyemail.
Wetrackwhetheremailsareopenedandwhetherlinksintheemailsareclickedon.
Howtowithdrawyourconsentorobjecttoouruse(whereapplicable)LookinPart2.
Ittellsyouhowtowithdrawanyconsentyou'vegiven(seesectionjaswell)andhowtoobjecttobothdirectmarketingandtoourusewhereit'sbasedonabalancingtest(called"legitimateinterests")whichinvolvesweighingourinterestsorathirdparty'sinterestsagainstyourrights.
Otherinformation3Toidentifyyouthroughourclubentrysystemsandrecordwhenyouareintheclub.
OurwristbandsmaybeusedforclubentrybutalsoforloggingintoyourMyWellnessapponyourphonewhenusingTechnogymequipmentintheclub,forcontactlesspaymentandasalockerkey.
Tointeractwithyouthroughourapps.
TheMyFitAppletsyoubooksessions,communicatewiththeclubandseecluboffersandnews,whicharepersonalisedifyouareintheclub(e.
g.
withtoday'sofferfromthecafé).
TheMyZoneappworkswithacardiobelttomonitorheartrate;wedonotgetyourpersonalinformationfromthatapp.
TheMyWellnessappworkswithgymequipmentsuppliedbyTechnogym;wedonotgetyourpersonalinformationfromthatappeither.
Torecordtelephonecallswithyoufortraining,monitoringandevidentialpurposes;werecordinboundandoutboundcallstoandfromtheheadofficecallcentresandmayrecordcallstoandfromthelegaldepartment.
TorecordCCTVimagesatsomeofourclubsforthepreventionanddetectionofcrime(bothrevenueandassetprotection)andforhealthandsafety(forexampleatthepoolside).
ANPRisusedbyParkingEyeatsomeofoursitesbutwedonothaveaccesstoimages.
LookinPart3;here'swhat'sinthedifferentsections.
Sectionsaandb:ourcontactdetailsSectionc:thepurposesandlegalbasisforouruseofyourpersonalinformationSectiondthelegitimateinterestsoftenunderpinningouruseofyourpersonalinformationSectione:thetypesofpersonalinformationwemaygetfromsomeoneotherthanyouSectionf:thirdpartieswithwhomwemayshareyourpersonalinformationSectiong:transfers(exports)ofpersonalinformationSectionh:storageperiodsSectioni:yourGDPRrightsSectionj:withdrawingconsentSectionk:complaintstotheICOSectionl:informationyoumustprovide(eitherbylaworunderacontract)Sectionm:sourcesofpersonalinformation(whereyouaren'tthesource).
Sectionn:automateddecisions.
Customersmayfindfurthercustomer-specificinformationonforms,onpre-exerciseandspatreatmentquestionnaires,clubrulesandintheircontracts.
4Ifyouuseourpublicwifi(providedbySky),Skywillcollectyourmarketingpreferencesandsharethemwithus.
Ifyoupaythroughoneofourtills,providedbyClover,yourpaymentreceiptisstoredbyClover.
Tointeractwithyouonsocialmedia(Facebook,TwitterorInstagram).
Ifyouareunder16,yourrecordwillbelinkedtoyourparent'sandwewillnormallycommunicatewithyourparentratherthanwithyou.
Yourpersonalinformationmaybesharedintra-groupifyouuseotherhealthclubs,underourcross-usagepolicy.
Ifyouhavesignedupwithathirdpartygymservicesprovider,thendependingontheprovider,theymayprovideuswithyourpersonalinformationincludingyouranswerstoourpre-exercisequestionnaireormaysimplyvalidateyourmembershipwhenyousignupwithus.
Forrelatedpurposessuchasanalysistohelpusfindnewmembers.
Spausers:auserofaspaatoneofourhealthclubsorhotels.
Toenterintoacontractwithyouandtoprovideagreedspaservicestoyouasourcustomer.
Tokeepaccountsandrecords.
Wemay,ifyouconsent,sendyouoffersandnewsbyemail.
Wetrackwhetherouremailsareopenedandwhetherlinksintheemailsareclickedon.
5Tointeractwithyouthroughourspaapp.
Torecordtelephonecallswithyoufortraining,monitoringandevidentialpurposes;werecordinboundandoutboundcallstoandfromthespacallcentreandmayrecordcallstoandfromthelegaldepartment.
TorecordCCTVimagesatourspareceptionsforthepreventionanddetectionofcrime.
ANPRisusedbyParkingEyeatsomeofoursitesbutwedonothaveaccesstoimages.
Ifyoupaythroughoneofourtills,providedbyClover,yourpaymentreceiptisstoredbyClover.
Tointeractwithyouonsocialmedia(Facebook,TwitterorInstagram).
Forrelatedpurposessuchasanalysistohelpusfindnewspausers.
Hotelguest:ahotelorrestaurantguestatoneofourhotels.
Toenterintoacontractwithyouoryouremployerorathirdpartywhoispayingyourhotelbill.
Toprovideagreedhotelaccommodationand/orrestaurantfoodtoyouasourcustomer.
Tokeepaccountsandrecords.
Wemay,ifyouconsent,sendyouoffersandnewsbyemail.
Wetrackwhetherouremailsareopenedandwhetherlinksintheemailsareclickedon.
TorecordCCTVimagesatourhotelsforthepreventionanddetectionofcrime.
6Ifyouuseourpublicwifi(providedbySky),Skywillcollectyourmarketingpreferencesandsharethemwithus.
Ifyoupaythroughoneofourtills,providedbyClover,yourpaymentreceiptisstoredbyClover.
Tointeractwithyouonsocialmedia(Facebook,TwitterorInstagram).
Ifyoubookhotelaccommodationthroughathirdpartysuchasatravelagentorportal,wewillreceiveyourinformationfromthatthirdpartyandwillconfirmthebookingandthefactyoustayedatthehotelwiththemforpaymentpurposes.
Productcustomers:anindividualwhobuysproductsfromourwebsite,orfromoneofourspas,healthclubsorhotels.
Toenterintoacontractwithyouandtoprovideyouwiththeproductyouhavebought.
Tokeepaccountsandrecords.
Wemay,ifyouconsent,sendyouoffersandnewsbyemail.
Wetrackwhetherouremailsareopenedandwhetherlinksintheemailsareclickedon.
Ifyoupaythroughoneofourtills,providedbyClover,yourpaymentreceiptisstoredbyClover.
Asupplier:asoletraderorpartnershiporacontactforusatacorporatesupplierwhoprovidesservicestousasabusinessToreceiveagreedservicesfromyouoryouremployerorcompany.
Tokeepaccountsandrecords.
7Aconsultant:anadviser,consultantorotherprofessionalexpertwhoprovidesservicestousasabusinessToreceiveagreedservicesfromyouoryouremployerorcompany.
Tokeepaccountsandrecords.
Ajobapplicant:someonewhoisinterestedinworkingforusToevaluateyourapplicationandenterintoaservicesoremploymentcontractorsimilarcontractwithyou.
Aninterestedperson:anindividualwhomakesanenquiryoracomplaintorcorrespondswithusorvisitsus(includingcarersandotherrepresentativesofmembers)butwhoisn'tinanyofthecategoriesaboveTorespondtoyourenquiryorcomplaintorcorrespondwithyou.
Torecordtelephonecallswithyoufortraining,monitoringandevidentialpurposes;werecordinboundandoutboundcallstoandfromthehealthclubandspacallcentresandmayrecordcallstoandfromthelegaldepartmentTorecordCCTVimagesatsomeofourhealthclubs,spasandhotelsforthepreventionanddetectionofcrimeandforhealthandsafety.
ANPRisusedbyParkingEyeatsomeofoursitesbutwedonothaveaccesstoimages.
Arelativeofamemberofourstaff:aclosefamilymemberornextofkinofamemberofourstaffOurmemberofstaffmaygiveusyourname,addressanddateofbirthwhichwemayusetocontactyouinanemergency.
Avisitortoourwebsiteorsocialmediausers:aWeadvertiseonFacebook,Twitter,InstagramandYouTube.
Youmayseeoneofouradsasaresult.
LookinPart3:Sectionsaandb:ourcontactdetails8visitortoourwebsiteorsocialmediauser.
WeuseGoogleAnalyticsonoursitewhichcaptureswhereindividualsdiscontinuetheorderprocess;thereportGooglegivesusdoesnotidentifyindividuals.
Sectioni:yourGDPRrightsSectionk:complaintstotheICOSectionm:sourcesofpersonalinformation(whereyouaren'tthesource).
2.
ImportantinformationaboutyourrightsinrelationtoconsentandtoobjecttoouruseofyourpersonalinformationYourrightsinrelationtoconsent:Youmay,atanytime,withdrawyourconsentorexplicitconsenttoususingyourpersonalinformationorsensitivepersonalinformationassummarisedbelow.
Tosendyoudirectmarketingbasedonyourconsent.
Thismaybebyemail,phoneortext.
Wetrackwhetheremailsareopenedandlinksclickedon.
Towithdrawconsent,pleaseusetheopt-outoptioninthedirectmarketing.
Membersmayalsochangetheirsettingsinthememberportal.
Toholdanduseyourhealthdatatoprovideyouwithhealthclubmembershipand/orspatreatments.
Towithdrawconsent,pleasecontactus.
Tomakereasonableadjustments,forpersonswithadisability.
Towithdrawconsent,pleasecontactus.
Tosetandreadcookiesonyourdevice.
Wewillrelyonyourbrowsersettingstoindicateyourconsenttotheuseofcookies.
Towithdrawyourconsent,pleaseadjustyourbrowsersettings.
Pleasesee"Cookiesandsimilartechnologies"belowforinstructions.
Pleasesee:sectionain"KeyinformationrequiredbytheGDPR"belowforourcontactdetailssectioncin"KeyinformationrequiredbytheGDPR"belowforfurtherdetailsofwherewerelyonyourconsentsectionjin"KeyinformationrequiredbytheGDPR"belowforfurtherdetailsofyourrighttowithdrawconsent,and"Cookiesandsimilartechnologies"belowforinformationaboutcookiesandsimilartechnologiesusedonthissite.
9Yourrighttoobjecttoouruseofthe"legitimateinterests"basisforprocessing:Youmay,atanytime,objecttodirectmailandouruseofyourpersonalinformationwhichisbasedonourownorothers'legitimateinterests,assummarisedbelow.
OurownlegitimateinterestsTooperateandimproveourbusinessTomanagerelationshipswithcustomersTomanagerelationshipswithsuppliersTodetectandpreventfraudTosendyoudirectmailifyouarenotregisteredwiththeMailPreferenceServiceanddonotobjectTopromoteandadvertiseourproductsandservicesonlineForinternalgroupadministration,forexampletoenablememberstobenefitfromthecross-usagepolicyacrossourhealthclubsFornetworkandinformationsecurityToreportpossiblecriminalacts/threatstocompetentauthorities.
OtherslegitimateinterestsWeoperateCCTVatourclubs,spas,hotelsandheadoffice.
Wehaveentrysystemstoourclubsandwerecordcallstoandfromourcallcentresandthelegaldepartment.
Itisinthelegitimateinterestsofanyonevisitingourclubs,spasandhotelstohaveasecureandsafeenvironment;ofourcallerstobenefitfromqualitychecksandtoevidencecallsmadeandreceived.
Youmayobjecttoouruseonthatbasis.
Toexerciseyourright,pleasecontactus.
Pleasesee:sectionain"KeyinformationrequiredbytheGDPR"belowforourcontactdetailssectiondin"KeyinformationrequiredbytheGDPR"belowforfurtherdetailsofourrelianceonthelegitimateinterestsbasisforprocessing,andsectioniin"KeyinformationrequiredbytheGDPR"belowforfurtherdetailsofyourrighttoobject.
103.
KeyinformationrequiredbytheGDPRHereareimportantdetailsaboutusandouruseofyourpersonalinformation.
RequirementOurdetailsa.
OuridentityandcontactdetailsIdentityandcontactdetailsand,whereapplicable,oftherepresentativeTheBannatyneGroupPlc,companynumber09618868,ICOZA174260BannatyneFitnessLtd,companynumber03287770,ICOZ8376772BannatyneFitness(2)Ltd,Companynumber07674830,ICOZA173884BannatyneHotelsLimited,Companynumber03271621,ICOZA156876Address:PowerHouse,HaughtonRoad,Darlington,CountyDurham,England,DL11STTelephone:01325628922Email:gdpr@bannatyne.
co.
ukWeareregisteredasacontrollerwiththeInformationCommissioner.
Ourregistrationnumbersareabove.
Itwouldbeveryhelpfulifyouwouldtellusexactlywhyyouarecontactingus.
Forexampletoexercisearight,pleaseputthenameoftherightinthesubjectlineoftheemail.
Thankyou.
b.
DataprotectionofficerandqueriesContactdetailsofthedataprotectionofficer,whereapplicableTocontactourdataprotectionofficer,pleaseusethefollowingdetails:Email:gdpr@bannatyne.
co.
ukTelephone:01325628922Address:PowerHouse,HaughtonRoad,Darlington,CountyDurham,England,DL11STc.
PurposesandlegalbasisThepurposesoftheuseforwhichthepersonalinformationisintendedaswellasthelegalbasisfortheuseHereisasummaryofthepurposesforwhichweusepersonalinformationandthelegalbasesforouruse.
OurpurposesLegalbasis(allpersonalinformation)Additionallegalbasis(sensitivepersonalinformation)Toenableustoprovideourhealthclub,spaandhotelContractLegalobligationExplicitconsent11Here'sakeytothesecondcolumn:Consent:yourconsenttooneormorespecificpurposesservicesandsellourproductstoourcustomersLegitimateinterestsPrevention/detectionofunlawfulactsRegulatoryrequirementsrelatingtounlawfulacts/dishonestyetc.
Contract:enteringintoacontractwithyouorperformingacontractwithyouLegalobligation:we'rerequiredbylawtodothisVitalinterests:toprotectyourownoranotherindividual'svitalinterests(e.
g.
lifeordeathsituation)Tosupportandmanagejobapplicants(whereappropriate)ConsentContractLegalobligationVitalinterestsLegitimateinterestsExplicitconsentEmployment,socialsecurityandsocialprotectionlawVitalinterestsLegalclaimsEqualopportunitiesPrevention/detectionofunlawfulactsHealthorsocialcarePublicdomainPublictask:we'rerequiredtodothisbecauseit'sadutyofoursasapublicbody;orit'srequiredinthepublicinterestLegitimateinterests:we'veidentifiedthisasalegitimateinterestofoursorathirdparty;weconsiderthatuseofyourpersonalinformationisnecessarytoachievethatlegitimateinterest;andwe'vebalancedallthatagainstyourinterests,rightsandfreedomsThethirdcolumngetsabitmoretechnical.
Wherewe'redealingwithsensitivepersonalinformationweneednotonelegalbasisbuttwo,fromadifferentlist(andthelistisalotlonger).
Toadvertiseandpromoteourproducts/servicesandbusinessConsentLegitimateinterestsExplicitconsentPublicdomainTomaintainouraccountsandrecordsContractLegalobligationLegitimateinterestsLegalclaimsPrevention/detectionofunlawfulactsRegulatoryrequirementsrelatingtounlawfulactsanddishonestyetc.
Themainonesare:Explicitconsent:yourexplicitconsenttooneormorespecificpurposesAdvertising,marketingandpublicrelationsbyBannatyneFitnessLtdforotherBannatynegroupcompaniesConsentLegitimateinterestsN/A12Legalclaims:toestablish,exerciseordefendalegalclaimPrevention/detectionofunlawfulacts:thisiswherewemustusepersonalinformationwithoutconsentsoasnottoprejudicepreventingordetectingunlawfulactsRegulatoryrequirementsrelatingtounlawfulactsanddishonestyetc.
:thisiswherewemustusepersonalinformationwithoutconsenttocomplywith(orhelpsomeoneelsecomplywith)aregulatoryrequirementthatinvolvesestablishingifsomeonehascommittedanunlawfulactorisdishonestetc.
Publicdomain:you'vedeliberatelyputyoursensitivepersonalinformationintothepublicdomainVitalinterests:that'sthesameascolumn2exceptithastobewheretheindividualisincapable(physicallyorlegally)ofgivingconsent.
YoucanfindmoredetailsontheICOwebsiteathttps://ico.
org.
ukTheuseofCCTVsystemstomonitorandcollectvisualimagesforthepurposesofhealthandsafetyonthepoolsideofhealthclubs,revenueprotectionandthepreventionanddetectionofcrime.
LegitimateinterestsPublicdomainPrevention/detectionofunlawfulactsRegulatoryrequirementsrelatingtounlawfulacts/dishonestyetc.
Tocollectdebts,dealwithdisputesandbringanddefendlegalclaimsLegitimateinterestsLegalclaimsToanalysedataandproducereportsforbusinessplanningandmanagementLegitimateinterestsN/AThelicensinginofpersonalinformationofprospectiveclubmembersConsentLegitimateinterestsN/Ad.
LegitimateinterestsWheretheuseofinformationisbasedonthelegitimateinterestscondition,thelegitimateinterestspursuedOurlegitimateinterestsTooperateandimproveourbusiness,whichincludesprovidingourproductsandservicesandanalysingdatatoproducereportsforbusinessplanningandmanagementCustomerrelationshipmanagement;thismayincludekeepingyourdetailsonourmembership,hotelorspadatabases,providingcustomerservicesandkeepingaccountsandrecords13Supplierrelationshipmanagement;thiswillmainlybelimitedtokeepingaccountsandrecordsbutwealsouseitwhereappropriatetoimproveservicesFrauddetectionandprevention:thismayincludetheuseofCCTVDirectmarketing:thismayincludedirectmailifyouarenotregisteredwiththeMailPreferenceServiceanddonotobjectPromotionandadvertising:theonlineadvertisingofourproductsandservicesInternalgroupadministration:toenablememberstobenefitfromthecross-usagepolicyacrossourhealthclubsNetworkandinformationsecurity;forexampleweusearangeoftoolstosecureandprotectournetworkandsystemsReportingpossiblecriminalacts/threatstocompetentauthorities,whereapplicable.
Others'legitimateinterestsWeoperateCCTVatourclubs,spas,hotelsandheadoffice.
Wehaveentrysystemstoourclubsandwerecordcallstoandfromourcallcentresandthelegaldepartment.
Itisinthelegitimateinterestsofanyonevisitingourclubs,spasandhotelstohaveasecureandsafeenvironment;ofourcallerstobenefitfromqualitychecksandtoevidencecallsmadeandreceived.
e.
Personalinformationcollectedindirectly–categoriesThecategoriesofpersonalinformationcollectedindirectlyWecollectthefollowingcategoriesofpersonalinformationindirectly(e.
g.
fromthirdparties):Customercontactdetailsandpossiblytherelationship,e.
g.
ifsomeonebuysproducts,services,vouchersormembershipforyouasagift;thisincludeswhereaparentmemberregistersachildmemberatahealthclub.
Marketingpreferences,fromSkywhoprovideswifiinourhealthclubsandhotelsProspectnameandcontactdetails,tocarryoutprospectmailings.
Referencesforjobapplicantsorsuppliers,fromreferees.
Statistics,fromGoogleAnalytics.
Directmessagesandotherdataaboutinteractionswithindividuals,fromthesocialmediaplatformsweuse,Facebook,Twitter,InstagramandYouTube.
f.
RecipientsWemayshareyourpersonalinformationwith,asappropriate:14Therecipientsorcategoriesofrecipientsofthepersonalinformation,ifanySelf-employed(freelance)personaltrainers,swimminginstructorsandclassinstructorswhoprovidehealthclubservicesforusOurgroupcompanies(seesectionaabove),wherenecessarytoallowcross-usageofhealthclubsOuranalyticsprovider,DatabaseDirectionLtd,tohelpusfindnewmembersPaymentprocessors(toprocesspayments,weuseMarketplaceMerchantSolutionsLtdtradingasClover);CloverrequiresustogiveyounoticeofitsprivacypolicywhichsetsoutdetailsofitsuseofyourpersonalinformationAthirdpartycourier(fordeliveryofproductsorderedonline)Amarketingservicesprovider,TextGlobal,forsendingmarketingemailsandtextsOurdebtcollectionagents,ifyouoweusmoneyOurhealthandsafetyadvisers,ifyouhaveanaccident.
Ourlegaladvisers,forlegaladviceandrepresentationProcessors,whoprocesspersonalinformationonourbehalf,suchasourITserviceproviders.
Theywillhaveincidentalaccesstoyourpersonalinformationbutwillbeobligedtokeepitconfidential,actonlyonourinstructions,keepitsecure,andhelpuswithourdataprotectioncompliancewhereappropriateAnotherbusiness,inconnectionwithamergeroracquisitionwiththem.
Wewillnototherwisediscloseyourpersonalinformationtoanythirdpartyunlessrequiredorpermittedtodosobylaw.
g.
TransfersoutsideoftheEuropeanEconomicArea(EUmemberstates,Norway,IcelandandLiechtenstein)(EEA)Whereapplicable,thefactthatpersonalinformationistobetransferredtoathirdcountryorinternationalorganisationandtheexistenceorabsenceofanadequacydecisionbytheEuropeanCommission,orinthecaseoftransferssubjecttoappropriatesafeguardsornon-repetitive,limitedtransfersbasedonOurtransfersWeoperateinEuropeanddonotneedtotransferanypersonalinformationtothirdcountriesorinternationalorganisations.
Howeversomeofourprovidersmaytransferpersonalinformationtothirdcountriesinordertoprovidesupportorbecausetheyhostpersonalinformationinathirdcountry.
ForexampleWeuseGoogleapps,providedbyGoogle,Inc.
NdevorSystemsLimitedt/aPhorest(anIrishcompany)whoprovidesourspabookingsystem/appstoresdatainAmazonWebServices(AWS).
MyZonewhotransfermarketingconsentstotheUSSkywifiwhotransfermarketingconsentstotheUS15compellinglegitimateinterests,referencetotheappropriateorsuitablesafeguardsandthemeansbywhichtoobtainacopyofthemorwheretheyhavebeenmadeavailable.
BothGoogle,Inc.
andAWSareinPrivacyShield,whichhasanadequacydecision.
FurtherinformationabouttransferoptionsandexplanationoftechnicaltermsHereisashortexplanationoftheoptionsfortransferringpersonalinformationtothirdcountriesorinternationalorganisations.
First,an"adequacydecision"whichisalegaldecisionbytheEuropeanCommissionthatadequateprotectionisprovidedbyacountry,territory,specifiedsector(s)oraninternationalorganisation.
Itisbasedonanassessmentofthefollowing:(a)ruleoflawandotherlegalconsiderations(b)existenceandfunctioningofanindependentsupervisoryauthorityand(c)internationalcommitmentsandobligations/participation.
Secondly"appropriatesafeguards"whichmaytakeseveralforms,including:standarddataprotectionclausesadoptedbytheEuropeanCommission(knownas"modelclauses")othercontractclausesthathavebeenapprovedbytheInformationCommissioner"bindingcorporaterules"whichapplytoagroupofcompaniesorenterprisesengagedinajointeconomicactivityanapprovedcodeofconductorapprovedcertificationmechanism,whichbindstheorganisationinthethirdcountryandcanbeenforced.
Thirdly,"derogations"suchasconsentorcontactperformance,whichcanonlybeusedintheabsenceofanadequacydecisionorappropriatesafeguards.
Pleasenotethattheabsenceofanadequacydecisionandappropriatesafeguardscreatespossiblerisksforindividuals.
IntheEEAindividualshavecertainrightsandremediesiftheuseoftheirpersonalinformationisunlawful.
Individualsmaynothavethesamerightsandremediesiftheirpersonalinformationisusedinathirdcountryorbyaninternationalorganisation.
h.
StorageperiodTheperiodforwhichthepersonalinformationwillbestored,orifthatisnotpossible,thecriteriausedtodeterminethatperiodTheperiodforwhichwewillstorepersonalinformationisbasedonourneedtofulfilourlegitimatebusinessneeds,complywithapplicablelaw,resolvedisputes,andenforceouragreements.
Ourstorageperiodsare:CCTVisretainedforupto30daysinthehealthclubsand30daysinthehotelsandatheadoffice.
Exercisecardsofhealthclubmembersarestoreduntilthememberleaves.
Unsuccessfuljobapplicants'detailsaredestroyedafter6months16Thecookiesplacedonyourdevicewillbereadablebyoursiteuntiltheyexpireoryouclearthemordisposeofyourdevice.
Pleaseseepart4,Cookiesandsimilartechnologiesforfurtherdetails.
Otherpersonalinformationisstoredforamaximumof6yearsaftertheendoftherelationshipwiththeindividual.
Thisisnormallybasedonthe"limitationperiod",theperiodoftimethatalegalclaimcanbebrought.
Forabreachofcontract,thelimitationperiodis6years,sowemayretainyourdetailsforupto6yearsaftertheendofthecontract.
i.
IndividualrightsTheexistenceoftherighttorequestaccesstoandrectificationorerasureofpersonalinformationorrestrictionofuseconcerningtheindividualortoobjecttouseaswellastherighttodataportabilityYouhaverightstomakearequesttous:foraccesstoyourpersonalinformationforrectificationorerasureofyourpersonalinformationforrestrictionofprocessingconcerningyoutoobjecttoourprocessingwhichisbasedonlegitimateintereststoobjecttodirectmarketingtoobjecttoarchivinginthepublicinterest,researchandstatisticstoport(transfer)personalinformationyouhaveprovidedtous,eithertoyouortoanotherprovider.
Theserightsaremorecomplicatedthanthesimplesummaryabove.
Tofindoutmoreaboutthem,pleasevisittheInformationCommissioner'swebsite.
Toexerciseyourrights,pleasecontactourdataprotectionofficeroraskusforaform.
Ourcontactdetailsareinthe"Identityandcontactdetails"sectionaabove,and"Dataprotectionofficer"sectionbabove.
Pleasemakeitclearwhichright(s)youwanttoexercise,forexamplebyputting"righttoobject"inthesubjectlineoftheemailifyouwishtoexercisetherighttoobject.
Thankyou.
j.
WithdrawalofconsentWheretheuseisbasedonconsent(forordinaryorsensitivepersonalinformation),theexistenceoftherighttowithdrawconsentatanytime,withoutaffectingthelawfulnessofusebasedonconsentbeforeitswithdrawalYouhavearighttowithdrawanyconsentyougiveusatanytime.
Thiswillnotaffectthelegalityofourconsent-basedusebeforeyouwithdrewconsent.
Ifyouwithdrawyourexplicitconsenttousholdingyourhealthdata,wemaynotbeabletoprovideyouwithourhealthcluborspatreatmentsunlessanotherlegalbasisapplies.
Youcanunsubscribefromemailupdatesatanytimebyusingtheopt-outintheemail,orbyreplyingSTOPtotextmarketingmessages.
Memberscanupdatetheiraccountsettingsinthememberportal.
17Towithdrawconsenttocookies,pleaseadjustyourbrowsersettings(pleaseseepart4,Cookiesandsimilartechnologiesbelowforfurtherdetails).
Toexerciseyourrighttowithdrawinanyothercase,pleasecontactus.
Ourcontactdetailsareinthe"Identityandcontactdetails"sectionaabove,and"Dataprotectionofficer"sectionbabove.
Pleasemakeitclearyouwanttoexercisethisright,forexamplebyputting"Withdrawalofconsent"inthesubjectlineoftheemail.
Thankyou.
k.
ComplaintsYouhavearighttocomplaintotheInformationCommissioner,whosecontactdetailsare:TherighttolodgeacomplaintwithasupervisoryauthorityInformationCommissioner'sOfficeWycliffeHouseWaterLaneWilmslowCheshireSK95AFEnglandTelephone:03031231113(localrate)or01625545745(nationalrate).
Website:https://ico.
org.
ukwhichsetsoutemailaddressesandanemailform.
l.
Informationcollecteddirectly–legalorcontractrequirementWhethertheprovisionofpersonalinformationisastatutoryorcontractualrequirement,orarequirementnecessarytoenterintoacontract,aswellaswhethertheindividualisobligedtoprovidethepersonalinformationandofthepossibleconsequencesoffailuretoprovidethatinformationIfyouareacustomer,supplier,consultant,jobapplicantorinterestedperson,we'llnormallyneedyourpersonaldetails(nameandcontactdetails)toprovideproductsandservices,receiveproductsandservices,processyourapplicationoransweryourqueryorcomplaint.
Forsuppliersandjobapplicants,wemayalsoneedyourfinancialdetails(e.
g.
bankdetailsandVATnumberwhereapplicable)sowecanpayyou.
Forcustomersusingourhealthclub,itisacontractrequirementthatyouprovideyourbankdetailstosetupadirectdebit.
Wewillnotprovideourserviceswithoutthesedetails.
Whenusingourhealthclubs,weaskyoutocompleteapre-exercisequestionnaireandprovideotherhealth-relateddata.
Wemay,ifweconsideritinyourbestinterests,refuseaccesstoallorsomegymequipmentifyoufailtoprovidethatinformation.
18Whenbookingforaspatreatment,weaskyoutocompleteaspatreatmentquestionnaire.
Wemay,ifweconsideritinyourbestinterests,refuseaccesstoourspaorcertaintreatmentsifyoufailtoprovidethatinformation.
Whenbuyingaproductonline,itisacontractrequirementthatyouprovideyourcontactdetails,theaddresstowhichanyproductshouldbedelivered,andothermandatoryinformationintheorderprocess.
m.
SourcesofpersonalinformationcollectedindirectlyThesourceofthepersonalinformationandifapplicable,whetheritcamefrompubliclyaccessiblesourcesThesourcesofthepersonalinformationwecollectindirectlyarelistedbelow.
Ifsomeonebuysproducts,services,vouchersormembershipforyouasagift,wewillreceiveyourpersonalinformationfromthem;thisincludeswhereaparentmemberregistersachildmemberatahealthclubSky,whoprovidesuswithmarketingpreferencescollectedonregistrationforourwifiScarletOrange,whomaysupplyuswithprospectdataReferees,whomayprovidereferencesforjobapplicantsorsuppliersGoogleAnalytics,whoprovidesuswithstatisticsaboutoursite,includingwherevisitorsdiscontinuetheorderprocess.
PleaseseeGoogle'sprivacysiteandprivacypolicyforfurtherdetails.
Facebook,InstagramandTwitter,whoenableustoadvertisetousersoftheirplatforms.
n.
Automateddecision-makingTheexistenceofautomateddecision-making,includingprofiling.
Thismeansadecisionbasedsolelyonautomatedprofilingwhichproduceslegaleffectsconcerningtheindividual,andwhichmustnotbebasedonspecialcategoriesof(i.
e.
sensitive)personalinformationwithoutexplicitconsentorsubstantialpublicinterest,withsafeguards.
Meaningfulinformationaboutthelogicinvolved,aswellasthesignificanceandtheenvisagedconsequencesoftheprocessingfortheindividualmustalsobeprovided.
Wedonotconductautomateddecision-making.
Allsuchdecisionsaboutyouwillbemadebyhumans.
194.
Cookiesandsimilartechnologies4.
1.
IntroductionAcookieisafilecontainingasmallamountofinformationthatawebsiteplacesonyourdevice.
Similartechnologiesinclude:Localsharedobjects(Flashcookies)–datathatwebsiteswhichuseAdobeFlashstoreonyourdeviceLocalstorage(sessionstorageanddatabasestorage)–atypeoffileplacedonyourdevicethatcanholddata,oftenrelatedtovideooraudiocontentPixels–(alsoknownascleargifs,webbeaconsorwebbugs)arecodeusedonawebpageorinanemailnotification.
Theyareusedtolearnwhetheryou'veinteractedwithcertainweboremailcontent.
Thishelpstomeasureandimproveservicesandpersonaliseyourexperience.
Weusecookiesandsimilartechnologiestohelpusunderstandhowpeopleinteractwithourwebsite.
Thatmeanswecanmakeimprovementsanddevelopthewebsiteinaninformedwayforourwebsitevisitorsandmembers.
Ithelpsusimproveyouroverallexperience.
AsatMay2018,anddependingonyouruseofthesite,browseranddevicesettings,weusearound12thirdpartycookies(includingFacebookandTwitter)and12firstpartycookiespluslocalstorageandonoursiteathttps://www.
bannatyne.
co.
uk/.
Weusecookieswhichareessentialtoyouruseofthesite(e.
g.
toshop);performancecookies(Googleanalytics)tocollectsitestatistics;andfunctionalitycookiestoprovideservicessuchasthehoteltablereservationfeatureandtheweddingavailabilitychecker.
Googlemayusetargetingcookiesforitsownadvertisingpurposesinconjunctionwiththehoteltablereservationtool.
4.
2.
WhatcookiesdoweuseWeusethesetypesofcookie……forthesepurposesStrictlynecessarycookies.
Thesecookiesaregenerallyusedtostoreauniqueidentifiertomanageandidentifyyouasuniquetootheruserscurrentlyviewingthewebsite,inordertoprovideyouwithaconsistentandaccurateservice.
Toguardagainstcross-siteforgeryrequests,rememberpreviousactions(e.
g.
enteredtext)whennavigatingbacktoapageinthesamesession,managingloginsandothersecurityfeatures,andtoroutevisitorstospecificversionsofasiteandtorememberitemsputintoanonlineshoppingbasket.
20Performancecookies.
Thesecookiesareusedforperformanceandtoimprovethewebsite.
Forwebanalytics(weuseGoogleAnalytics–seehowGoogleusesyourdatahere:www.
google.
com/policies/privacy/partners),adresponserates,affiliatetracking,errormanagementandtestingdesigns.
Functionalitycookies.
Thesecookieswilltypicallybetheresultofsomethingyoudo,butmightalsobeimplementedinthedeliveryofaservicenotexplicitlyrequestedbutofferedtoyou.
Theycanalsobeusedtopreventyoubeingofferedaserviceagainthathadpreviouslybeenofferedtoyouandrejected.
Toremembersettingssuchaslayout,font,preferences,colours;torememberachoicesuchasnottobeaskedagaintocompleteaquestionnaire;toprovideinformationtoallowanoptionalservicesuchastofulfilarequestfromyoutosubmitacomment.
Targetingoradvertisingcookies.
Thesecookiescontainauniquekeythatisabletodistinguishindividualusers'browsinghabitsorstoreacodethatcanbetranslatedintoasetofbrowsinghabitsorpreferencesusinginformationstoredelsewhere.
Cookiesmayalsobeusedtolimitthenumbertimesauserseesaparticularadonawebsiteandtomeasuretheeffectivenessofaparticularcampaign.
Withsimilartechnologies,foronlineadvertising.
WeuseFacebook,Twitter,Google'sDoubleClickandYouTubetopromoteourservicesandproductsandserveinternetads.
Wealsousecertaininformationto:IdentifynewvisitorstoourwebsiteRecognisereturningvisitorsAnalysetheeffectivenessofouradvertisementsandemailcampaigns.
4.
3.
Howtoseeindividualcookiesandwithdrawconsenttocookiesandsimilartechnologies4.
3.
1.
CookiesCookieschangeandtheirnamesanddescriptionsarenotveryuser-friendlyformostpeople,sowehaven'tlistedthemindividually.
Ifyouwanttoseethecookiescurrentlyusedonourwebsite,theyshouldbevisiblethroughyourbrowser.
(Pleaseseebelowforinstructions.
)Togiveorwithdrawconsenttocookies,pleaseadjustyourbrowsersettings.
Therearedifferentbrowsersandmanufacturersupgradethemfrequently.
Thebestwaytogettherightinstructionsistogotothemanufacturer'ssupportpage.
Thefollowingsupport/privacypages(forsomeofthemorecommonbrowsers)arecorrectasatMay2018.
ForChrome,pleaseseeGoogle'ssupportpagehere:https://support.
google.
com/chrome/answer/9564721ForInternetExplorer,pleaseseeMicrosoft'ssupportpagehere:https://support.
microsoft.
com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookiesForEdge,pleaseseeMicrosoft'sprivacypagehere:https://privacy.
microsoft.
com/en-us/windows-10-microsoft-edge-and-privacyForFirefox,pleaseseeMozilla'ssupportpagehere:http://support.
mozilla.
org/en-US/kb/enable-and-disable-cookies-website-preferencesForSafari,pleaseseeApple'ssupportpagehereforMacs:https://support.
apple.
com/kb/PH21411andhereformobiledevices:https://support.
apple.
com/en-us/HT201265.
Ifyouhaveproblemswiththesepages,can'tseeindividualcookiesorwantfindoutmoreabouthowcookiesarehandledwithinyourbrowser,pleasegotothemanufacturer'ssiteandsearchforthebrowsernameandyourcookiequery.
4.
3.
2.
FlashcookiesTodisableflashcookies(localsharedobjects)gototheGlobalStorageSettingspaneloftheonlineSettingsManageratAdobe'swebsiteathttp://www.
macromedia.
com/support/documentation/en/flashplayer/help/settings_manager03.
html.