The Website – The Imaginarium’s website with the main address www.imaginariumuk.com
Personal Data or Personal Information – Any information belonging to an individual from which the identity of that individual can be ascertained.
Processing – Any operation performed on data (including storing, transferring, or using to contact an individual)
Data Controller – The individual with the power to make decisions about the use of personal data. In the case of any information obtained through the Website the Data Controller is the Imaginarium.
The Data Controller is the Imaginarium. The Imaginarium is a registered controller of information with the Office of the information Commissioner. The Imaginarium can be contacted via the “Contact” page at https://www.imaginariumuk.com/contact
The Imaginarium processes information according to its Data Protection and Privacy Policy. The full policy can be found at: https://www.imaginariumuk.com/privacypolicy
The personal data collected through the Website is limited to:
Name
Email Address
This data will be used for the following purposes:
Responding to the query made through the website;
Where necessary, conducting any further work required by the query;
Making onward referrals to other companies or individuals if we believe it would be of assistance to you (for example, recommending you for other jobs in the industry). The Imaginarium will contact you before making any onward referral.
The personal data received through the Website will not be shared with any other parties unless the Imaginarium believes that it will assist you to do so (such as recommending you for another job in the industry). The Imaginarium will contact you before making any onward transfer of your data.
The data gathered through the Website will not be transferred to any country or organisation outside the European Economic Area unless that country is subject to an adequacy decision by the EU stating that it has proper data protection provision. The Imaginarium will contact you before making any onward transfer of data.
Data collected through the Website will be retained for six years after the last contact between the Imaginarium and the data subject unless the data subject requests that the data be deleted.
The Imaginarium will process personal data obtained through the Website on the following lawful bases:
The consent of the data subject. This is given when the data subject is asked to indicate consent to the processing of their data for the stated purposes before providing their data. The data subject may withdraw their consent at any time.
The Imaginarium’s legitimate interest in responding to contacts received through the Website. The Imaginarium has such an interest because the Website is an important part of developing new interest and business in and for the Imaginarium. Responding to contacts received through the website has been assessed by the Imaginarium to have a minimal impact on the privacy and other rights of data subjects.
Data subjects can withdraw consent to process their data at any time. To withdraw consent please send the Imaginarium an email via the contact form saying that you no longer want the Imaginarium to process your personal data.
The Imaginarium has considered whether consent is the most appropriate basis for processing and considers that it is the appropriate basis because:
There is a clear opportunity (at the “contact” page) to obtain consent;
Contact through the website requires a positive action on the part of the data subject and the Imaginarium considers it appropriate to give the data subject the maximum amount of control over the use of their data.
Where consent is relied on as a basis for processing data, the Imaginarium will ensure that:
The request for consent is prominent and separate from the other terms and conditions.
Data subjects are asked to positively opt in to signify consent and pre ticked boxes are not used.
The request for consent is in clear, plain language and is easy to understand.
The request will specify why the Imaginarium requires the data and how it will use it.
Where the Imaginarium wishes to process data for a different purpose to that for which it has received consent, a new consent will be sought.
The name of the data controller (“the Imaginarium”) and contact details are clear in the request.
Individuals are informed that they can withdraw their consent.
Consent is not a precondition of service and data subjects can refuse consent without suffering detriment.
The Imaginarium will maintain a record of the consent, when and how it was obtained, and what the data subject was told at the time.
The consent will be regularly reviewed to ensure that the relationship, processing, and purposes have not changed.
The Imaginarium will refresh consent at regular intervals.
The Imaginarium ensures that it is easy for data subjects to withdraw their consent and that the mechanism for withdrawal is clearly publicised. The Imaginarium does not penalise individuals who wish to withdraw consent.
The Imaginarium has considered whether “legitimate interests” is the most appropriate basis for processing data and has decided that, where consent is not obtained or not available, legitimate interests is the most appropriate basis for processing data because, in order to respond to queries made through the website it may be necessary to engage in limited processing of data without the consent of the data subject. This processing will have a negligible impact on the rights of the data subject and is in furtherance of the Imaginarium’s legitimate interests in managing its website, and contact list and responding to queries.
When relying on legitimate interests as a basis for processing, the Imaginarium will:
Ensure that it understands its responsibility to protect the data subject’s interests.
Conduct a legitimate interests assessment (LIA) and kept a record of it, to ensure that we can justify our decision.
Identify the relevant legitimate interests.
Check that the processing is necessary and there is no less intrusive way to achieve the same result.
Conduct a balancing test and ensure that the individual’s interests do not override those legitimate interests.
Only use personal data in ways the data subject would reasonably expect, unless there is a very good reason.
Not use people’s data in ways they would find intrusive or which could cause them harm, unless we have a very good reason.
If children’s data is processed, take extra care to make sure we protect their interests.
Consider safeguards to reduce the impact where possible.
Consider whether we can offer an opt out.
Data subjects have the following rights in relation to the personal data held by the Imaginarium:
The right to be informed about how the Imaginarium will use personal data. This privacy notice ensures that the right to be informed is fulfilled.
The right to access all of their personal data that is held by the Imaginarium.
The right to have any inaccuracies rectified or, if the relevant data is incomplete, to have it completed.
The right to request that personal data held by the Imaginarium is deleted or that it is not used for certain purposes.
The right not to be subject to automated decision-making. The Imaginarium does not use any personal data collected through the Website for the purpose of automated decision-making.
If a data subject requires more information or wishes to exercise any of these rights, they should contact the Imaginarium through the contact page.
All data subjects have a right to complain to the UK Information Commissioner. This can be done here https://ico.org.uk/make-a-complaint