Event Disco Privacy Policy
1 Keeping your data safe
1.1 We are committed to keeping your personal data safe and secure and handling it in accordance with our legal obligations. This Privacy Policy sets out in detail the purposes for which we process your personal data, who we share it with, what rights you have in relation to that data and everything else we think it's important for you to know.
2 Who's in control of my personal data?
2.1 Event Disco is run by Food Disco Limited. We are the "controller" of all personal data collected and used for the purposes of providing Event Disco and for any other purposes set out in this Privacy Policy. This means that we are responsible for deciding how and why your data is used and for ensuring that your data is handled legally and safely.
3 What data do you collect and where from?
3.1 When you register for an account with Event Disco and/or sign up for our mailing list, we will collect the following information from you:
3.1.1 your name;
3.1.2 a username and password; and
3.1.3 your email address.
3.2 We collect some technical information, such as IP address, device identifiers and information about how you use Event Disco.
4 What do you use my personal data for?
4.1 We use your personal data to set up and administer your account, allow you to log into your account and make sure that you can use Event Disco and all its features. If you sign up to our mailing list, we use your email address to send you information about Event Disco events, popup stands and upcoming menus.
4.2 If you contact us with queries, comments or complaints, we will use your contact details and any other personal data you choose to provide to us to respond to and handle your correspondence.
4.3 We use the technical information we collect about how Event Disco is used, to help us to monitor trends so that we can analyse and improve Food Disco. This helps us to make sure that we are providing you with the best possible service.
5 What is your legal basis for using my personal data?
5.1 Data protection law says that we have to tell you the legal basis that we rely on to process your personal data for the purposes that we have notified to you. The table below tells you what that legal basis is in relation to each of the purposes set out above.
6 Who do you share my personal data with?
6.1 We use third party service providers to carry out certain services on our behalf, such as developing and hosting Event Disco and sending emails on our behalf. Those third party service providers will have access to your data as part of performing their services for us. They do not use your data for any other purposes.
7 Whereabouts is my personal data kept?
7.1 We do not transfer your personal data outside the UK and the European Economic Area. If we ever need to do so, we will update this Privacy Policy and we will make sure that the recipient of your data protects it in the same way that it would be protected in the UK.
8 How long do you keep my personal data for?
8.1 We will keep your personal data for as long as your account remains open. You can close your account at any time by contacting us using the details below. If you close your account, we will delete the personal data associated with your account.
8.2 If your account is inactive for a period of eighteen months, we reserve the right to close your account and delete your personal data in accordance with section 8.1 above.
8.3 We occasionally need to keep data after account closure for limited purposes, for example if we need your data in order to respond to any complaints or claims that you make. If this is the case, we will only keep the data for as long as we need to in order to fulfil those purposes.
9 What rights do I have?
9.1 You have a number of rights under data protection law. These rights and how you can exercise them are set out in this section. We will normally need to ask you for proof of your identity before we can respond to a request to exercise any of the rights in this section and we may need to ask you for more information, for example to help us to locate the personal data that your request relates to.
9.2 We will respond to any requests to exercise your rights as soon as we can and in any event within one month of receiving your request and any necessary proof of identity or further information. If your request is particularly difficult or complex, or if you have made a large volume of requests, we may take up to three months to respond. If this is the case we will let you know as soon as we can and explain why we need to take longer to respond.
9.3 If you want to exercise any of these rights, please contact us at info@fooddisco.co.uk.
9.4 A right to access your information
9.4.1 You have a right to ask us to send you a copy of all the personal data that we hold about you (subject to some exceptions).
9.5 A right to an electronic copy of your information
9.5.1 You can also ask us to send you the account information that we hold about you in a common electronic format, or to ask us to transfer that data to a third party if you want us to and if it is technically feasible for us to do so.
9.6 A right to object to us processing your information
9.6.1 You have a right to object to us processing any personal data that we process where we are relying on legitimate interests as the legal basis of our processing (as set out in section 5 above).
9.6.2 If you make a request to exercise your right to object, if we have compelling legitimate grounds to carry on processing your personal data, we will be able to continue to do so. Otherwise, we will cease processing your personal data.
9.7 A right to ask us not to market to you
9.7.1 You can ask us not to send you direct marketing. You can do this by following the "unsubscribe" instructions in any marketing emails or by changing your account settings, or by contacting us using the details above.
9.8 A right to have inaccurate data corrected
9.8.1 You have a right to ask us to correct inaccurate data that we hold about you. If we are satisfied that the new data you have provided is accurate, we will correct your personal data as soon as possible.
9.9 A right to have your data erased
9.9.1 You have a right to ask us to delete your personal data in certain circumstances, for example if we have processed your data unlawfully or if we no longer need the data for the purposes set out in this Privacy Policy.
9.10 A right to have processing of your data restricted
9.10.1 You can ask us to restrict processing of your personal data in some circumstances, for example if you think the personal data is inaccurate and we need to verify its accuracy, or if we no longer need the data but you require us to keep it so that you can exercise your own legal rights.
9.10.2 Restricting your personal data means that we only store your personal data and don't carry out any further processing on it unless you consent or we need to process the data to exercise a legal claim or to protect a third party or the public.
10 How can I contact you?
10.1 If you have any questions or concerns about this Privacy Policy and/or our processing of your personal data, you can contact us at info@fooddisco.co.uk.
11 What if I have a complaint?
11.1 You have a right to complain to the Information Commissioner's Officer (ICO), which regulates data protection compliance in the UK, if you are unhappy with how we have processed your personal data.
11.2 You can find out how to do this by visiting www.ico.org.uk.
12 What if this policy changes?
12.1 We may make changes to this Privacy Policy from time to time. Any changes we make will be posted on this page. We may also notify you by email if significant changes are made.
Last updated 21 July 2020