GDPR Compliance

A summary of what these notices explain.

Glitterball is committed to protecting the privacy and security of personal data.

These notices explain what personal data Glitterball holds about you, how we use it internally, how we share it, how long we keep it, and what your legal rights are in relation to it.

For the parts of your personal data that you supply to us, these notices also explain the basis on which you are required or requested to provide the information. For the parts of your personal data that we generate about you, or that we receive from others, they explain the source of the data.

What is personal data and how does the law regulate our use of it?

“Personal data” is information relating to you as a living, identifiable individual. We refer to this as “your data”.

Data protection law requires Glitterball (“we” or “us”), as data controller for your data:

• To process your data in a lawful, fair and transparent way;
• To only collect your data for explicit and legitimate purposes;
• To only collect data that is relevant, and limited to the purpose(s) we have told you about;
• To ensure that your data is accurate and up to date;
• To ensure that your data is only kept as long as necessary for the purpose(s) we have told you about;  
• To ensure that appropriate security measures are used to protect your data.

The lawful basis on which we process your data

The law requires that we provide you with information about the lawful basis on which we process your personal data, and for what purposes.

 Most commonly, we will process your data on the following lawful grounds:  

• Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those legitimate interests.
• Where it is necessary to perform the contract we have entered into with you.

Your legal rights over your data 

Subject to certain conditions set out in UK data protection law, you have:  

• The right to request access to a copy of your data, as well as to be informed of various information about how your data is being used;  
• The right to have any inaccuracies in your data corrected, which may include the right to have any incomplete data completed;  
• The right to have your personal data erased in certain circumstances;  
• The right to have the processing of your data suspended, for example if you want us to establish the accuracy of the data we are processing.  
• The right to receive a copy of data you have provided to us, and have that transmitted to another data controller (for example, another University or College).  
• The right to object to any direct marketing (for example, email marketing or phone calls) by us, and to require us to stop such marketing.  
• The right to object to the processing of your information if we are relying on a “legitimate interest” for the processing or where the processing is necessary for the performance of a task carried out in the public interest. The lawful basis for any particular processing activity we carry out is set out in the relevant detailed table of processing activities for each class of data subject.  
• The right to object to any automated decision-making about you which produces legal effects or otherwise significantly affects you.  
• Where the lawful basis for processing your data is consent, you have the right to withdraw your consent at any time. When you tell us you wish to exercise your right, we will stop further processing of such data. This will not affect the validity of any lawful processing of your data up until the time when you withdrew your consent. You may withdraw your consent by contacting the Secretary of Glitterball at secretary@glitterball.org .

Some of your rights are not automatic, and we reserve the right to discuss with you why we might not comply with a request from you to exercise them. Further guidance on your rights is available from the Information Commissioner’s Office (https://ico.org.uk/). 

You have the right to complain to the UK’s supervisory office for data protection, the Information Commissioner’s Office at https://ico.org.uk/concerns/ if you believe that your data has been processed unlawfully.