ACK MEDIA LAW LLP
What personal data do we collect about you?
When do we collect your personal data?
How and why do we process your personal data?
Sharing your data
Transferring your personal data outside the UK
How do we keep your data secure?
What should you do if your personal data changes?
How long will you keep my personal data?
Withdrawing your consent
Data Protection Officer
This website is provided by ACK Media Law LLP of 53 Welbeck Street, London, W1G 9XR. ACK Media Law LLP is a limited liability partnership registered in England and Wales under number OC337320. We are a firm of solicitors regulated by the Solicitors Regulation Authority.
As data protection solicitors we know how important it is to safeguard personal data and private information. With this in mind we treat your personal data with the utmost care and take all appropriate steps to protect it. This is why we have a dedicated data protection officer (“DPO”). You can contact the DPO by emailing Sue Charles at email@example.com.
Our website may occasionally include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.
2. What personal data do we collect about you?
We collect, store, and use the following categories of personal data about you:
Enquiries sent using the Contact Us page of the website or by emailing us
Job application information including cover letters and CVs which may include personal data such as contact details, details of qualifications, skills, work history and experience, information about disabilities or health issues, photographs, entitlement to work in the UK, current salary and work references.
On occasion you may send us sensitive personal data (known as special category personal data in the Data Protection Act 2018) relevant to an application for a job at ACK Media Law LLP. Special category personal data includes details about a person’s race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about health and genetic and biometric data.
3. When do we collect your personal data?
When you visit our website
You subscribe to our media blog
You use our Contact Us page to send us an enquiry
You send us an email enquiry or respond to a job advertisement
If we conduct background checks in connection with a job application including checking social media and data from third parties such as recruitment agencies, referees and background checking services.
When we otherwise have dealings with you
4. How and why do we use your personal data?
We are a boutique media law practice which draws on a network of successful working relationships, skills and knowledge of the media sector in order to offer clients a specialised and flexible service. We maintain a website for our clients, prospective clients and partners in the media sector to provide information about the legal services we offer and to provide updates about new caselaw and client projects. We also advertise job vacancies at ACK Media Law LLP from time to time on our website, and occasionally consider speculative job applications. We will not process your personal data unless we have a legal basis to do so under data protection law and we will not process your personal data in a way you would not expect.
Below we set out what we do with your personal data and the legal basis on which we rely:
5. Sharing your data
We only share your personal data with your consent or where we are required to by law or as an essential part of maintaining our website and blog, or as part of verifying a job applicant’s qualifications and past experience.
Wix ShoutOut is the provider of the blogpost feed we use to collect and store the email addresses of subscribers to the blog and to deliver the blog updates to your email inbox.
We may, from time to time, expand, reduce or sell our business and this may involve the transfer of divisions or the whole business to new owners. If this happens, your personal data will, where relevant, be transferred to the new owner or controlling party, subject to data protection law.
6. Transferring your personal data outside the UK
Wix ShoutOut is the provider of the blogpost feed we use to collect and store the email addresses of subscribers. It is hosted outside of the UK and we have a contract with Wix which includes the provision of security measures such as encryption to protect this data.
Otherwise, we will not transfer your personal data outside of the UK.
7. How do we keep your data secure?
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
8. What should you do if your personal data changes?
9. How long will you keep my personal data?
We retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of contacting you, sending blog updates to subscribers of the blog, and to use website data analytics.
For operational purposes we may retain records of our communications with you including any concerns or complaints you have raised.
To comply with our legal obligations we will retain any prospective job application sent to the firm for 6 years after it was sent at which time it will be securely deleted.
We retain any email address provided to receive blog updates for as long as you are a subscriber to the blog.
10. Withdrawing your consent
In the limited circumstances where you may have provided your consent to the collection and processing of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact the DPO.
You can unsubscribe from the blog at any time by clicking on the ‘unsubscribe’ link at the bottom of any blog email update or by contacting firstname.lastname@example.org.
11. Your rights
Under certain circumstances, by law you have the right to:
Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it.
Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal data for direct marketing purposes.
Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data, for example if you want us to establish its accuracy or the reason for processing it.
Request the transfer of your personal data to another party.
If you want to review, verify, correct or request erasure of your personal data, object to the processing of your personal data, or request that we transfer a copy of your personal data to another party, please contact us.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
12. Data Protection Officer