Privacy Policy

Privacy Statement

 

The purpose of this statement is to explain to you what personal information we collect and how we may use it.

 

1. About Us

This website www.oorwullie.com is owned and operated by D C Thomson & Co Ltd., a company registered in Scotland no. SC005830, having its registered offices at Courier Buildings, Albert Square, Dundee DD1 9QJ.

DC Thomson is committed to protecting your privacy and maintaining the security of any personal information received from you. We strictly adhere to the requirements of the data protection legislation in the UK, including the General Data Protection Regulation 2016 and the Data Protection Act 2018 and we are registered on the Data Protection Public Register number Z5748964.

 

This website is to support and promote a charitable partnership between Scotland’s children’s hospitals’ charities and DC Thomson. The hospital charities involved are Glasgow Children’s Hospital Charity, The Archie Foundation (Ninewells, Dundee) and Edinburgh’s Children’s Hospital Charity.

The trail will be supported by an app created and run by Wild in Art on behalf of the charities.

 

2.The Data Protection Officer (DPO)

Due to the type of data we collect and the nature of our business DC Thomson currently has no legal requirement to have a DPO However, our Information Security Manager will be happy to deal with any queries or requests regarding the data we hold about you.  They can be contacted by email at privacy@dcthomson.co.uk or by post to Information Security Manager, D C Thomson & Co Ltd., Courier Buildings, Albert Square, Dundee DD1 9QJ.

 

 3.Information we collect about You and How we use it

When you register on our website or take part in a competition, we may collect your name, address, email address, contact number and other contact details. This allows us to process your registration, administer competitions and provide the services chosen such as newsletters.

We may collect marketing or contact preferences for ourselves and the charities involved as part of the sign-up process.

We may also collect historic location data is you log the statues you have visited.

 

We do not collect sensitive information (also known as special categories of information) about you.

 

We do collect some information from cookies and similar software which allows us to understand how you arrive on our websites, and use and navigate round them so we can improve the sites. We obtain some information from google analytics and Facebook.  The Facebook information provided is limited and only that which you have previously agreed with Facebook that they can share.

 

 4.What we do with your Information

We will use your personal information for a number of purposes including

  • To provide our services or online content, to provide you with information about them and to deal with your requests and queries.
  • For administration purposes which means we may contact you for reason related to services requested or online content you have signed up for, to let you know that a service or online site has been suspended for maintenance or if an online account has become dormant to ask if you wish to retain the account before we close it.
  • To provide personalised communications.
  • To administer competitions and provide/deliver prizes.
  • To provide you with information about this and associated trails, auctions, events and programmes through the channel(s) selected at sign-up.
  • To provide offers and promotions unlocked as part of the bucket trail.
  • Where we provide personalised services, we may analyse the information you supply, as well as your activity on our (and other) services, so we can offer a more relevant, tailored service.
  • A certain amount of advertising is tailored to the individual based on viewing habits. This is a common practice known as online behavioural advertising.  You can find out more in What is online behavioural advertising.
  • We may show you relevant advertising on third party sites. See section 7 (on marketing)
  • To contact you about a submission you have made including any content you provide.
  • We use IP addresses and device identifiers to identify the location of users, to establish the number of visits from different countries, to limit/cap adverts of a certain type, personalise content and emails, and allow access to paywall protected content.
  • For analysis and research to improve our services offered.
  • We may use and disclose information in aggregate (so no individuals are identified) for marketing and strategic development purposes.

5.What if I don’t provide some or all of the information requested?

The impact of this will depend on what information you withhold but the main impacts may be:

  • We may not be able to provide or fully provide the promotions and offers unlocked.
  • We may not be able to contact you to let you know of problems regarding a promotion/offer or the services provided.
  • We may not be able to notify you regarding winning a competition or deliver the prize.
  • We may not be able to respond fully to requests and queries you may have.
  • We cannot personalise the service you receive. So, if you are online you will have to search more for the content type you normally view or for similar/related products.
  • We won’t be able to limit online adverts to products or services you have shown interest in and so you may receive adverts that mean nothing to you and are not related to your interests.

 

Withholding marketing consent. You are free to do this at any time. It will only stop you receiving marketing.  It will not affect any other service/promotion/offer we provide you with.

 

6.Will You be contacted for Marketing Purposes?

We use your personal information to update you about fundraising, new/other trails/products/ services by post, email and telephone. We will only contact you with your consent. You will provide this either when you fill in a form to provide your data or by signing up for a newsletter.

We may personalise the message content based on information you provide us with, or offers and promotions you unlock and your use of this website.

We may use information which we hold about you to show you relevant advertising on third party sites (e.g. Facebook, Google, Instagram, Snapchat and Twitter). This could involve showing you an advertising message where we know you have signed up for a newsletter and/or have used our services. If you don’t want to be shown targeted advertising messages from us, some third party sites allow you to request not to see messages from specific advertisers on that site in future. If you want to stop personalised services from DC Thomson, including targeted advertising messages on third party sites you can email privacy@dcthomson.co.uk.

 

You are entitled to withhold this consent and opt out from receiving such communications at any time by not giving your consent on the form (paper or web) that collects your details. You can also update these options by contacting us by email at privacy@dcthomson.co.uk or by post to Information Security Manager, D C Thomson & Co Ltd., Courier Buildings, Albert Square, Dundee DD1 9QJ. We will always provide you with a way of opting out of receiving future marketing messages from us, each time we send them to you.

 

 7.What grounds (legal basis) are we processing the data under?

There are a number of ground we process your data under.  These are

  • Contractual – we need the information to perform the contract for services you have requested and promotions/offers unlocked including sending you the offer details and terms etc.
  • Legal – should we be legally required to contact you concerning a service or offer/ promotion e.g. withdrawal of an offer.
  • Legitimate interest – this means the processing is in DC Thomson’s interest. It allows us to manage the customer relationship effectively and efficiently and improve the services we provide by better understanding how our online provisions are used and what is popular with which groups of individuals.
  • Consent – where you have given us consent to market to you or share your information with the charities involved.

 

 8.Sharing your Information with Third Parties

We may from time to time provide your personal information to third parties for the purposes of providing you with competition prizes and our services. These third party providers include service providers who assist us with hosting our marketing campaigns. They do not decide what is done with your data and only process it on our behalf. These third parties may be located outside the European Economic Area; however we only use providers that provide adequate protection for your information at all times.

 

When transferring any personal information outwith the EEA we only do so under one of the legally recognised transfer mechanisms for ensuring the data is safeguarded.  These are:

  • The country in question has been deemed safe for data transfer by the European Commission. Also known as an adequacy finding.
  • The contract for data processing contains the standard contractual clauses laid down by the European Commission to safeguard the transfer of personal data.
  • Binding corporate rules – this is where a large company’s own internal processes for international data transfer have been signed-off and agreed by the European Commission as safeguarding the data.
  • If the data is going to the USA it can be safely transferred to a company that is certified under the EU-US Privacy Shield.
  • Appropriate certification schemes

 

We will provide the charities involved with your contact information and preferences for the provision of the newsletter and to the extent you have selected to be contacted by them when you signed up. When the data is passed to the charity, they will be the controller of their copy of the data. This privacy policy does not cover how they handle personal data. To understand how each charity will look after your personal data please review their privacy policies. If you are a user of the app, this is provided by a third party on behalf of the charities rather than DC Thomson so please refer to their privacy policies. A link to each is listed here.

Glasgow Children’s Hospital Charity

The Archie Foundation

Edinburgh’s Children’s Hospital Charity.

 

If you unlock a promotion/offer your data will be shared with the provider of the offer/promotion to allow them to fulfil the offer. The provider will then become the data controller of their copy of your data. Please make sure that you read their privacy policy.

 

We will not provide your data to other third parties for marketing purposes unless you have specifically consented to this when you first provided your data to us. You are entitled to withhold this consent and opt out from receiving such third party communications at any time by not giving your consent on the form (paper or web) that collects your details. You can also update these options by contacting us by email at privacy@dcthomson.co.uk or by post to Information Security Manager, D C Thomson & Co Ltd., Courier Buildings, Albert Square, Dundee DD1 9QJ.

 

9.Cookies [and web browser information]

This website uses cookies. For more information about what cookies are, what we use them for and how you can delete them, please read our cookies policy

 

Currently we do not have the ability to react to do not track being set in the browser, if you wish to opt out of tracking we suggest downloading an ad blocking technology such as Ghostery.

10.What if I am aged under 16?

If you are under 16 and want to register for the newsletter or updates then you may need to provide your date of birth. We will need to obtain consent from your parent/guardian before you can use some of our services. If we don’t receive consent from your parent/guardian in the time indicated we will delete your information.        

    

11.How we Protect your Information

We follow strict security procedures in the storage, use and disclosure of information which you have given us, to prevent unauthorised access to, and loss, misuse or alteration of your personal information in accordance with the UK data protection legislation. These include access control, firewalls and virus checking procedures.

 

You are responsible for keeping any confidential passwords or other login or access details which you select or which we allocate to you secret. Whilst we take steps to ensure the security of your information, there is a risk that any information transmitted over the Internet and stored on a computer may be intercepted or accessed by an unauthorised party. If you think that someone has accessed your information held by us without your permission or gained unauthorised access to your login details, you must notify us at privacy@dcthomson.co.uk.

 

We also recommend that if you use a shared computer or a computer in a public place such as a library that you close your browser when you have finished you session

 

12.How long we hold your Data for

Some of the information you provide to us is necessary to carry out repeated tasks, such as verifying your identity when signing in to use an account or providing promotions, offers and services to you. We will keep this information for as long as you remain a registered user of any of the site or until the completion of the trail campaign plus a reasonable time (approximately 30 days) beyond this to deal with queries or issues.

Competition entrant and winner (including runner up) information. Entrant details are generally deleted/destroyed up to 1 month after the winner is drawn.  This is in case we need to redraw a winner for some reason.  In rare circumstances this can be up to 90 days.  The winners’ details are retained for up to 6 months to allow us to comply with a regulatory audit, if one were to be required.

 

We may retain anonymised information for analytical purposes.

 

13.Your rights regarding your Personal Information

Under the Data Protection law you have a number of rights with respect to your personal information which are:

 

  • Correcting your Information

You are entitled to have your personal information updated to ensure it is up-to-date and accurate. This can be done by following the instructions below.

  • Withdrawing Consent

You have the right to withdraw your consent to any processing that is currently being done under your consent e.g. marketing. Consent can be withdrawn by following the process below.

  • Obtaining a copy of your Information

You are entitled to receive a copy of the personal information we hold about you.

  • Deleting your information

You can request that we delete personal information in certain circumstances. These will be specific to each case.

  • Data Portability

You are entitled to have us transfer to another controller the personal information that you have provided us with.

  • Restricting Processing

You can request a restriction on the processing of your data in some limited circumstances.  Examples are concerns over data accuracy or we no longer require to hold your data but you have requested its retention by us to aid you in a legal matter.

  • Right to object to processing

You are entitled to request that we stop processing your data for marketing purposes and in other limited circumstances such as asking us not to process your data by wholly automated means or not to analyse your information for targeted content etc. (also known as profiling).

 

You can action any of these rights by contacting us by email at privacy@dcthomson.co.uk or by post to Information Security Manager, D C Thomson & Co Ltd., Courier Buildings, Albert Square, Dundee DD1 9QJ.

 

14.Sale of the Business

Should all or part of the DC Thomson business be sold to or taken over by another organisation, your personal information may move to that other organisation as part of the sale or takeover agreement.

 

15.Right of complaint to the Regulator for Data Protection

The data protection laws in the UK are regulated and enforced by the Information Commissioner’s Office (ICO). Each individual has the right to raise a concern/complaint to the ICO if they have any concerns about how their personal information and/or privacy is treated. You can do this via

The ICO’s website (https://ico.org.uk/concerns ), follow the links or have an online Live Chat

Call the ICO helpline on 0303 123 1113

Email casework@ico.org.uk

Postal address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

 

16.Links to Third Party Websites

Our website may contains links to other websites belonging to third parties which are not covered by this privacy policy. If you want to click through to a third party website, please make sure that you read the privacy policy for that website.

 

17.Updates to this Policy

            We may update this Policy at any time without notice. We will tell you that we have updated the policy by posting an announcement on the website and/or by emailing you at the email address you have provided to us. By continuing to use the website after we have emailed you or posted a notice informing you of an update, you accept the changes to this Policy.

 

18.Contacting Us

If you have any questions about privacy, or wish to update your details or action any of your other data rights at any time, please contact us using privacy@dcthomson.co.uk .

 

Privacy statement updated September 2018.

 

 

Project Charities