Star Pubs & Bars Virtual Open Day Privacy Notice

INTRODUCTION and IDENTIFYING the CONTROLLER of your personal data

Star Pubs & Bars Limited (referred to as ”we”, ”us”, or ”our” in this privacy notice), is responsible for processing your personal data. This privacy notice will inform you as to how we look after your personal data when you visit the virtual open day website (“Website”).

Our Contact Details:

If you have any questions about this privacy notice or our processing activities, we can be contacted as follows:

• Mail: 3 – 4 Broadway Park South Gyle Broadway Edinburgh EH12 9JZ, marked for the attention of the Privacy Officer; or
• Email: protectingyourdata@heineken.co.uk.

HOW and WHAT data do we collect about you?

We respect your privacy and are committed to protecting your personal data. This privacy notice will inform you as to how we look after your personal data in relation to you accessing the virtual open day site, provided on our behalf by FINDMYPUB.COM LTD.

Personal data, or personal information, means any information about an individual from which that person can be identified. We collect this information directly from you. We collect, use, store and transfer different categories of information about you which we have grouped together as follows:

• Identity Data – first and last names
• Contact Data – email addresses

We do not knowingly process any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, information about your health or genetic and biometric data).

WHY do we collect and process your personal data?

We only collect your personal data via the Website in order that we can respond to any queries that you may have in relation to submitting an application to become a tenant of one of our pubs.

What is our LEGAL BASIS for collecting your Data?

Under data protection laws, we must have a legal basis under which we process your personal data. When we collect your information through the Website, we do so because the processing is necessary in order to respond to a request submitted by you regarding current vacancies within our pub estate.

WHO do we share your personal data with?

Where third parties act as processors on our behalf, we only permit them to process your personal data for specified purposes and in line with our instructions.

We will only share your personal data with our third party processor who hosts the Website on our behalf, FINDMYPUB.COM LTD. FINDMYPUB.COM LTD shall only have access to your personal data in connection with hosting the Website and shall not use your personal data for any other purpose.

How SECURE is my data?

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees and other third parties who have a need to know. They are subject to a duty of confidentiality.

How LONG will my personal data be used for?

We will only retain your personal data provided when using the Website for a period of 7 days after you have accessed the Website.

What are my RIGHTS?

Under certain circumstances, you have various rights in relation to your personal data under data protection laws. If you wish to exercise any of these rights, please contact us using the details at the start of this notice.

You will not have to pay a fee to access your data or exercise any of your other rights, but please note that we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

In order to respond to any request we may need to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

You have the right to:

• Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you;
• Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected;
• Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; or (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.

You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance using the details at the start of this notice.

This version was last updated in November 2020.