Privacy Notices - Schedule A

PRIVACY NOTICES - SCHEDULE A

THE PERSONAL DATA WE COLLECT WILL BE USED FOR THE FOLLOWING PURPOSES:

This section details the activities listed above that will determine the processing of your data.

 

WHAT ARE YOUR RIGHTS?

For more information on your rights that apply to all the privacy notices listed below, please see ‘Your rights as an individual’.

DATA SHARING

Unless stated below in individual notices BFBS do not share data with any external agency. Data may be shared internally out of legitimate interests for marketing other related services that we think you would find of interest.

COMPETITIONS

Purpose and legal basis for processing

  1. Our purpose for collecting this information is so we can facilitate the competition and distribute prizes.
  2. The legal basis we rely on for processing your personal data is your consent under article 6(1)(a) of the GDPR.

What we need

  1. If you wish to enter a competition, we may require a combination of your first name, last name, email address and personal phone number for the competition entry depending on the source of the competition. Competition winners may also need to provide the home address so that BFBS can have the prize delivered.

Why we need it

  1. We use this information to facilitate the competition. We also need this information, so we can respond to you in the event you are successful.

What we do with it

  1. This data is used for the competition only, but it could be shared to an external provider for the sole purpose of delivering a prize to the winner of the competition.

How long we keep it

  1. For information about how long we hold personal data, see our retention schedule below.

Do we use any data processors?

  1. No.

REGISTER FOR A NEWSLETTER

Purpose and legal basis for processing

  1. Our purpose for collecting the information is so we can provide you with up to date information on the top stories from the world of defence and the military.
  2. The legal basis we rely on for processing your personal data is your consent under article 6(1)(a) of the GDPR.

What we need

  1. If you wish to register for one of our newsletters, you will be asked to provide your email address.

Why we need it

  1. We use this information so that we can email you content on a daily or weekly basis (depending on the option you sign up for).

What we do with it

  1. This data will be used to provide you with the requested information only. We do not share this data externally or for any other purpose.

How long we keep it

  1. For information about how long we hold personal data, see our retention schedule below.

Do we use any data processors?

  1. No.

JOB APPLICATIONS

Purpose and legal basis for processing

  1. Our purpose for processing this information is to assess your suitability for a role you have applied for.
  2. The legal basis we rely on for processing your personal data is article 6(1)(b) of the GDPR, which relates to processing necessary to perform a contract or to take steps at your request, before entering a contract.

Why we need it

  1. The information we ask for is used to assess your suitability for employment. You don’t have to provide what we ask for, but it may affect your application if you don’t.

What we do with it

  1. We'll use all the information you provide during the recruitment process to progress your application with a view to offering you an employment contract with us, or to fulfil legal or regulatory requirements if necessary.
  2. We will not share any of the information you provide with any third parties for marketing purposes.
  3. We’ll use the contact details you give us to contact you to progress your application. We’ll use the other information you provide to assess your suitability for the role.

How long we keep it

  1. For information about how long we hold personal data, see our retention schedule below.

Do we use any data processors?

  1. No.

JOBS FOR EX-MILITARY

Purpose

  1. BFBS provide a link to a third-party job board provider called Cross Deck. BFBS do not process your personal data and this is a connection to a third-party provider who specialise in employment opportunities for ex-service personnel.
     

    Cross Deck Ltd
    Sowton Business & Technology Centre
    Capital Court
    Bittern Road
    Sowton
    Exeter
    Devon
    EX2 7FW

USER RESEARCH

Purpose and legal basis for processing

  1. The purpose of user research allows us to improve the services we provide.
  2. The legal basis we rely on for processing your personal data is your consent under article 6(1)(a) of the GDPR.

Why we need it

  1. We're constantly striving to improve our services to you, from our selection of radio and television channels, to our Armed Forces information, to our wide-ranging media broadcasts and live entertainment. This is your chance to have your say and we’d like to know more about you and your interaction with BFBS.

What we do with it

  1. We will share your survey results in an anonymised data format with carefully selected external parties and internal staff only. We will not share any of the information you provide with any third parties for marketing purposes.

How long we keep it

  1. For information about how long we hold personal data, see our retention schedule below.

Do we use any data processors?

  1. No.

PERSONAL INFORMATION REQUEST

Purpose and legal basis for processing?

  1. Our purpose for processing your personal data is so we can fulfil your information request to us. The legal basis for this is article 6(1)(C) of the GDPR, which relates to processing necessary to comply with a legal obligation to which we are subject.

What we need?

  1. We require two forms of identification that will be provided to us across a secure connection. These can be any two of: Passport, Driving license, Birth certificate, Utility bill (from last 3 months), Current vehicle registration document or Bank statement (from last 3 months).

Why we need it?

  1. We need information from you to respond to you and to locate the information you are looking for. This enables us to comply with our legal obligations under the GDPR legislation.

What we do with it?

  1. When we receive a request from you, we’ll set up an electronic case file containing the details of your request. This normally includes your contact details and any other information you have given us. We’ll also store on this case file a copy of the information that falls within the scope of your request.

How long we keep it?

  1. Identity provided during the process will be deleted as soon as positive identification is completed.

Do we use any data processors?

  1. No.

SOCIAL MEDIA

Purpose and legal basis for processing

  1. We need to collect WhatsApp profile information so that we can serve forces news content that you have consented to receive from BFBS.
  2. The legal basis we rely on for processing your personal data is your consent under article 6(1)(a) of the GDPR.
  3. Consent is required for BFBS to process both types of personal data, but it must be explicitly given. Where we are asking you for sensitive personal data we will always tell you why and how the information will be used. You may withdraw consent at any time by sending ‘STOP’ to the WhatsApp service.

What we need

  1. We will collect and process your mobile number.

Why we need it

  1. We use your mobile number to send you information you have subscribed to.

What we do with it

  1. The mobile number is the only data we use.  Because we must process your WhatsApp profile we will by default have access to your profile data (including public data you have added, such as your photo).  Although our staff would be able to view this in the system, we do not process or share this information. We do not share your mobile number.

How long we keep it

  1. All personal data is deleted from the system within two hours of unsubscribing from the WhatsApp service (by texting the word STOP into the WhatsApp chat window).  It will remain in the backup for a further 61 days until overwritten with newer data.

Do we use any data processors?

  1. We are using a data processor to help run the WhatsApp service for BFBS: MessengerPeople GmbH Herzog-Heinrich-Str. 9 80336 München.

TEA & MEDALS PODCAST

Purpose and legal basis for processing

1. The purpose of this specific mail-out is to provide you with a low-value gift in relation to a promotion for an upcoming BFBS podcast

2. The legal basis we rely on for processing your personal data is your consent under article 6(1)(a) of the GDPR.

Why we need it

1. In order for you to receive this gift, we require your home address in the event that you are unable to receive it at your normal work address

What we do with it

1. We will provide your home address to our distribution partner, Snapmail Ltd, for the purposes of delivery of this gift

How long we keep it

1. Your home address will be deleted from our database within 1 month following delivery

Do we use any data processors?

1. We will be using Snapmail Ltd to facilitate the distribution of this gift

 

FATHER'S DAY VIDEO MESSAGES

Purpose and legal basis for processing

1. The purpose of requiring your information is so that we can receive and then broadcast your video message across a range of BFBS platforms

2. The legal basis we rely on for processing your personal data is your consent under article 6(1)(a) of the GDPR.

Why we need it

1. In order for us to successfully broadcast your message, we need to be able to receive, check and then broadcast it, before deleting all files

What we do with it

1. We will securely store your data on our servers until the point where it has been broadcast across a variety of BFBS platforms and then it will be deleted, in line with our retention policy

How long we keep it

1. All data supplied to us will be deleted by the end of the month following broadcast

Do we use any data processors?

1. No

 

BFBS Retention Policies/Schedules