Last updated: 1 November 2018
“Personal Data” is information that identifies you as an individual or relates to an identifiable individual, including:
- Full Name and Title
- Postal address (including billing and shipping addresses)
- Email address
- Date of Birth
We may need to collect and process these types of Personal Data in order to provide the requested Services to you, or because we are legally required to do so, or because such information is of particular importance to us and we have a specific legitimate interest under law to process it. We have a legitimate interest in collecting and processing Personal Data: for example: (1) to ensure that our networks and information are secure; (2) to administer and generally conduct business across M&C Saatchi; and (3) to prevent fraud. If you do not provide the information that we request, we may not be able to provide you with the requested Services.
Collection of Personal Data
We and our service providers may collect Personal Data in a variety of ways, including:
- Through the Services: We may collect Personal Data through the Services.
- From Other Sources: We may receive your Personal Data from other sources, such as public databases, joint marketing partners, social media platforms (including from people with whom you are friends or otherwise connected) and from other third parties.
Use of Personal Data
We and our service providers may use Personal Data (i) to perform our contract with you; and (ii) for our legitimate business interests, including the following:
- To respond to your inquiries and fulfill your user requests.
- To send administrative information to you, such as changes to our terms, conditions and policies, as well as marketing communications that we believe may be of interest.
- For our business purposes, such as data analysis, audits, fraud monitoring and prevention, developing new products, enhancing, improving or modifying our Services, identifying usage trends, determining the effectiveness of our promotional campaigns, and operating and expanding our business activities.
Disclosure of Personal Data
Your Personal Data may be disclosed:
- To our third party service providers who provide services such as website hosting, data analysis, payment processing, information technology and related infrastructure provision, email delivery, postal delivery, auditing and other services.
- To our third party brand partners, to permit them to send you marketing communications, consistent with your choices if you have opted into such sharing. Send Me a Sample brand partners include Coca-Cola Great Britain, Diageo, KIND Snacks, L’Oreal, KAO.
Other Uses and Disclosures
We may also use and disclose your Personal Data as we believe to be necessary or appropriate: (a) to comply with applicable law, which may include laws outside your country of residence, to respond to requests from public and government authorities, which may include authorities outside your country of residence, to cooperate with law enforcement, or for other legal reasons; (b) to enforce our terms and conditions; (c) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (d) to protect your vital interests or the vital interests of another person.
In addition, we may use, disclose or transfer your Personal Data to a third party in the event of any reorganisation, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets, shares or stock (including in connection with any insolvency, bankruptcy or similar proceedings).
“Other Information” is any information that is not Personal Data and does not reveal your specific identity or does not directly relate to an identifiable individual, such as:
- Certain browser and device information.
- Certain app usage data.
- Information collected through cookies, pixel tags and other technologies
- Demographic information and other information provided by you that does not reveal your specific identity.
- Information that has been aggregated in a manner that it no longer reveals your specific identity.
If we are required to treat Other Information as Personal Data under applicable law, then we may use and disclose it for the purposes for which we use and disclose Personal Data as detailed in this Policy. For example, information such as IP address and location data constitutes Personal Data under the law applicable in EU jurisdictions.
Collection of Other Information
We and our service providers may collect Other Information in a variety of ways, including:
- Through your browser or device: Certain information is collected by most browsers or automatically through your device, such as your Media Access Control (MAC) address, computer type (Windows or Macintosh), screen resolution, operating system name and version, device manufacturer and model, language, Internet browser type and version and the name and version of the Services (such as the App) you are using. We use this information to ensure that the Services function properly.
- Through your use of the App: When you download and use the App, we and our service providers may track and collect App usage data, such as the date and time the App on your device accesses our servers and what information and files have been downloaded to the App based on your device number.
- IP Address: Your IP address is automatically assigned to your computer by your Internet Service Provider. An IP address may be identified and logged automatically in our server log files whenever a user accesses the Services, along with the time of the visit and the page(s) that were visited. Collecting IP addresses is standard practice and is done automatically by many websites, applications and other services. We use IP addresses for purposes such as calculating usage levels, diagnosing server problems and administering the Services. We may also derive your approximate location from your IP address.
Uses and Disclosures of Other Information
We may use and disclose Other Information for any purpose, except where we are required to do otherwise under applicable law. In some instances, we may combine Other Information with Personal Data. If we do, we will treat the combined information as Personal Data as long as it is combined.
THIRD PARTY SERVICES
In addition, we are not responsible for the information collection, use, disclosure or security policies or practices of other organisations, such as Amazon, Facebook, Apple, Google, Microsoft or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider or device manufacturer, including with respect to any Personal Data you disclose to other organisations through or in connection with the Apps or our Social Media Pages.
We seek to use reasonable organisational, technical and administrative measures to protect Personal Data within our organisation. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Contacting Us” section below.
CHOICES AND ACCESS
Your choices regarding our use and disclosure of your Personal Data
We give you choices regarding our use and disclosure of your Personal Data for marketing purposes. You may opt-out from:
- Receiving electronic communications from us: If you no longer want to receive marketing-related emails from us on a going-forward basis, you may opt-out by replying to the email or by updating your settings in the Send Me a Sample settings page.
We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you opt-out of receiving marketing-related emails from us, we may still send you important administrative messages, from which you cannot opt-out.
How you can access, change or suppress your Personal Data
If you would like to review, correct, update, suppress, restrict or delete Personal Data that you have previously provided to us, or if you would like to receive an electronic copy of your Personal Data for purposes of transmitting it to another company (to the extent this right to data portability is provided to you by applicable law), you may contact us by emailing: Legal@mcsaatchi.com
In your request, please make clear what Personal Data you would like to have changed, whether you would like to have your Personal Data suppressed from our database or otherwise let us know what limitations you would like to put on our use of your Personal Data. For your protection, we may only implement requests with respect to the Personal Data associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable.
Please note that we may need to retain certain information for recordkeeping purposes. There may also be residual information that will remain within our databases and other records, which will not be removed.
use of Services by CHILDREN
The Services are not directed to individuals under the age of 16, and we do not knowingly collect Personal Data from individuals under 16.
Jurisdiction and CROSS-BORDER TRANSFER
Your Personal Data may be stored and processed in any country where we have facilities or in which we engage service providers, and by using the Services you consent to the transfer of information to countries outside of your country of residence which may have data protection rules that are different from those of your country. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access your Personal Data.
If you are located in the EEA: Some of the non-EEA countries are recognized by the European Commission as providing an adequate level of data protection according to EEA standards (the full list of these countries is available here: http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm. For transfers from the EEA to countries not considered adequate by the European Commission, we have put in place adequate measures, such as standard contractual clauses adopted by the European Commission and binding corporate rules to protect your Personal Data. You may obtain a copy of these measures by contacting: Legal@mcsaatchi.com.
we ask that you not send us, and you not disclose, any sensitive Personal Data (e.g., national insurance or social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through the Services or otherwise to us.
36 Golden Square, London, W1F 9EE
Because email communications are not always secure, please do not include credit card or other sensitive information in your emails to us.
ADDITIONAL INFORMATION FOR INDIVIDUALS IN THE EEA
If you are located in the EEA, you also may:
- lodge a complaint with a supervisory authority competent for your country or region.