We are Law Business Research. We're a UK company, registered number 03281866, and our registered office is Meridian House, Farringdon Street, London EC4A 4HL.
We operate the Global Banking Regulation Review (GBRR) website and subscription service. This statement explains what we do with your personal information when you register to use that website, subscribe to use our service, and how to exercise your rights over it.
If you have any questions about our use of your personal information, or if you want to exercise your rights, you can contact our data privacy team. The best way to do this is by email to [email protected], but if you prefer you can also write to us at: Data Protection Team, Law Business Research, Meridian House, Farringdon Street, London EC4A 4HL.
In respect of the personal information you give us when you subscribe to GBRR or register to use the GBRR website, we are the “data controller” responsible for that information.
We will collect the information that you give us on the subscription form when you subscribe to GBRR, on the registration page when you register to be an GBRR website user, in any completed surveys you submit to GBRR or in any correspondence with us, including your name and address, and we will use that information to give you access to the GBRR subscription service or GBRR website content, and to communicate with you about your use of GBRR, for example to let you know about any updates or changes to GBRR. We may also use this information to send you marketing communications about products or services provided by us or our group companies, and/or other third-party IP and trade mark products and events.
We may receive information about you from your employer where you access services under a corporate subscription or where your contact details are included as part of a corporate listing.
With regards to our publications, if you have been nominated or requested as a referee, we will use the information given to us by the nominator, referee or nominee to contact you regarding the research process. If you are shortlisted for entry into one of our publications, or choose to purchase an extended biography, we will use the information provided to us to create an entry on both on our website and in the final publication.
If you have registered to attend an GBRR webinar, we will use the information that you provide us to communicate with you about the webinar.
We also gather certain statistical information about how you access and use our website, such as your browser version, the publications you download, and the pages you access during a session, in order to help us build a general picture about how people use our website, and to identify technical or usability problems with it. We do this in order to help us make our website better. We do not retain this statistical information in a way which identifies you personally, except when you register or subscribe on the website.
If you have registered on the GBRR website, purchased a product or service, or attended one of our events, we may share your personal information with our group companies so that they can contact you in relation to the related products and services that they offer. We may, for that reason, transfer your data outside the European Economic Area to our group companies located outside of it. Those group companies are subject to our group-wide data protection processes which have been devised to comply with European standards.
We will share aggregate data with advertisers and advertising networks that require this to select and serve relevant adverts to you and others. Save as expressly stated, we do not disclose information about identifiable individuals to our advertisers, but we may provide them with aggregate information about our users. We may also use such aggregate information to help advertisers reach the kind of audience they want to target. We may make use of the personal data we have collected from you to enable us to comply with our advertisers' wishes by displaying their advertisement to that target audience.
If you have registered to attend an GBRR webinar, we will share the information that you provide us with the webinar sponsors.
Other than that, we will not share your data with any third parties and we will not transfer your data outside the European Economic Area.
Under the new data protection law starting in May 2018 we have a number of lawful reasons that we can use (or 'process') your personal information. One of the lawful reasons is called 'legitimate interests'.
Broadly speaking Legitimate Interests means that we can process your personal information if:
We have a genuine and legitimate reason and we are not harming any of your rights and interests
So, what does this mean? When you provide your personal details to us we use your information for our legitimate business interests to send you marketing communications, process your research submissions, or to gather information about how you use our website. Before doing this, though, we will also carefully consider and balance any potential impact on you and your rights.
Some other typical examples of when we might use the approach are for preventing fraud, maintaining the security of our system, data analytics, enhancing, modifying or improving our services, identifying usage trends and determining the effectiveness of our campaigns.
When we use your personal information in order to create or maintain your GBRR subscription or your registration on the GBRR website, we do this on the basis that it is necessary for us to do so in order to perform the contract we are entering into with you to provide you with your GBRR subscription or your GBRR website registration.
It is your responsibility to ensure that the information you submit when subscribing for GBRR is complete, accurate and up to date and it is your responsibility to notify us if that information changes.
We will keep the information that you provide us when you visit the GBRR website for a period of 3 years, after which it will be deleted.
We will keep the information that you provide us when you register on the GBRR website (but are not a full GBRR subscriber) for as long as you continue to be a registered GBRR user, and for a period of 3 years after you have ceased to be a registered user, after which it will be deleted.
We will keep the information that you provide us when you subscribe, to GBRR for as long as you continue to be a subscriber, and for 3 years after you have ceased to be a subscriber, after which it will be deleted.
We will keep the information that you provide us when you take part in one of our research processes for a period of 10 years, after which it will be deleted.
We will keep the information that you provide us when you take part in one of our surveys for a period of 1 year, after which it will be anonymised.
We will keep the information that you provide us when registering for an GBRR webinar for a period of 3 years, after which it will be deleted.
The law gives you certain rights in respect of the information that we hold about you. Below is a short overview of the most commonly-used rights. It is not a complete, exhaustive statement of your rights in respect of your personal data. The website of the Information Commissioner's Office (http://www.ico.org.uk) has a wealth of useful information in respect of your rights over your personal data.
If you wish to exercise your rights, the best way to do so is by email to the office of our data protection officer at [email protected], but if you prefer you can also write to us at the address above.
When you receive marketing communications from us you have the right to unsubscribe at any time. You can do that by following the unsubscribe link in the email, or by contacting us at: [email protected]. If you unsubscribe, we will stop sending you marketing communications.
With some exceptions designed to protect the rights of others, you have the right to a copy of the personal data that we hold about you, as well as information about what we do with it, who we share it with and how long we will hold it for. We may make a reasonable charge for additional copies of that data beyond the first copy, based on our administrative costs.
You have the right to have the information we hold about you corrected if it is factually inaccurate. In most cases the easiest way to do that is to contact us and let us know what information needs to be changed.
In some circumstances, you have the right to require us to delete the information that we hold about you. In particular, if you cease being an GBRR subscriber and we no longer need to process your personal data, then we will delete the relevant data from our systems.
You also have the right to lodge a complaint about our handling of your personal information with the Information Commissioner's Office. You can contact them on 0303 123 1113.
Last updated: January 20202
Get unlimited access to all Global Banking Regulation Review content