Llaeth Y Llan CYF, Tal Y Bryn, Llannefydd, Denbigh, LL16 5DR (“LYL”) respects your data privacy. This information text describes how LYL will, as the data controller, collect and process personal data about you in connection with our services and the use of our website at www.villagedairy.co.uk
Please read the statement carefully in order to understand how we process, use and disclose your personal data.
1. Processing of personal data
We process the personal data for the following purposes and on the listed legal bases:
• Sending out newsletters
If you sign up for our newsletters we will register the personal data that you provide to us (name, e-mail address) in order to send you relevant and targeted marketing messages.
The processing is based on your consent (GDPR article 6(1)(a). Remember that you can, at any time, withdraw your consent, if you no longer wish to receive our newsletters.
• Your participation in competitions
If you participate in competitions arranged by LYL, we will process the personal data you provide (name, email address, competition input, including answers to questions, etc.) in order to manage the competition, chose and contact the winner (GDPR article 6(1)(b)).
Depending on the specific competition and prize, we may share your name, contact details and prize details with our competition prize vendors and carriers (GDPR article 6(1)(b).
If required under the legislation, we will share your name and prize details with the tax authorities (GDPR article 6(1)(c)).
• Being able to reply when contacted through villagedairy.co.uk or other contact points (email, social media platforms, etc.) – customer service
If you contact us, we will register the personal data that you provide to us (e.g. name, company, title, email address, request details, etc.). Our customer service team has access to this data so we can help you with your request in the best way possible (GDPR article 6(1)(f)).
• Events and workshops
If you sign up for participation in events and workshops arranged by LYL, we will register the personal data that you provide to us (including, name, e-mail address, event, event date) in order to manage the event as well as your participation, confirming your participation, contacting you in case of any changes or cancellations, etc. (GDPR article 6(1)(b)).
• Improving our website
• Interaction with LYL on social media platforms
If you follow us or interact with us on any of our pages on social media platforms, such as Facebook, Instagram, etc., information you provide will be subject to this privacy notice as well as the privacy notice of the respective social media platforms. We encourage you to read the privacy notice of such social media platforms.
2. Disclosure and transfer of the personal data
We disclose your personal data as described above. In addition to this, we make personal data available to our business partners, including IT suppliers that stores and process personal data on our behalf. Such business partners and suppliers are subject to LYL’s instructions regarding the storing and processing of personal data.
Some data processors or sub-processors may be located outside of the EU. The transfer of personal data is based on the EU Commission’s Standard Contractual Clauses or EU-US Privacy Shield, where applicable.
3. Retention period
We store your personal data for as long as necessary to fulfil the purposes above and to comply with legal obligations, including bookkeeping legislation in the countries where we operate.
4. Your rights
When we process personal data for our legitimate interests or when we use your personal data for direct marketing, you have the right to object to our processing of your personal data.
Subject to certain statutory exceptions, you have the right to request access to the personal data we hold and process regarding you.
Further, you have the right to request us to rectify any personal data on you that might be incorrect, as well as the right to request us to restrict the processing of your personal data.
You may request to receive any personal data on you that you provided to us a structured, commonly used and machine-readable format, if our processing of such personal data is based on your consent or a contract that you concluded with us (data portability).
Upon your request we will erase personal data on you, unless we have a legal basis for continuing the processing.
You also have the right to lodge a complaint with the competent supervisory authority, such as the Danish Data Protection Agency.
You have the right to object to the processing of your personal data on certain grounds. For example, you can object to the processing of your personal data that is based on our legitimate interests (GDPR article 6(1)(f)) or used for direct marketing purposes, including profiling.
6. Exercise your rights
As described in sections 4 and 5 above, you have a number of rights when we process your personal data. If you wish to exercise such rights, please submit your request via our online webform, which is available here.
7. Changes to this privacy notice
We reserve the right to change this privacy notice.