(last updated 28 March 2019)

This Privacy Policy sets out the data processing practices of Chief Nation, who manage CX2030. Please note that all data thus captured will be used and held in accordance with the requirements of the Data Protection Act 2018.

Chief Nation is a global B2B technology marketing agency. We specialise in helping our clients connect to a C-level audience through account-based marketing programs, VIP networking event experience and digital marketing campaigns.

Chief Nation is the controller and our point of contact for Data Protection is Richard Porter. If you have any requests concerning your personal data or any queries with regards to how we handle your data you can contact by phone on 020 7329 3933, email dpo@chiefnation.com or write to us at Data Protection: Richard Porter, Chief Nation, Thomas Ford House, 23-24 Smithfield Street, London EC1A 9LF.

Purpose of processing your personal data

We would like you to know that we collect pieces of information and capture data when you visit our websites. This is done to help improve your user experience with us, and to connect you with relevant partners who may have a legitimate reason to contact you. We want to ensure you are happy with the types of information that we store and let you know how to opt out or object to such processing.

How we process your data

Activity: Downloading content | Purpose of processing: Provide you with the content and information about our products and services | Lawful basis: Consent/Legitimate interests

Activity: Registering for an event | Purpose of processing: Dealing with your request to attend an event | Lawful basis: Legitimate interest

Activity: Registering for an event | Purpose of processing: Internal accounting processes | Lawful basis: Contract

Activity: Registering for an event | Purpose of processing: Providing you with information about the event and our products and services | Lawful basis: Consent/Legitimate interests

Activity: Making an enquiry | Purpose of processing: Dealing with your enquiries or requests, providing you with information about our products and services | Lawful basis: Legitimate interests

Activity: Making an enquiry | Purpose of processing: Providing you with information about our products and services | Lawful basis: Consent/Legitimate interests

The legal basis on which we rely:

By downloading gated content from our websites or registering for one of our events, you have the chance to opt in and consent to your details to be shared with our partners who may wish to contact you. The name of the third parties and the purpose for sharing will be explicit and you will have the opportunity to review their privacy policy before confirming or opting in. Data may also be shared with carefully selected partners without consent, but only for a specific and expected purpose, which will be made clear at the time of sharing and the right to object will be clearly available. You can unsubscribe from these communications at any time.

Why our processing is legal

Our whole team receives regular training and is responsible for promoting awareness of the GDPR across the business and implementing the new policies and measures. We have reviewed our existing supply chain to achieve GDPR compliance throughout. We have also consulted specialist lawyers and are dedicated to safeguarding the personal information in our care and in developing a data protection regime that is effective, fit for purpose and demonstrates an understanding of, and appreciation for the regulations.

The GDPR requires a data controller to justify the processing of personal data before it can be considered lawful. As such, Chief Nation aims to meet at least one of the two following conditions:

Legitimate Interest: we have determined that processing is necessary for the purposes of the legitimate interests pursued by Chief Nation or by a third party, and such interests are not overridden by the interests or fundamental rights and freedoms of individuals whose data is being processed, or

Consent: the individual has given consent to the processing of his or her personal data for the specific purposes

Should you wish to stop receiving emails

If at any time you would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email.

You may write to the Chief Nation, specifically requesting your removal (addressed to: Data Protection, Chief Nation, Thomas Ford House, 23-24 Smithfield Street, London EC1A 9LF), your request will be actioned upon within 28 days of its receipt. You must include your name and email address for us to ensure its removal.

Please note we cannot accept unsubscribe requests through any other channel.

For more information on GDPR and your rights please see:

https://ico.org.uk/for-organisations/data-protection-reform/overview-of-the-gdpr/

  1. Marketing

Third party marketing

Email:

From time to time you would like to send you targeted and relevant information, offers about products and services and updates that we feel would be of interest to you, from CX2030, Chief Nation, ceo.digital, Chief Wine Officer, and Chief Experiences – which are all part of Chief Nation – and our partners. We will not share any of your personal data, unless you engage with this content. The name of the third parties and the purpose for sharing will be explicit and you will have the opportunity to review their privacy policy. You may at any time withdraw your consent by contacting Data Protection, Chief Nation, Thomas Ford House, 23-24 Smithfield Street, London EC1A 9LF, calling on 020 7329 3933, or emailing dpo@chiefnation.com

Post:

From time to time we would like to send you offers about products and services by post, which we feel would be of interest to you. You may at any time change your mind by contacting Data Protection, Chief Nation, Thomas Ford House, 23-24 Smithfield Street, London EC1A 9LF, calling on 020 7329 3933, or emailing dpo@chiefnation.com

  1. Recipients/categories of recipients

In carrying out our business including our obligations to you, we may use sub-contractors. These will be mailing houses, email broadcasters, marketing agencies. We will ensure that they respect your privacy and abide by all data protection laws.

  1. Transfers to third countries

As part of our processing activities we may transfer your personal data outside of the EU. We will only do this if one of 3 conditions is met:

  • An adequacy decision exists for the country
  • Appropriate safeguards (including Binding Corporate Rules) are in place
  • A derogation (or exception) applies to the transfer

We will always ensure we have a written data processing agreement with these processors to ensure the same level of data protection in the United Kingdom will apply.

  1. Retention periods

In terms of personal data we use for marketing, we will keep this data for as long as we are able to market to you and if you withdraw your consent or opt-out of marketing communications, we will keep your contact details only to ensure that we do not contact you again for marketing purposes.

  1. Data subject’s rights

Your rights

Chief Nation works very hard to maintain a very high standard of data management and usage. You have rights in respect of your personal data. We may need to confirm your identity before we can consider your request.

The right to be informed – you have the right to be told about the collection and use of the personal data you provide. This privacy policy sets out the purpose for which we process your personal data, how long we will keep your data, who we will share your data with. If you have any questions on how and why we process your data please contact the DPO. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-be-informed/

Right of access – you have the right to know whether we are processing your personal data, and to a copy of that data. We would need as much information as possible to enable us to locate your data. We will respond to your request within 28 days of receipt of your request. If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-of-access/

Right to rectification – you have the right to have any incorrect personal data corrected or completed if it is incomplete. You can make this request verbally or in writing. We will need as much information as possible to enable us to locate your data. We will look at any request and inform you of our decision within 28 days of receiving the request.  If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-rectification/

Right to erasure – this right, often referred to as the right to be forgotten allows you to ask us to erase personal data where there is no valid reason for us to keep it. We will look at any request and inform you of our decision within 28 days of receiving the request.  If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-erasure/

Right to restrict processing – you have the right to ask us to restrict processing of your data. We will look at any request and inform you of our decision within 28 days of receiving the request.  If you want to exercise this right, please contact the DP at the contact details above. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-restrict-processing/

Right to data portability – you have the right to move, copy or transfer your personal data from one IT environment to another. This right applies to data that you have provided to us and that we are processing on the legal basis of consent or in the performance of a contract and that processing is by automated means. We will respond to your request within 28 days of receipt of your request. If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-data-portability/

Right to object – you have the right to object to our processing of your personal data based on (i) legitimate interests, or for the performance of a task in the public interests/exercise of official authority (including profiling); (ii) direct marketing (including profiling); and (iii) for purposes of scientific/historical research and statistics.

  • Legitimate interests/legal task – your objection should be based on your particular situation. We can continue to process the data if we can demonstrate compelling legitimate grounds which override your interests.
  • Direct marketing – you have an absolute right to ask us to stop processing for the purposes of direct marketing. We will action your request as soon as possible.
  • Scientific/historical research and statistics – your objection should be based on your particular situation. If we are conducting research where the processing is necessary for the performance of a public task, we can refuse to comply with your objection.

If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-object/

Rights relating to automated decision-making including profiling – you have the right in respect of automated decision making, including profiling. Where we carry out solely automated decision making, including profiling, which has legal or similarly significant effects on you, we can only do this if it is in connection with a contract with you, we have a right under law, or you have provided your explicit consent. We will tell you if this happens and tell you how you can request human intervention or challenge the decision. If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/rights-related-to-automated-decision-making-including-profiling/

  1. Processing based on consent

Where we process your personal data based on your consent you have the right to withdraw that consent at any time without reason. You can opt-out by using the unsubscribe/opt-out in any marketing we send you and you can contact the DPO at the contact details above.

  1. The right to lodge a complaint to the supervisory authority

If you are unhappy with any aspect of our handling of your data you can make a complaint to the Information Commissioner’s Office – https://ico.org.uk/concerns/

  1. Cookies

A cookie is a small piece of information sent by a web server to a web browser, which enables the server to collect information from the browser.  Find out more about cookies on http://www.allaboutcookies.org/

We use cookies to identify you when you visit this website and to keep track of your browsing patterns and build up a demographic profile.

Our use of cookies also allows registered users to be presented with a personalised version of the site, carry out transactions and have access to information about their account.

Most browsers will allow you to turn off cookies.  If you want to know how to do this please look at the menu on your browser, or look at the instruction on http://www.allaboutcookies.org/  Please note however that turning off cookies will restrict your use of our website.

Cookies we use

We use first party and third party cookies. Some cookies are for technical reasons, which are “essential” or “strictly necessary” cookies to keep things running smoothly. Other cookies enable us to anonymously track website visitors’ behaviour, and we refer to these as “performance” or “functionality” cookies.

For example, we use cookies to personalise content and information that we may send or display to you. We also use third party cookies for advertising, analytics, and other purposes.

Most browsers allow you to turn off cookies. To do this look at the “help” menu on your browser. Switching off cookies may restrict your use of the website and/or delay or affect the way in which it operates.

Third party web tools we use

We also use third party webtools that enable us to provide our users with a better experience and service as well help us to diagnose technical problems and analyse user trends. Most importantly, through the use of these tools, the functionality of our sites can be improved, making them more user-friendly, more valuable, and simpler for you to use.

Your information is anonymised, but you may opt-out from us being able to collect your information via these tools:

Google Analytics

Hotjar

Optimizely

Quantcast

AdRoll

  1. Third party websites

Our website may contain links to other websites that are outside our control and are not covered by this Privacy Policy.  If you access other sites using the links provided, the operators of these sites may collect information from you that will be used by them in accordance with their privacy policy, which may differ from ours.

  1. Changes to the privacy policy

This privacy policy is regularly reviewed and will be updated when necessary. If we make any significant changes to the policy we will communicate these to you.