WHO WE ARE AND WHY WE PROCESS YOUR PERSONAL DATA
We are Stellar Creative Limited and we may process your personal data for the purposes of you entering our prize draw. Under the UK Data Protection Act 2018 and the UK GDPR (General Data Protection Regulation) there are specific obligations to protect personal data and this Privacy Notice explains how we process your personal data in accordance with those laws.
HOW DO WE COLLECT YOUR PERSONAL DATA
We collect your personal data when you enter our prize draw. This can be your name, email address or other contact medium that you provide to us. We do not collect your personal data via third parties.
WHY DO WE USE YOUR PERSONAL DATA COLLECTED AND LAWFUL BASIS
We collect your personal data so that you can enter our prize draw. If you do not submit certain details, You will not be entered into the prize draw.
Our lawful basis for processing your personal data is for our legitimate interests under Article 6(1)(f) of the UK GDPR.
SHARING PERSONAL DATA
We may need to share personal data within the company on a need-to-know basis so that we can contact you if you are a winner. We may need to share your details with third parties so that we can process your winning draw. We will only do this once when we contact you and ask for your permission.
We do not sell or share your personal data with third parties.
Where we engage third parties to process personal data on our behalf, we do so based on written instructions from us and are under a duty of confidentiality and are obliged to implement appropriate measures to ensure the security of data.
DATA SECURITY AND RETENTION
All personal data is recorded, used and deleted by Stellar Creative Limited strictly in line with the usage, data security and deletion statements made by Stellar for which permission of use is confirmed by the provider of the personal data.
Stellar operates internal policies and controls to ensure that personal data is not lost or misused. We store personal data in a cloud-based system that requires 2 factor authentications.
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for personal information we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means and the applicable legal, regulatory, tax, accounting or other requirements.
YOUR DATA SUBJECT RIGHTS
As a data subject depending on the nature of your request you may have the following rights. Not all rights are absolute and will depend on the circumstance and how we process your personal data.
Right to access:Access and obtain a copy of your personal data on request;
Right to rectificatioNRequire Stellar to change incorrect or incomplete data;
Right to erasurE:Require Stellar to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing;
Right to restrict:Require Stellar to restrict or suppress your personal data.
Right to object:Object to the processing of your personal data where we are relying on legitimate interests as the legal ground for processing; and
Right to data portability:Require Stellar to send you your personal data in a readable format.
If you wish to exercise any of these rights, please contact hello@stellar.agency. We may need to verify your identity before any requests can be carried out. We will respond to your request within 1 month of receiving your request. If the request cannot be carried out or we need more time, we will let you know as soon as possible.
COMPLAINTS AND CONCERNS
We would appreciate the chance to deal with your concerns in the first instance. Please contact us at hello@stellar.agency
If you have unresolved concerns and you live or work in the UK or believe that a personal data breach happened in the UK you have the right to complain at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).
