The purpose of this policy is to:
comply with the law
follow good practice
protect clients, staff and other individuals
protect the organisation
This notice applies to all Dundee Waterfront Walks clients booking onto one of our own tours, hereafter the business being referred to as DWW. This notice forms part of our compliance in respect of the General Data Protection Regulations 2018.
We believe that the responsible use of personal information collected on our websites, by phone, letter, email or in person, is critical to our business objectives and reputation. As part of our ongoing commitment to privacy, we have reviewed and revised our Privacy Notice in line with the General Data Protection Regulations 2018. The extent and type of information we receive from you on our external website and other channels depends on the information you provide to us through our contact mailboxes and/or through any registration processes on our site or by other means.
DWW will only collect information relevant to the processing of your booking and we will store all data that we obtain from you in a secure manner. We only share and use data where you have agreed for us to do so, or where we are legally required to do so.
Our Privacy Notice together with our Terms and Conditions sets out what information you provide to us and how that may be processed by us.
What personal information will DWW collect?
Our website may invite you to contact us or to provide information. We use this information to improve your online experience and deliver. “Cookies” (i.e. small text files placed on your computer when you first visit the site) may be used.
You may refuse or accept these. If you are not sure whether your browser has this capability, you should check your own IT arrangements. Cookies are not used to track your navigational habits, unless we obtain your permission to do so. Much of the information we do collect is statistical only (e.g., the domain from which you access the Internet, the date and time you access our site, and the Internet address of the website from which you linked directly to our site) and not personally identifiable. We use this information about the number of visitors and their use of the to make our sites more useful and attractive to you.
We may also collect information provided by you via phone, email, letter or from relevant third party agent partners. This information will be stored in the same secure manner as if it were provided online.
What personal information will DWW use?
We only use your personally identifiable information to respond to your requests, process your booking and to provide you with information about DWW. We may also use it to provide you with more relevant marketing material about DWW services, if you have opted in for this service. We also use personal information for the purposes of providing our services to clients, maintaining client relationships (such as informing our clients of services that may be of interest to them) and for our other related business activities.
What personal information does DWW share?
The personal information you provide to us will be retained only for as long as necessary to fulfil the purposes for which the information was collected or as required by law. We do not share personal information with third parties except as necessary to carry out our business or your request or as required by law or other legal processes, and we never sell your personal information. Furthermore, personal data collected by DWW may be transferred to our subsidiaries or affiliated companies where it is necessary to carry out our business or to meet the purpose for which you have submitted the information. By submitting data through DWW electronically you are providing explicit consent to trans-border transmission of data collected via our website.
DWW may contact you via email to invite you to review any trip you might take with us in order to collect your feedback and improve our services.
DWW may also use such reviews in other promotional material and media for our advertising and promotional purposes.
Gathering of statistics to make your browsing experience better
Keeping in touch with DWW
On visiting the website you have the option to subscribe to our email newsletter. There is an option to opt out of this subscription at the bottom of every newsletter. To receive our newsletter we only require your name and email address. This data will be retained on a secure database. If you opt out of the subscription it will be deleted.
Agency and third party sites
When you visit our website, or our booking ticket agent, Eventbrite, your browser checks if the site’s ‘digital’ or ‘public key’ certificate is legitimate. If it’s not, your browser warns you. An encrypted website and web browsers work together to encrypt information you exchange with the site. The key used for the encryption is contained in the site’s security certificate. This protects your login information, credit card numbers, addresses, and other secure data.
Payment service provider
All payments are processed through Eventbrite, who must fully comply with the Payment Card Industry Data Security Standard (PCI DSS). DWW does not hold any credit/debit card information or any other financial information provided by you.
You can find out about any information we hold about you by making a ‘right of access’ request under the General Data Protection Regulations. If we hold any information about you we will tell you why we hold it, who it has been/will be disclosed to and provide you with a copy of the information in a portable format. You have the right for the data to be updated or erased, or it’s processing restricted. You will not be subject to automated decision making and if you have any concerns over anyway in which we handle your data then please do get in touch with us.
Alastair Derrick is responsible for ensuring that right of access requests are handled within the legal time limit which is one month.
Procedure for making request
Right of access requests must be in writing. There should be a clear responsibility on all employees to pass on anything which might be a subject access request to the appropriate person without delay.
Provision for verifying identity
Where Alastair Derrick, who will managing the access procedure, does not know the individual personally he will request proof of identity before handing over any information.
The access request information will be provided the free of charge. However, a ‘reasonable fee’ will be charged when a request is manifestly unfounded or excessive, particularly if it is repetitive. A reasonable fee may be charged to comply with requests for further copies of the same information but does not mean that we will charge for all subsequent access requests. The fee will be based on the administrative cost of providing the information.
Procedure for granting access
If the request is made electronically, we will provide the information in a commonly used electronic format.
Please note the guidance from ICO on when breaches should be reported as this is one of the main changes from the current Data Protection Act and GDPR https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/personal-data-breaches/
Please also note the information on individuals’ rights which is another key change https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
Terms & Conditions
The following information is provided for convenience as part of the service we offer at this website. However, Dundee Waterfront Walks cannot accept any liability for its accuracy or content. Visitors who rely on this information do so at their own risk.
Dundee Waterfront Walks is not responsible for the contents or reliability of the linked websites and does not necessarily endorse the views expressed within them. Listing shall not be taken as endorsement of any kind. We cannot guarantee that these links will work all of the time and we have no control over availability of the linked pages.
Terms & Conditions of Sale – Dundee Waterfront Walks
This policy is reviewed and updated from time to time. The latest version published will take precedence at all times.