Skip to main content
Hafan

Providing details for case studies

Contents

Purpose and lawful basis for processing

Our purpose for processing your personal data is so we can contact you about your story being used as a case study.

The lawful basis we rely on to process your personal data is your consent under article 6(1)(a) of the UK GDPR.

If the information you provide to us in relation to your case study contains special category data such as health data the lawful basis we rely on to process this is your explicit consent under article 9(2)(a) of the UK GDPR. If you provide us with data relating to any criminal convictions and offences we rely on schedule 1, part 3, paragraph 29 of the Data Protection Act 2018.

What we need

We will ask you for your name and contact details. For the case study, we will ask you to share information about how a personal data breach has affected you. This may include asking you for information about your location, health and personal circumstances.

What we do with it

We’ll use your contact details to contact you in order to obtain the information we need for use in the case study.

We may use your name and the case study details you provide on our website, other communication channels such as social media and press releases to share your story. If we do want to publish your name alongside your case study we’ll always seek your agreement beforehand.

How long we keep it

For information about how long we hold personal data, see our retention schedule.

What are your rights?

We rely on consent to process your personal data and this means you have the right to withdraw your consent or to object to the processing of your personal data for this purpose at an time. If at any point you want to withdraw your consent please email or call us 0303 123 1113. If you do that, we’ll update our records immediately to reflect your wishes. For more information on your rights, please see ‘Your rights as an individual’.

Do we use any data processors?

No.