:: PRIVACY POLICY

Privacy Policy

We take privacy seriously (even if our tone isn't). In general, we only process the personal data of our users to the extent necessary to provide a functioning website with our content and services - nothing creepy, nothing extra, and never for sale.
Let's Talk >Let's Talk >
Illustration of two large hands in front of an orange laptop screen displaying a note labeled 'Data Privacy,' with a small person sitting on a vintage bicycle in front of the keyboard.

LEGAL

Privacy Policy
As of July 2022

1. Identity and Contact Details of the Data Controller

The data controller responsible in accordance with the UK General Data Protection Regulation (UK GDPR) and other data protection regulations is:

Media Forty Two Ltd
167-169 Great Portland Street
London
W1W 5PF

Tel: +44 (0) 7811 378339
Email: contact@mediafortytwo.com
Website: www.mediafortytwo.com

2. Contact Details of the Data Protection Officer

Designated external Data Protection Officer:

DataCo International UK Limited
c/o One Peak Partners
41 Great Pulteney Street
2nd Floor
London
W1F 9NZ
United Kingdom

Tel: +44 20 3318 1718
Website: www.dataguard.co.uk

3. General Information on Data Processing

3.1 Scope of Processing Personal Data

We process personal data only to the extent necessary to provide a functional website and our content and services. Personal data is generally processed only with user consent unless legal exceptions apply.

3.2 Legal Basis for Data Processing

The legal bases for processing personal data include:

- Art. 6 (1)(a) UK GDPR — consent
- Art. 6 (1)(b) UK GDPR — performance of a contract
- Art. 6 (1)(c) UK GDPR — legal obligation
- Art. 6 (1)(d) UK GDPR — vital interests
- Art. 6 (1)(f) UK GDPR — legitimate interests


3.3 Data Removal and Storage Duration

Personal data is deleted or restricted once the purpose of storage has been fulfilled, unless statutory retention obligations require longer storage.

4. Rights of the Data Subject

4.1 Right to Information

You have the right to obtain confirmation as to whether personal data concerning you is being processed and to request detailed information regarding such processing.

4.2 Right to Rectification

You have the right to request correction or completion of inaccurate or incomplete personal data without undue delay.

4.3 Right to Restriction of Processing

You may request restriction of processing where data accuracy is contested, processing is unlawful, or legal claims require data retention.

4.4 Right to Erasure

4.4.1 Obligation to Erase

You may request deletion of personal data where it is no longer necessary, consent is withdrawn, or processing is unlawful.

4.4.2 Information to Third Parties

Where data has been made public, reasonable measures will be taken to inform processors of deletion requests.

4.4.3 Exceptions

The right to erasure does not apply where processing is required for legal obligations, public interest, or legal claims.

4.5 Right to Information About Recipients

You may request information about recipients to whom your data has been disclosed.

4.6 Right to Data Portability

You have the right to receive personal data in a structured, commonly used format and to transfer it to another controller.

4.7 Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes at any time.

4.8 Right to Withdraw Consent

You may withdraw consent at any time without affecting prior lawful processing.

4.9 Automated Decisions, Including Profiling

You have the right not to be subject to decisions based solely on automated processing, subject to legal exceptions.

4.10 Right to Complain to a Supervisory Authority

You may lodge a complaint with the UK Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow,
Cheshire
SK9 5AF

Tel: 0303 123 1113
Website: https://www.ico.org.uk

5. Provision of the Website and Creation of Log Files

5.1 Description and Scope of Data Processing

When accessing the website, technical data such as IP address, browser type, operating system, date/time of access, and visited pages are collected.

5.2 Purpose of Data Processing

Data is processed to ensure website functionality, security, and optimisation.

5.3 Legal Basis for Data Processing

Processing is based on Art. 6 (1)(f) UK GDPR (legitimate interest).

5.4 Duration of Storage

Log file data is deleted after seven days unless longer retention is required.

5.5 Objection

Users may not object as processing is essential for website operation.

6. Use of Cookies

6.1 Description and Scope of Data Processing

Cookies store language settings, search terms, and usage statistics.

6.2 Purpose of Data Processing

Cookies enhance usability and analyse website performance.

6.3 Legal Basis for Data Processing

-
Technical cookies: Art. 6 (1)(f) UK GDPR
- Non-essential cookies: Art. 6 (1)(a) UK GDPR

6.4 Duration of Storage and Objection Options

Cookies can be managed or deleted via browser settings.

7. Newsletter

7.1 Description and Scope of Data Processing

Personal data such as email address and name are collected for newsletter distribution.

7.2 Purpose of Data Processing

To send newsletters and prevent misuse.

7.3 Legal Basis for Data Processing

Art. 6 (1)(a) UK GDPR (consent).

7.4 Duration of Storage

Data is stored while the subscription remains active.

7.5 Objection

Users may unsubscribe at any time via the opt-out link.

8. Contact via Email

8.1 Description and Scope of Data Processing

Personal data transmitted by email is stored to process enquiries.

8.2 Purpose of Data Processing

Processing communications with users.

8.3 Legal Basis for Data Processing

Art. 6 (1)(f) UK GDPR; Art. 6 (1)(b) UK GDPR where contractual.

8.4 Duration of Storage

Data is deleted once the enquiry is resolved.

8.5 Objection

Users may object by emailing contact@mediafortytwo.co.uk.

9. Contact Form

9.1 Description and Scope of Data Processing

Data submitted via the contact form is stored for enquiry handling.

9.2 Purpose of Data Processing

To process enquiries and ensure IT security.

9.3 Legal Basis for Data Processing

Art. 6 (1)(f) and Art. 6 (1)(b) UK GDPR.

9.4 Duration of Storage

Data is deleted after the enquiry concludes.

9.5 Objection

Consent may be withdrawn at any time via email.

10. Applications via Email and Application Form

10.1 Scope of Processing Personal Data

Applicant data such as CVs and contact details are collected.

10.2 Purpose of Data Processing

Processing job applications.

10.3 Legal Basis for Data Processing

Art. 6 (1)(b) UK GDPR.

10.4 Duration of Storage

Data is retained for up to six months.

10.5 Objection

Applicants may withdraw applications at any time.

11. Corporate Web Profiles on Social Networks

11.1 Use of Corporate Profiles on Social Networks

We operate corporate profiles on YouTube and Instagram for communication and marketing.

11.2 Use of Corporate Profiles in Professionally Oriented Networks

We maintain a LinkedIn corporate profile for recruitment and information purposes.

12. Hosting

The website is hosted by Automattic Inc (WordPress). Server log files are processed under Art. 6 (1)(f) UK GDPR. Servers may be located within the EU/EEA or other jurisdictions subject to appropriate safeguards.

13. Geotargeting

IP-based geotargeting is used for region-specific advertising based on consent under Art. 6 (1)(a) UK GDPR.

14. Use of Plugins

14.1 Google Web Fonts

Google Web Fonts are used for visual presentation based on user consent. Further details are available at:
https://policies.google.com/privacy
This privacy policy was created with the assistance of DataGuard.

GET IN TOUCH

Contact Us

We'll communicate however works best for you