1. Identity and Contact Details of the Data Controller
The data controller responsible in accordance with the UK General Data Protection Regulation (UK GDPR) and other data protection regulations is:
Media Forty Two Ltd
167-169 Great Portland Street
London
W1W 5PF
Tel: +44 (0) 7811 378339
Email: contact@mediafortytwo.com
Website:
www.mediafortytwo.com 2. Contact Details of the Data Protection Officer
Designated external Data Protection Officer:
DataCo International UK Limited
c/o One Peak Partners
41 Great Pulteney Street
2nd Floor
London
W1F 9NZ
United Kingdom
Tel: +44 20 3318 1718
Website:
www.dataguard.co.uk3. General Information on Data Processing
3.1 Scope of Processing Personal Data
We process personal data only to the extent necessary to provide a functional website and our content and services. Personal data is generally processed only with user consent unless legal exceptions apply.
3.2 Legal Basis for Data Processing
The legal bases for processing personal data include:
- Art. 6 (1)(a) UK GDPR — consent
- Art. 6 (1)(b) UK GDPR — performance of a contract
- Art. 6 (1)(c) UK GDPR — legal obligation
- Art. 6 (1)(d) UK GDPR — vital interests
- Art. 6 (1)(f) UK GDPR — legitimate interests
3.3 Data Removal and Storage Duration
Personal data is deleted or restricted once the purpose of storage has been fulfilled, unless statutory retention obligations require longer storage.
4. Rights of the Data Subject
4.1 Right to Information
You have the right to obtain confirmation as to whether personal data concerning you is being processed and to request detailed information regarding such processing.
4.2 Right to Rectification
You have the right to request correction or completion of inaccurate or incomplete personal data without undue delay.
4.3 Right to Restriction of Processing
You may request restriction of processing where data accuracy is contested, processing is unlawful, or legal claims require data retention.
4.4 Right to Erasure
4.4.1 Obligation to Erase
You may request deletion of personal data where it is no longer necessary, consent is withdrawn, or processing is unlawful.
4.4.2 Information to Third Parties
Where data has been made public, reasonable measures will be taken to inform processors of deletion requests.
4.4.3 Exceptions
The right to erasure does not apply where processing is required for legal obligations, public interest, or legal claims.
4.5 Right to Information About Recipients
You may request information about recipients to whom your data has been disclosed.
4.6 Right to Data Portability
You have the right to receive personal data in a structured, commonly used format and to transfer it to another controller.
4.7 Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes at any time.
4.8 Right to Withdraw Consent
You may withdraw consent at any time without affecting prior lawful processing.
4.9 Automated Decisions, Including Profiling
You have the right not to be subject to decisions based solely on automated processing, subject to legal exceptions.
4.10 Right to Complain to a Supervisory Authority
You may lodge a complaint with the UK Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow,
Cheshire
SK9 5AF
Tel: 0303 123 1113
Website: https://www.ico.org.uk
5. Provision of the Website and Creation of Log Files
5.1 Description and Scope of Data Processing
When accessing the website, technical data such as IP address, browser type, operating system, date/time of access, and visited pages are collected.
5.2 Purpose of Data Processing
Data is processed to ensure website functionality, security, and optimisation.
5.3 Legal Basis for Data Processing
Processing is based on Art. 6 (1)(f) UK GDPR (legitimate interest).
5.4 Duration of Storage
Log file data is deleted after seven days unless longer retention is required.
5.5 Objection
Users may not object as processing is essential for website operation.
6. Use of Cookies
6.1 Description and Scope of Data Processing
Cookies store language settings, search terms, and usage statistics.
6.2 Purpose of Data Processing
Cookies enhance usability and analyse website performance.
6.3 Legal Basis for Data Processing
- Technical cookies: Art. 6 (1)(f) UK GDPR
- Non-essential cookies: Art. 6 (1)(a) UK GDPR
6.4 Duration of Storage and Objection Options
Cookies can be managed or deleted via browser settings.
7. Newsletter
7.1 Description and Scope of Data Processing
Personal data such as email address and name are collected for newsletter distribution.
7.2 Purpose of Data Processing
To send newsletters and prevent misuse.
7.3 Legal Basis for Data Processing
Art. 6 (1)(a) UK GDPR (consent).
7.4 Duration of Storage
Data is stored while the subscription remains active.
7.5 Objection
Users may unsubscribe at any time via the opt-out link.
8. Contact via Email
8.1 Description and Scope of Data Processing
Personal data transmitted by email is stored to process enquiries.
8.2 Purpose of Data Processing
Processing communications with users.
8.3 Legal Basis for Data Processing
Art. 6 (1)(f) UK GDPR; Art. 6 (1)(b) UK GDPR where contractual.
8.4 Duration of Storage
Data is deleted once the enquiry is resolved.
8.5 Objection
Users may object by emailing contact@mediafortytwo.co.uk.
9. Contact Form
9.1 Description and Scope of Data Processing
Data submitted via the contact form is stored for enquiry handling.
9.2 Purpose of Data Processing
To process enquiries and ensure IT security.
9.3 Legal Basis for Data Processing
Art. 6 (1)(f) and Art. 6 (1)(b) UK GDPR.
9.4 Duration of Storage
Data is deleted after the enquiry concludes.
9.5 Objection
Consent may be withdrawn at any time via email.
10. Applications via Email and Application Form
10.1 Scope of Processing Personal Data
Applicant data such as CVs and contact details are collected.
10.2 Purpose of Data Processing
Processing job applications.
10.3 Legal Basis for Data Processing
Art. 6 (1)(b) UK GDPR.
10.4 Duration of Storage
Data is retained for up to six months.
10.5 Objection
Applicants may withdraw applications at any time.
11. Corporate Web Profiles on Social Networks
11.1 Use of Corporate Profiles on Social Networks
We operate corporate profiles on YouTube and Instagram for communication and marketing.
11.2 Use of Corporate Profiles in Professionally Oriented Networks
We maintain a LinkedIn corporate profile for recruitment and information purposes.
12. Hosting
The website is hosted by Automattic Inc (WordPress). Server log files are processed under Art. 6 (1)(f) UK GDPR. Servers may be located within the EU/EEA or other jurisdictions subject to appropriate safeguards.
13. Geotargeting
IP-based geotargeting is used for region-specific advertising based on consent under Art. 6 (1)(a) UK GDPR.
14. Use of Plugins
14.1 Google Web Fonts
Google Web Fonts are used for visual presentation based on user consent. Further details are available at:
https://policies.google.com/privacy