Summary of how we use your data
Whitbread uses your personal data to enable users to subscribe to our alerting service to notify them of new documents and material uploaded to our website and deal with enquiries.
Information we collect from you
We collect information from you on certain occasions, and this may cover your name, IP address, email, date of birth, gender, phone number, address, telephone conversations and correspondence. In particular:
- We keep information you give us directly such as contact details, address, comments, feedback and marketing preferences.
- If you engage with us online via our website our cookies will capture your IP address, your location, and record how you use the site to help improve it and improve your user experience.
- If you post information online about us or provide feedback, we may keep a record.
- If you give feedback we will record details and all related information such as emails, letters and phone calls
How we use information and the legal basis
To do what we need to in order to run our business (and ‘pursue our legitimate interests’),
- we use your information to provide and improve our website and businesses, and respond to any comments or complaints you may send us
- we monitor the Whitbread website and responses to email marketing,
- to maintain records for our administrative purposes
We may, if you give us consent:
- send you electronic marketing in relation to our relevant products and services, or those of other Whitbread companies and carefully selected partners of ours.You can subscribe or unsubscribe from our marketing communications online through their account settings.
- pass your personal data on to Whitbread Group PLC to assist in providing the administration of the site and its services such as the subscription service,
- use data for other purposes where we explain that purpose when we ask for consent.
Where we are required to process your data by law:
- In response to requests by the government or law enforcement authorities conducting an investigation.
- in connection with complaints, legal claims, compliance, regulatory and investigative purposes as necessary
- If you exercise your rights under data protection legislation such as where you wish to subscribe or unsubscribe from our marketing communications
Withdrawing consent or otherwise objecting to direct marketing
Wherever we rely on your consent to process your personal data, you will always be able to withdraw that consent, although we may have other legal grounds for processing it, such as those set out above. Nevertheless, you have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing at any time. You can do this by following the instructions in the communication where this is an electronic message, or by contacting us using the details set out below.
When you give consent, you are able to withdraw that consent at any time by contacting us. If you do so we can only continue to use your data if another legal basis applies, such as when we’re required to do something by law.
Whitbread PLC is part of the Whitbread group of companies and data is shared within Whitbread PLC with Whitbread Group PLC.
We use third party providers for the following services
- Hosting and maintenance of the website
- marketing, such as customer insight, relationship management and research
In the event that the business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s adviser and will be passed to the new owners of the business, in which case you will be notified.
Personal data may be shared with government authorities and/or law enforcement officials if required by law or if required for a legal claim.
International Data Transfers
Your personal data will not be transferred outside the European Economic Area (the EU plus Iceland, Lichtenstein and Norway).
Cookies and similar technologies
We keep information on active subscribers, until you advise us you no longer wish to receive notifications from us.
Customer interactions are stored, depending on the nature of the interaction and any applicable law. We look to keep information for the minimum time in line with data protection principles and our processes.
If you unsubscribe from marketing communications, we keep a record of this request indefinitely to ensure we do not send you direct marketing again.
You have rights over your personal data. You can ask for a copy of your information. You can ask for information to be corrected or deleted. You can ask for us to limit or restrict processing. You can object to us processing your data. You can ask for a copy to be sent in structured digital format or ask for us to send it to another party.
Some rights may however be limited, for example we may be obliged by law to keep information, and as we have to respect other people’s privacy so we may not be able to meet your request where that would reveal personal data about someone else. Sometimes there may be a compelling legitimate interest to keep processing data.
To process a request from you, we will need to confirm your identity to ensure we’re accessing the right data.
If you have a data protection question or concern, or have previously worked at Whitbread and have queries in relation to your personal data, please contact us at firstname.lastname@example.org
or write to Whitbread Customer Services, Porz Avenue, Whitbread Court, Dunstable, Beds LU5 5XE.
You have a right to complain to an EU data protection authority. This can be where you live, work or where the matter occurred. In the UK, the authority is the Information Commissioner’s Office (the “ICO”).
For any queries relating to data protection please contact email@example.com or by writing to them at Privacy Officer, Whitbread Group PLC, Whitbread Court, Houghton Hall Business Park, Porz Avenue, Dunstable, Bedfordshire, LU5 5XE.
If we make any changes or updates to this notice we will communicate these.
Which Whitbread entity is the controller?
Whitbread Group PLC, Whitbread Court, Houghton Hall Business Park, Porz Avenue, Dunstable, Bedfordshire, LU5 5XE is the data controller.