This privacy notice applies to visitors to our website, people who contact us with enquiries, complaints or claims, and individuals who submit a CV or job application through the website or by email.

What information we collect, use, and why

We (data controller) only use the following personal information (when explicitly provided by you) for dealing with queries, complaints or claims:

• Names and contact details
• Address
• CV

Cookies

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitors’ use of the website and to compile statistical reports on website activity.
This website does not store any information that would, on its own, allow us to identify individual users of this service without their permission. Any cookies that may be used by this website are used either solely on a per session basis or to maintain user preferences. Cookies are not shared with any third parties.

For further information visit www.aboutcookies.org or www.allaboutcookies.org.

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website. Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

• Your right of access – You have the right to ask us for copies of your personal information. You
  can request other information such as details about where we get personal information from and
  who we share personal information with. There are some exemptions which means you may not
  receive all the information you ask for. You can read more about this right here
• Your right to rectification – You have the right to ask us to correct personal information you think
  is inaccurate and to complete information you think is incomplete. You can read more about this
  right here
• Your right to erasure – You have the right to ask us to delete your personal information. You can
  read more about this right here
• Your right to restriction of processing – You have the right to ask us to limit how we can use your
  personal information. You can read more about this right here
• Your right to object to processing – You have the right to object to the processing of your
  personal data. You can read more about this right here
• Your right to data portability – You have the right to ask that we transfer the personal information
  you gave us to another organisation, or to you. You can read more about this right here
• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. You can read more about this right here
• Draft addition: These rights are not absolute and may apply differently depending on the circumstances and the lawful basis used. We will explain any lawful restriction or exemption if it affects a request.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact DPO@ilchestercheese.co.uk

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information for dealing with queries, processing complaints, or handling claims are:

Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.
For processing CVs and job applications, our lawful basis is also Legitimate interests, as we have a valid business interest in evaluating candidates for open positions.

Consent – For the use of non-essential analytics cookies.

Where we rely on legitimate interests, those interests are to communicate with people who contact us, manage and defend our legal position, recruit suitable employees, prevent misuse of our services, and maintain the security and effective operation of our website. We consider whether the processing is necessary and balance these interests against the rights and freedoms of the people concerned.

Who we share personal information with

We may share personal information, where necessary, with organisations that provide website hosting, IT support, recruitment, professional advice, insurance or other services to us; with courts, regulators, law-enforcement bodies and public authorities where required; and with other parties where disclosure is necessary to establish, exercise or defend legal claims. Service providers acting on our behalf may use the information only under our instructions and must protect it appropriately.

Where we get personal information from

• Directly from you

If you do not provide personal information

You are not normally under a statutory or contractual obligation to provide personal information through this website. However, if you do not provide information that is reasonably required, we may be unable to respond to your enquiry, investigate a complaint or claim, or consider your job application.

Automated decision-making

We do not use personal information collected through this website to make decisions about you based solely on automated processing that produce legal or similarly significant effects.

How long we keep information

Information is kept only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, regulatory, accounting and reporting requirements. As a general guide, routine website enquiries will normally be retained for up to 12 months after the enquiry is closed; unsuccessful job
applications will normally be retained for up to 6 months after the recruitment process ends; and complaint or claim records may be retained for up to 6 years after closure, or longer where a legal or regulatory reason requires it. Technical and cookie information is retained for the periods identified in our cookie information. We may keep securely restricted records for longer where this is necessary to establish, exercise or defend legal claims.

Complaints to the Information Commissioner’s Office (ICO)

If you are unhappy with how we have used your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you
approach the ICO, so please contact us in the first instance.

Data Controller

The Ilchester Cheese Company is the data controller responsible for your personal data. If you have any questions about this privacy notice or how we handle your information, please contact us using the details provided below.

The Ilchester Cheese Co. Ltd
Somerton Road
Ilchester
Somerset
BA22 8JL

DPO@IlchesterCheese.co.uk