This notice describes how Performanceart Ltd (Performanceart) uses personal data. It outlines Performanceart’s data protection obligations and your data protection rights under the regime introduced by the EU General Data Protection (Regulation 2016/679, the “General Data Protection Regulation”).
The GDPR applies to “personal data” meaning any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier.
Performanceart needs to use your personal data to provide its services to you, so this notice outlines the following points about the processing of your personal data:
Why Performanceart needs to process personal data:
Your Data are collected to effectively and properly manage your account(s) with us. Data is stored for specific purposes and only data that is relevant to that purpose will be stored. We will use the Data for several different purposes, including;
If at any time you wish to be removed from marketing mailing lists or for any limits to be applied with respect to marketing materials received by you, please let us know. You can do this by e-mailing us directly at firstname.lastname@example.org
Performanceart may collect data:
Performanceart stores your data on physical and electronic media. Data is safeguarded by Performanceart and its Service Providers by maintaining physical and electronic security controls that are designed to comply with applicable legal standards.
The Data that is collected or held in relation to you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who works for us or for one of our Service Providers. In some cases, the laws of the destination country may not provide the same level of data protection as countries within the EEA. However, all Data wherever they are held by Performanceartwill be afforded a high level of protection against any unauthorised or accidental disclosure, access or deletion. By submitting your Data you agree to this transfer, storing or processing.
Unfortunately, the transmission of information via the internet is not completely secure. Although Performanceart will do its best to protect your Data, we cannot guarantee the security of your Data transmitted electronically. Any such transmission is at your own risk.
Types of data that might be collected:
During Performanceart’s relationship with you Performanceart will collect and process Data about you, including:
Performanceart uses Service Providers to conduct aspects of its business, so information may be disclosed to them and their affiliates Data that you have provided in order to fulfil the purposes for which the Data is held. These Service Providers may disclose such Data to each other and to each other’s affiliates in order to achieve the same purposes.
Performanceart and its Service Providers may also be required to disclose your Data to governmental agencies, self-regulatory organisations, industry associations and similar bodies in order to fulfil legal and regulatory requirements. In addition, the laws of certain countries and states give people involved in lawsuits and other legal proceedings the right under certain circumstances to obtain information from Performanceart and its Service Providers, including your Data. Performanceart and its Service Providers will comply with these laws to the extent required.
Performanceart will not sell your Data to any third party. Wherever possible, Service Providers are required to enter into confidentiality agreements that prohibit them from selling or improperly using your Data.
Performanceart will retain your personal information for a period of up to seven years following the point where the business relationship has ceased.
It may be necessary to retain your personal information beyond this period depending on additional legal/regulatory obligations. Thereafter, Performanceart will refrain from collecting any further personal information on you and shall take appropriate steps to dispose of any records containing your personal information to the extent this is operationally feasible and proportionate.
Lawful basis for processing
Performanceart assesses all personal data that is collected or stored to ensure that there is a legal basis for each type of data under GDPR. Given that Performanceart is an Appointed Representative of Thornbridge Investment Management LLP who are an FCA regulated firm, the majority of lawful basis for Performanceart’s processing is to meet its obligations to Thornbridge (legal obligation basis) or to fulfil its obligations to you under contract (contract basis).
Other lawful basis may be used where Performanceart assesses this is necessary and appropriate.
Data subject rights
You have the following rights, in certain circumstances, in relation to your personal information:
Where Performanceart or its Service Provider(s) requires your personal information to comply with AML or other legal requirements, failure to provide this information means Performanceart will not be able to accept you as a client.
Performanceart shall notify you of any personal information breach affecting you that is likely to result in a high risk to your rights and freedoms.
Changes to this notice
Performanceart will need to update its privacy notice in response to regulatory requirements or changes to its business. The latest notice will always be available on the Performanceart website (www.performanceartltd.co.uk).
How to contact Performanceart
Under the GDPR, data subjects can make a complaint to the supervisory authority including the Member State in which they reside or work or the place of the alleged infringement.