This privacy notice explains how Pitch@Palace Global Limited with UK company number 10622221 (Pitch@Palace Global) or, as applicable, Pitch@Palace C.I.C. with UK company number 09592001 (Pitch@Palace C.I.C.), – collectively referred to in this privacy notice as Pitch@Palace (or “we”, “our”, “us”) – collects, uses and shares your personal data.
Pitch@Palace Global and Pitch@Palace C.I.C. are registered with the Information Commissioner’s Office under registration numbers ZA306388 and ZA198147 respectively. Subject to exceptions, Pitch@Palace Global runs Pitch@Palace operations and events that take place outside of the UK and Pitch@Palace C.I.C. runs the same within the UK.
Pitch@Palace is a ‘data controller’ of your personal data for the purposes set out below and is subject to the General Data Protection Regulation (GDPR).
The categories of personal data we collect
Pitch@Palace collects and processes a range of information about you.
- Directly from you, for example when you apply to take part in a Pitch@Palace event or initiative via our website or app, and when you correspond with us by phone, email or otherwise.
- From someone else acting on your behalf, for example when another member of your team or business completes a Pitch@Palace event or initiative application on behalf of the team or business.
- Through taking photographs and filming at Pitch@Palace events for the purpose of documenting the event and marketing and publicising the Pitch@Palace initiative.
- Through automated means, including about website users using browsing cookies and about visitors to Pitch@Palace events or premises using CCTV monitoring.
Our basis for processing personal data and the purposes for which we use it
Performance of contracts – Pitch@Palace will process your personal data where this is necessary for the performance of a contract with you, or to take steps at your request before entering into such a contract. For example, where you have applied to attend a Pitch@Palace event or competition and we have agreed to process your application and host the event or run the competition.
Compliance with our legal obligations – In some cases, the Pitch@Palace needs to process your personal data in order to comply with its legal obligations. For example, we need to process personal data in order to comply with health and safety legislation or to assist with investigations carried out by the police.
Legitimate interests – In other cases, Pitch@Palace has ‘legitimate interests’ in processing personal information about individuals we interact with. Our legitimate interests include our commercial interests in operating our business in a sustainable manner and in accordance with all applicable legal requirements, and our wider mission to help entrepreneurs realise their business goals. For example, we need to process personal data in pursuit of our legitimate interests in order to: organise Pitch@Palace competitions and events and process and publish results; promote the Pitch@Palace initiative and events; and ensure security at Pitch@Palace events and premises.
Where Pitch@Palace relies on legitimate interests as the legal basis for processing personal data, it has considered whether or not those interests are overridden by the interests or fundamental rights or freedoms of the individuals whose data are being processed and concluded that the processing is, on balance, fair.
Additional reasons – We also process personal data where it is necessary for the establishment, exercise or defence of legal claims (for example, to protect and defend our rights or property, and/or the rights or property of our clients, or of third parties); and we have your specific or, where necessary, explicit consent to do so.
Who we may share your data with
Personal information collected and processed by Pitch@Palace may be shared with the following recipients, or categories of recipients, where necessary:
- Companies within the Pitch@Palace corporate group including where personal information is acquired by Pitch@Palace Global it may be shared with Pitch@Palace C.I.C. and vice versa.
- Staff at The Duke of York’s Office in the administration of our initiatives and activities.
- Sub-contractors for the performance of any contract we enter into with them or you (for example our IT providers).
- Analytics and search engine providers that assist us in the improvement and optimisation of our website and app.
- Selectors, judges, mentors and partners who need to see your certain of your personal information for the purposes of selecting or judging an event, vote or competition.
- Other competition entrants or potential business contacts at official events for networking purposes.
- Where you have been selected for Boot Camp and are entered into a People’s Choice competition subject to a public vote, we may share some of your personal information online via our website and app and is therefore accessible by the public.
- If you attend a Pitch@Palace event, we will publish your name and other information including your business or contact details on our app for other event attendees to see, primarily for networking purposes; through the app, members of the public will be able to view your name and details of the event that you attended (the app provides privacy options that allow you to hide your details).
- Where you are an alumni member (i.e. an entrepreneur who has previously attended an event) your name will be added an alumni list that will display links to your website and social media channels. The alumni list will be available to all app users (the app provides privacy options that allow you to hide your details).
- If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply any agreement with you, or to protect our rights, property, or safety or those of any third party. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
- We will post photos, videos and updates from Pitch@Palace events on our social media pages including Facebook, Instagram, Twitter, YouTube, Weibo, WeChat, WhatsApp and LinkedIn and in doing so will share information about your image and whereabouts with the public.
- If you opt to use a social media plug-in, for example to interact with us on Facebook or Twitter via our website, please be aware that you are potentially sharing your information with a third party over whom we have no control.
How long we store your data
We may retain your personal data for as long as is necessary to fulfil the purposes set out in this privacy notice and/or Pitch@Palace’s reasonable requirements. On expiry of the relevant retention period, your personal data will be deleted, suppressed or anonymised, as applicable.
International data transfers
In the course of running the Pitch@Palace initiative and interacting with you in respect of the same, we may transfer your personal data to a country or territory outside of the European Economic Area (“EEA”), for example where it is processed by our partners outside the EEA, or where personal data is processed by one of our suppliers who is based outside the EEA or who uses storage facilities outside the EEA.
In these circumstances, your personal data will only be transferred on one of the following bases:
- European Commission decision provides that the country or territory to which the transfer is made ensures an adequate level of protection.
- Where the transfer is subject to one or more of the “appropriate safeguards” for international transfers prescribed by the GDPR (for example, standard data protection clauses adopted by the European Commission).
- There exists another situation where the transfer is permitted under applicable law (for example, where we have your explicit consent).
Your rights in relation to your personal data
Under the GDPR, you have the right to:
- Obtain access to, and copies of, the personal data that we hold about you.
- Require us to correct the personal data we hold about you if it is incorrect.
- Require us to erase your personal data in certain circumstances.
- Require us to restrict our data processing activities in certain circumstances.
- Receive from us the personal data we hold about you which you have provided to us, in a reasonable format
- To object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on you.
- Where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal.
If you would like to exercise any of these rights, please contact us in writing using the contact details below. Please note that these rights are not absolute and we may be entitled (or required) to refuse requests where exceptions apply.
If you are not satisfied with how we are processing your personal data, you can complain to the Information Commissioner’s Office (ICO). You can also find out more about your rights under the GDPR (and other data protection legislation) from the Information Commissioner’s Office website available at: www.ico.org.uk.
If you do not provide personal data
In the cases described above, the provision of personal data is a contractual requirement. If you do not provide us with certain personal data, we may not be able to involve you in the Pitch@Palace initiative, work with you or provide our services to you.
If you have any queries about this privacy notice or how we process your personal data, please contact us on firstname.lastname@example.org.
Please note that you can activate the setting on your internet browser to refuse the setting of all or some cookies. However, if you use your internet browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our website.