This notice is applicable to contact from anyone who is neither a client nor prospective client, nor just visiting this website. This includes press or journalistic enquiries, as well as suppliers to us.
We may hold the following information about you:
We generate log files from our web servers: this will include an IP address assigned to you or, more likely, to someone who provides you with Internet access. If you do not want us to see your actual IP address, feel free to visit us via Tor.
References to the basis of processing (e.g. "(Basis: Art. 6(f).)") are a reference to the article of the General Data Protection Regulation under which we undertake the processing in question.
If you give us a ring or make contact by email, we will follow up on your enquiry and see if there is a way in which we can help you. We keep a record of enquiries received, so that we know what we have said to whom.
(Basis: Art. 6(b): we need to use your details to follow up with you. Art. 6(f): keeping track of what we have said is a legitimate thing for us to do, as it helps us understand what areas of work are generating interest, as well as helping us correct errors in reporting.)
We will use your data to manage our relationship with you, and to enquire about (and perhaps even buy) products and services from you.
(Basis: Art. 6(b): we need to use your details to enter into and perform contracts with you. Art. 6(f): keeping track of what we have agreed.)
We have some great suppliers, and we love to recommend them to others where we think it might be helpful. Equally, if we have a bad experience, we may let others know, to avoid making the same mistake.
(Basis: Art. 6(f): recommending you, or not recommending you, is a legitimate thing to do.)
If we are served with a binding order (for example, a court order, a notice under the investigatory powers framework, or a notice from the Information Commissioner’s Office) which includes you, we will be required to process your personal data to be able to comply with it.
(Basis: Art. 6(c): we have to do this to comply with legal and regulatory obligations.)
We may use the logs from our servers to assist with A&A’s security, as well as to determine visitor behaviour and help us plan our business strategy (e.g. such as working out which pages on the site are most popular, or whether particular events have caused an increase in traffic).
(Basis: Art. 6(c): we have legal and regulatory obligations to protect our clients and their information. Art. 6(f): strategy planning is a legitimate, indeed sensible, thing for a business to do.)
We operate CCTV, covering public internal and external areas of our premises.
(Basis: Art. 6(f): we do this for the legitimate interest of protecting A&A.)
We run some mailing lists, to which you can subscribe if you wish.
(Basis: Art. 6(a): you consent to being on the mailing list for as long as you choose to remain a subscriber.)
We do not transfer or process data outside the European Economic Area unless the processing requires it (for example, where you are corresponding with us from outside the EEA and we reply to you).
You have lots of rights in respect of our processing of your personal data. The relevant rights are:
As a general principle, we will not transfer your personal data to third parties without your permission.
There are two exceptions to this: