Reporting a Personal Data Breach. 10.8 The GDPR requires Controllers to notify any Personal Data Breach to the applicable regulator and, in certain instances, the Data Subject.
Reporting a Personal Data Breach. The GDPR requires Data Controllers to notify any Personal Data Breach to the applicable regulator (ICO) and, in certain instances, the Data Subject. We have put in place procedures to deal with any suspected Personal Data Breach and will notify Data Subjects or any applicable regulator where we are legally required to do so. Direct Marketing Johnsons are subject to certain rules and privacy laws when marketing to our customers. We may use the information we collect from you when you register, make a purchase, sign up for our newsletter, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways: To quickly process your transactions To send periodic emails regarding your order or other products and services A Data Subject's prior consent is required for electronic direct marketing (for example, by email, text or automated calls). The limited exception for existing customers known as "soft opt in" allows organisations to send marketing texts or emails if they have obtained contact details in the course of a sale to that person, they are marketing similar products or services, and they gave the person an opportunity to opt out of marketing when first collecting the details and in every subsequent message. The right to object to direct marketing must be explicitly offered to the Data Subject in an intelligible manner so that it is clearly distinguishable from other information. A Data Subject's objection to direct marketing must be promptly honoured. If a customer opts out at any time, their details should be suppressed as soon as possible. Suppression involves retaining just enough information to ensure that marketing preferences are respected in the future. If at any time users want Johsnons to stop sending such communications, they should email via our website or write to: The Data Protection Officer Xxxxxxxx 1871 CW9 7LP Amendment of personal data takes place within 2 working days of receipt of the request if made online and 10 working days if made offline.
