Visit Brighton

This policy was last updated on 1st May 2018.

VisitBrighton (“we, “us” or “our”) is the official tourism delivery unit for Brighton & Hove City Council (BHCC). To see BHCC’s Privacy Policy please go to the Brighton & Hove City Council website.  

We are committed to preserving the privacy of our customers. This Freedom of Information and Privacy Policy lets you know our policy for the collection of information about you and your transactions with us.

We don’t share your information with other companies without your permission and we will only send you emails if you specifically give us consent to do so.

Contents

1. Terms of Use

1.1 Accessibility of our website

1.2 Copyright notice

1.3 Our presence on social media sites

1.4 User Generated Content (UGC)

1.5 Freedom of Information

2. VisitBrighton Privacy Policy

2.1 Information that we collect

2.2 How we collect your information

2.3 How we use personal information

2.4 General

2.5 Sharing personal information

2.6 International transfers of your information

2.7 Security of your personal information

2.8 Cookies

2.9 Links to third party sites

2.10 Retaining and deleting personal data

2.11 Access to your personal information and your rights

1. Terms of Use

The Terms of Use below apply to your access to and use of any websites owned and/or operated by the “VisitBrighton” brand which is the official tourism delivery unit for Brighton & Hove City Council, with its offices at Brighton Town Hall, Brighton, BN1 1JA.

Accessing and/or using any part of this site constitutes your acceptance of these Terms of Use. We reserve from time to time the right to make amendments to these Terms of Use and your continued use of the site will constitute your acceptance of any changes made.

Whilst we endeavour to ensure that the information on this site is correct, no warranty, express or implied, is given as to its accuracy and we accept no liability for any errors or omissions,

Usage of the site is at your own risk. We shall not be liable for any damages (including, without limitation, damages for loss of business or loss of profits) arising in contract, tort or otherwise from the use of or inability to use this site, or any material contained in it, or from any action or decision taken as a result of using this site or any such material.

We accept no responsibility for any third party owned tools, products or content featured or made available to you on our site or for any third party site(s) which our site may link to via any hypertext links, banners, buttons or other such functionality. Such links to third party sites are provided for your convenience on an "as is" basis with no warranty, express or implied, for the information provided in any third party sites.

If any of these terms should be determined to be illegal, invalid or otherwise unenforceable by reason of the laws of any state or country in which these terms are intended to be effective, then to the extent and within the jurisdiction in which that term is illegal, invalid or enforceable, it shall be severed and deleted from the clause concerned and the remaining terms and conditions shall survive, remain in full force and effect and continue to be binding and enforceable.

These Terms shall be governed by and construed in accordance with English law.

1. 1. Accessibility of our website

We have developed this website to serve the largest possible audience by addressing the needs of people and systems with differing abilities. All pages on this site follow most of the W3C's WAI accessibility guidelines, and comply with the UK's Disability Discrimination Act.

1.2. Copyright notice

Unless otherwise stated, the copyright and any other rights in all material on this site are owned by us.

You are permitted to print and download extracts from this site on the following conditions: 

• Use of documents and related graphics on this site is for information and/or personal, non-commercial use only; 
• Any copies of these pages saved on to disk or to any other storage medium may only be used for subsequent viewing purposes or to print extracts for personal, non-commercial use; 
• No documents or related graphics on this site are to be modified in any way; 
• Graphics on this site are not to be used separately from the accompanying text; 
• A copyright notice (VisitBrighton) must appear in all copies; 
• No part of this site may be reproduced or stored in any other website without our prior written consent.

1.3. Our presence on Social Media sites

We have accounts on social media sites such as Twitter, Instagram and Facebook. 

We welcome your comments or questions on our social media pages and we encourage open debate. 

However, we do ask that our followers adhere to certain good practices to ensure that our page complies with the law and regulations governing the Civil Service, and to create a welcoming environment for all of our followers. 

Therefore, we will remove comments that: 

• Contain swearing, abusive, offensive or obscene language 
• Make potentially libellous or defamatory statements 
• Constitute spam or promote or advertise products except where it is for an event, publication or similar item that has direct relevance to us 
• Contain material which is potentially confidential, commercially sensitive, or which may cause personal distress or loss 
• Are designed to cause nuisance to the page administrator or other users

We may remove any posts that violate the above rules without prior notice, and our decision will be considered final. We will not edit any of your comments. 

1.4. User Generated Content (UGC)

Any user generated content such as any written content including blogs, photos, pictures, audio or video content posted or uploaded by you to our sites are subject to moderation. 

Moderation guidelines
‘Pre-moderation’ means that comments will not be published instantly; they will first be checked by moderators. Moderators will be monitoring the site during office hours Monday to Friday, and aim to process comments as quickly as possible. 

This is not about censoring your views. The aim is to ensure the discussion is fair, inclusive, relevant and constructive. Moderation will not be used to suppress legitimate, reasoned discussion about the issues in this document. 

We will normally approve comments for publication as long as they: 

• Respect other people. Comments should not be malicious or offensive in nature, and should not constitute a personal attack on a person’s character 
• Don’t incite hatred on the basis of race, religion, gender, nationality or sexuality or other personal characteristic 
• Don’t include swearing, hate-speech or obscenity 
• Don’t reveal personal details, such as private addresses, phone numbers, email addresses or other online contact details 
• Don’t break the law – this includes libel, condoning illegal activity, and breaking copyright 
• Are reasonably concise, and don’t constitute spamming of the site 
• Don’t advertise commercial products and services – you can mention relevant products and services as long as they support your comment 
• Don’t impersonate or falsely claim to represent a person or organisation 
• Submitted or posted in the English language – unfortunately, we do not currently have the resource to moderate comments in other languages 
• Are on-topic. Please don’t post messages that are unrelated to this channel 

If you are aged 16 or under, please get your parent/guardian’s permission before submitting a comment. Users without this consent are not allowed to participate or provide us with personal information 

We reserve the right to suspend any UGC at any time. Where we choose not to publish a comment for a reason other than those listed above, we will reply to the user by email explaining our reasons and inviting them to make appropriate changes so that the UGC can be reconsidered for publication on our sites. 

The copyright of the original texts and the copyright of all comments remain with their respective authors.

If you wish to contact us for official correspondence, visit the “contact us” section of our website. 

1.5. Freedom of information

The Freedom of Information Act 2000 gives the public a right of access to information held by public authorities. The “About” section on our website contains information about us as an organisation including our roles and responsibilities, organisational structure and our Board.

If the information you require is not available on our website, please email FreedomofInformation@brighton-hove.gov.uk  

2) VisitBrighton Privacy Policy

VisitBrighton (“we, “us” or “our”) is the official tourism delivery unit for Brighton & Hove City Council (BHCC), , with its offices at Brighton Town Hall, Brighton, BN1 1JA. To see BHCC’s Privacy Policy please go to the Brighton & Hove City Council website.  

VisitBrighton is the data controller in connection with any personal information collected or received by us arising from your use of any of our products, services, applications, websites and customer support communications.

This Policy explains the types of information that we may collect and hold, how that information is used and with whom the data is shared. It also sets out how you can contact us if you have any queries or concerns about this information.

We reserve the right to make changes to this Policy at any time. Your continued use of our products, applications, services and websites that are subject to this Policy will signify your acceptance of any and all changes to this Policy made by us from time to time.

2.1. Information that we collect

We may collect, use, store and transfer information about you in several different ways and this information may be classified in different categories. Please take care when submitting information to us, particularly when completing free text fields or uploading content, documents and other materials. Some of our services may be automated and we may not recognise that you have accidentally provided us with incorrect or sensitive information.

If you register to use the password protected areas of our website, we will ask you to provide us with certain up to date data about yourself which we will handle in accordance with the United Kingdom's Data Protection legislation. We maintain strict security standards and procedures with a view to preventing unauthorised access to your data by anyone, including our staff. We use leading technologies such as (but not limited to) data encryption, fire walls and server authentication to protect the security of your data. All VisitBrighton companies, all our staff and any third parties hired to provide support services, will be required to observe our privacy standards and to allow us to audit them for compliance.

2.1.1. Information that you provide to us
Whenever you interact with us, you may be asked to provide us with information relating to you. The following types of data may be collected from you:

2.1.2. Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender.

2.1.3. Contact Data includes billing address, delivery address, email address and telephone numbers.

2.1.4. Financial Data includes bank account and payment card details.

2.1.5. Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us and may include applicable device ID (s) relating to your particular product(s), delivery date and place of purchase.

2.1.6. Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.

2.1.7. Enquiry Data includes data you provided us with when you contact us for customer service assistance (by any means of communication including written communications or via our website(s), support forums, telephone, email, SMS, or our social media channels) or when you visit us at a public event, such as a trade show or exhibition or participate in one of our surveys, competitions or prize draws, we may record all customer service communications and keep information about the particular communication, including your name, the product(s) you bought, the reason why you contacted us, and the advice we gave you so we can track the resolution of any customer service issues and for customer service training purposes.

2.1.8. Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses. We may also receive content that you choose to upload or post, such as your name, address, telephone number, email address, profile pictures, gender, date of birth, relationship status, interests and hobbies, educational details and employment details, product reviews, comments, photos and forum posts, or details of your interests and preferences that you choose to tell us about when, for example, selecting the services that you wish to receive.

2.1.9. Usage Data includes information about how you use our website, products and services, as well as the frequency and pattern of your service use.

2.1.10. Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences.

Aggregated Data

We also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Policy.

2.2. How we collect your information

We use different methods to collect data from and about you including through:

2.2.1. Direct interactions. You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

• apply for our products or services;
• create an account on our website;
• subscribe to our service or publications;
• request marketing to be sent to you;
• enter a competition, promotion or completing a survey;
• or give us some feedback

2.2.2. Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies, this Technical Data may include:

a) Details of your usage patterns, the content (including any advertisements) that you view and interact with including information on the services and applications you are using in-device to personalise services to your specific needs. For example, when you use our websites, we may collect information about your visit, such as your browser software, which pages you view and which items you ‘clicked’ on or added to your shopping basket.

b) Service, product or server logs, which hold technical information about your use of our service, product or websites, such as your IP address, device ID(s), domain, device and application settings, errors and hardware activity. We may use your IP address to determine your location/country of origin.

c) Device Information such as your device ID(s), including information about where your device is physically located. For example, when you are using a geo-location service or application and you have given consent to your location being shared.

d) Interests and preferences that you specify during set up or registration of any product or service.

2.2.3. Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources as set out below:

2.2.3.1. Financial and Technical Data from parties such as:

a) analytics providers based outside the EU;

b) advertising networks based inside the EU; and

c) search information providers based outside the EU.

2.2.3.2. Contact, Financial and Transaction Data from providers of technical, payment and delivery services based outside and inside the EU.

2.2.3.3. Identity and Contact Data from data aggregators and other specialist agencies based inside or outside the EU.

2.2.3.4. Identity and Contact Data from publicly availably sources such as Companies House and the Electoral Register based inside the EU.

2.2.3.5. Identity and Contact Data from social media if you (i) interact with any of our social network pages or applications; or (ii) you use one of our products or services that allow interaction with social networks, we may receive information relating to your social network accounts. For instance:

• Logging in: If you log-in to one of our websites, applications or services using your social network account, we may receive basic details from your social network profile. The basic details we receive may depend on your social network account privacy settings; however, they might include your social network ID, name, profile picture, gender and location.  
• Interactions: If you click on a ‘like’, ‘+1’ or ‘tweet’ or similar button in one of our websites or services, we may record the fact that you have done so. In addition, the content that you are viewing may be posted to your social network profile or feed. We may receive information about further interactions with this posted content (for example, if your contacts click on a link in the posted content), which we may associate with the details that we store about you. If you ‘like’, ‘+1’ or similar one of our pages on a social network site, we may receive information about your social network profile, depending on your social network account privacy settings. For more information and for details about how you can control access to your social network profile, you should view the privacy policy and other guidance available on your social network’s website.

2.3. How we use your personal information

We will only use your personal data to the extent permitted by the law. We may use the personal information you provide to us or which we collect for the following range of purposes, including:

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

2.4 General

We may also use information we collect for the following general purposes:

2.4.1. Marketing communications

2.4.1.1. We may use your Identity, Contact, Technical, Usage and Profile Data to provide you with product and service updates, newsletters and other communications about existing and/or new products and services by post, email, telephone, in-device messaging and/or text message (SMS).

2.4.1.2. You will only receive marketing communications from us (i) if you have requested information from us; or (ii) purchased goods or services from us; or (iii) if you provided us with your details when you entered a competition or registered for a promotion and, in each case, if you have opted in for receiving such marketing.

2.4.1.3 We will get your express opt-in consent before we share your personal data with any third party company for marketing purposes.

2.4.2. Opting out of marketing communications

2.4.2.1. You can ask us or third parties to stop sending you marketing messages at any time by clicking the "unsubscribe" button at the bottom of the emails or by contacting us or such third parties at any time.

2.4.2.2. Where you opt out of receiving these marketing messages, such opt out will not apply to personal data provided to us as a result of a product/service purchase, warranty registration, product/service experience or other transactions.

Please note that we may occasionally send you important information (including via email) about our products and services that you are using or have used including essential software updates, changes to applicable terms and conditions and/or other communications or notifications as may be required to fulfil our legal and contractual obligations to provide warranty or after sales repair services. These important product and/or service communications are not affected by your opt-out of any marketing communications.

2.4.3 Publish your reviews, comments and content
Where you have uploaded product reviews, comments or content to our websites or services and made them publicly visible, we may link to, publish or publicise these materials elsewhere including in our own advertisements.

2.4.4 Forums
Each time you create or reply to a post or thread on a website forum from us, in addition to providing this forum service, we may also record the forum name and the time and date of your post or thread with your account details. We do this to better understand the ‘typical users’ of our forums and to select or tailor our marketing communications to reflect your forum activity. We do not use the actual content of your forum posts or threads for purposes of sending marketing communications.

2.5. Sharing your personal information

We may have to share your personal data with the third parties set out below for the purposes set out in the table in paragraph 2.3. above.

(a) our payment services providers for services relating to our website and services to which you have subscribed to which may be handled by our payment services provider. We will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds.

(b) one or more of the selected third party suppliers of goods and services identified on our website to which you have specifically consented to share your personal data with for the purposes set out in such consent or to fulfill our contractual obligations. Each such third party will act as a data controller in relation to the data that we supply to it; and upon contacting you, each such third party will supply to you a copy of its own privacy policy, which will govern that third party's use of your personal data.

(c) our authorised data processors and service providers for the purposes of providing certain data processing services for us (acting as our authorised data processors). Examples of authorised data processors could include evaluation and research agencies, billing and fulfilment partners, data analytics providers who process information on our behalf for the purposes outlined above. For example, we may use the services of third parties to personalise content, fulfil orders, deliver packages, send postal mail and emails, send text messages (SMS), provide marketing assistance, process credit card payments, provide fraud checking services and provide customer services. When acting as our authorised data processors, our service providers are required to only process data in accordance with our instructions, in line with this Policy, and are subject to appropriate confidentiality and security obligations. Authorised data processors currently used, but not exhaustively, include: www.newmind.co.uk, Pure360 and Cvent

(d) our professional advisers insofar as reasonably necessary for the purposes of managing risks, obtaining professional advice, or the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

(e) to government bodies such as the Department for Digital, Culture, Media & Sport and law enforcement agencies to prevent fraud, to comply with applicable laws, regulations and court orders and to comply with valid legal information requests from such bodies.

Anonymous statistics

We prepare anonymous, aggregate or generic data (including “generic” statistics) for a number of purposes as outlined above. As we consider that you cannot reasonably be identified from this information, we may share it with any third party (such as our partners, advertisers, industry bodies, the media and/or the general public).

2.6. International transfers of your information

In this paragraph, we provide information about the circumstances in which your personal data may be transferred to countries outside the European Economic Area (EEA).

2.6.1. The hosting facilities for our website(s) are situated in Ireland and the United Kingdom.

2.6.2. Some of our external third parties are based outside the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA.

2.6.3. Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries. (link is external)
• Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe. For further details, see European Commission: Model contracts for the transfer of personal data to third countries. (link is external)
• Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between the Europe and the US. For further details, see European Commission: EU-US Privacy Shield. (link is external)

Please contact us using the details set out at the bottom of this Policy if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.

2.7. Security of your personal information

While we can’t guarantee that unauthorised access will never occur, rest assured that we take great care in maintaining the security of your personal data to prevent unauthorised access to it, through the use of appropriate technology and internal procedures.

What we do to protect your information
We take a number of steps to protect your information from unauthorised access, use or alteration and unlawful destruction, including where appropriate:

• Using Secure Sockets Layer (SSL) encryption when collecting or transferring sensitive information, such as credit card details (SSL encryption is designed to make the data unreadable by anyone but us)
• Limiting access to the information we collect about you (for instance, only those of our personnel who need your information to carry out our business activities are allowed access)
• Putting in place physical, electronic, and procedural safeguards in line with industry standards

What you should do to protect your information

As general best practice on the Internet, it is recommended that individuals take great care with user accounts, and follow some basic rules:

• Do not use trivial passwords (such as single dictionary words)
• Do not use the same password for multiple accounts
• Do use very long passwords (at least 10 characters, but preferably much longer)
• Do use passwords which contain a combination of upper and lower case letters, numbers and special characters e.g. $%^& etc.
• Do keep passwords securely (never written down, or shared with anyone) and changed periodically

2.8. Cookies

2.8.1. Our websites use industry-wide technologies, such as “cookies”, to collect information about the use of our websites and email communications. When we provide online services, we want to make them easy, useful and reliable. This sometimes involves placing small amounts of information on your device, for example, computer or mobile phone. These include small files known as “cookies”. They cannot be used to identify you personally. For instance, these technologies may tell us which visitors clicked on key elements (such as links or graphics) on a website or email and recognise your browser the next time you visit our websites.

2.8.2. Cookies allow us to customise your experience to better match your interests and preferences, or to simply facilitate your signing in to use the services. Most browsers will allow you to erase cookies from your computer hard drive, block acceptance of cookies or receive a warning before a cookie is stored. However, if you block or erase cookies, we may not be able to restore any preferences or customisation settings you have previously specified, and our ability to personalise your online experience would be limited. Please refer to your browser instructions to learn more about these functions.

2.8.4. Cookies are used to improve online services for you through:

• Enabling a service to recognise your device so you don't have to give the same information several times during one task 
• Recognising that you may already have been given a username and password so you don't need to do it for every web page requested 
• Measuring how many people are using services, so they can be made easier to use and to ensure there is enough capacity for a fast service   
• Analysing anonymised data to help us understand how people interact with us so we can make them better

2.8.5. We are using cookies for the following purposes:

The following third-party plugins and scripts that set data in cookies are embedded in our site, meaning we are responsible if they are stored without the user’s consent.

• Google Analytics (_utma, _utmb, _utmc and _utmz cookies): Google Analytics cookies are stored as part of our site’s cookies, as first party cookies. They enable the function of our analytics software. This software helps us analyse information such as visitor numbers, pages viewed and response to marketing activity. We use Google Analytics Demographics and Interest Reporting to get an idea of our demographics and users’ interests. We use this data to develop the site and content around our users’ interests, improve the website and your experience. You can opt-out of Google Analytics for Display Advertising and customize Google Display Network ads using the Ads Settings (link is external). In addition, you can use the Google Analytics Opt-Out Browser Add-on( link is external) to disable tracking by Google Analytics.
• MS CONV and MSANALYTICS (Bing) and Adwords Conversion (Google): These third party cookies allow us to identify which of our advertisements you have clicked on. Each individual advertiser uses its own tracking cookies and the data taken is not confidential or interchangeable.
• Google remarketing: These cookies are written by Google for the purpose of serving ads to users who have previously visited our site as they browse other websites on the internet. To opt out of customized Google Display Network ads click here (link is external).

2.8.6. First Party Cookies

Cookies set by VisitBrighton’s web domain are known as 'first-party' cookies. Some are necessary to the functionality of the site, others provide information to us that we analyse to monitor and improve the site. Our cookies do not store details such as your name, address, telephone number, payment information or anything else that makes you personally identifiable to us. Typically, the cookies set by us generate a random, unique number to store information about a user. The cookies are simply used to record the areas of a site that you visit and for how long. This helps us to monitor the usability of our website and to improve its quality. If you would like to block, restrict or delete cookies from our sites, you can use your browser to do so. Each browser is different, so you may need to refer to the 'Help' section of your browser to find out how to alter your cookie preferences. 

• Cookie Name: ASPSESSIONID* ASP.NET_*
  Issued By: This Website
  Cookie Type / Purpose: Identification. These cookies identify a user, making it easier for them to use the dynamic features of the site without having to provide the same information again as they move from one page to another. 
  Duration: Non-persistent ‘session’ cookie (until the website browser is closed).
• Cookie Name: Google Analytics __utma
  Issued By: This Website
  Cookie Type / Purpose: Performance: to measure and improve site quality through analysis of visitor behaviour.
  Duration: Persistent: 2 years from when set or updated.
• Cookie Name: Google Analytics __utmb__utmc
  Issued By: This Website
  Cookie Type / Purpose: Performance: These cookies are used to record how long a visitor remains on the site. Used to measure and improve site quality through analysis of visitor behaviour.
  Duration: Session (until the website browser is closed).
• Cookie Name: Google Analytics __utmz
  Issued By: This Website
  Cookie Type / Purpose: Performance: This cookie is used to record where a visitor came from - e.g. search engine traffic, ad campaigns and page navigation. Used to measure and improve site quality through analysis of visitor behaviour.
  Duration: Persistent: 6 months from when set or updated.

How to manage cookies

If you want to disable cookies in your browser, you can set your browser accordingly, using its menu bar. You should be aware that, if cookies aren’t enabled on your computer, we are unable to personalise and improve our service to you.

You can find out more about opting out of cookies and safeguarding your online experience by visiting the Network Advertising Initiative website (please note that we are not responsible for the content of external websites).

2.8.7. Third-party cookies

When you visit our websites you may notice some cookies that are not related to us. When you visit one of our pages containing embedded content, such as a video hosted on YouTube, you may be sent cookies from these third party websites. We have no control over the setting of these cookies set by third parties. If cookies concern you, it’s best to check the third-party websites for more information about their cookies and how to manage them.

• Cookie Name: ASPSESSIONID
  Issued By: sharedjs.nmspace.net
  Cookie Type / Purpose: These cookies identify a user, making it easier for them to use the dynamic features of the site without having to provide the same information again as they move from one page to another.
  Duration: Session (until the website browser is closed).

This site also uses content from third party media, which may set third party cookies. VisitBrighton does not control the dissemination of these cookies. You should check the relevant third party website for more information about these.

Facebook

• Cookie Name: Datr lu
  Issued by: facebook.com
  Cookie type / purpose: Facebook use cookies so they know who you are so we they show content that’s most relevant to you, including features, products, and ads. http://www.facebook.com/help/?papa=176591669064814
  Duration: Persistent: 2 years from when set or updated.
• Cookie Name: locale
  Issued by: facebook.com
  Cookie type / purpose: These help Facebook provide a localized experience. For example, they  may store information in a cookie that is placed on your browser or device so you will see the site in your preferred language.
  Duration: Persistent:  5 days from when set or updated.

Twitter

• Cookie Name: guest_id
  Issued by: Twitter.com
  Cookie type / purpose: Twitter may use both session cookies and persistent cookies to better understand how the user interact with their Services. http://twitter.com/privacy
  Duration: Persistent: Persistent: 2 years from when set or updated.

YouTube

• Cookie Name: VISITOR_INFO1_LI
  Issued by: Youtube.com
  Cookie type / purpose: Is created if a Youtube video is embedded on a page.
  Duration: Persistent: 1 year from when set or updated.
• Cookie Name: use_hitbox
  Issued by: Youtube.com
  Cookie type / purpose: When the user plays the videos on the site.
  Duration: Session (until the website browser is closed).
• Cookie Name: PREF
  Issued by: Youtube.com
  Cookie type / purpose: Occasionally set. The nature of Youtube cookies is dependent upon the privacy settings of the videos themselves in Youtube. Full details of Youtube cookies policy here: http://www.google.com/intl/en/policies/privacy/
  Duration: Persistent: 10 years from when set or updated.

2.8.8. Other third party cookies

To offer the best user experience on our site, we sometimes embed other widgets, photos and video content from external websites such as flickr. Pages with this embedded content may present cookies from these websites.

VisitBrighton does not control the dissemination of these cookies. You should check the relevant third party website for more information about these.

2.9. Links to third party sites

Some of our websites may contain links to other third party websites that are not operated by us. While we try to link only to sites that share our high standards and respect for privacy, we are not responsible for the content, security or privacy practices of those third party websites. We strongly encourage you to view the privacy and cookie policies displayed on those third party websites to find out how your personal information may be used.

2.10. Retaining and deleting personal data

2.10.1. This paragraph sets out our data retention policies and procedure, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal data.

2.10.2. Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.

2.10.3. Subject to paragraphs 2.10.4. and 2.10.5. below, we will retain your personal data as follows:

(a) personal data categories will usually be retained for a maximum period of 24 months following receipt unless such data is updated;

(b) general files can be retained for a period of 6 years since receipt by us;

(c) emails can be retained for a period of 7 years since receipt by us.

2.10.4. In some cases it is not possible for us to specify in advance the periods for which your personal data will be retained. In such cases, we will determine the period of retention by taking into consideration the period necessary for retention for its lawful purpose.

2.10.5. Notwithstanding the other provisions of this paragraph, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

2.11. Access to your information and your rights

In this paragraph, we have provided a summary of the rights that you have under current data protection law. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.

2.11.1. Your principal rights under data protection law are:

• the right to be informed;
• the right to access;
• the right to rectification;
• the right to erasure;
• the right to restrict processing;
• the right to object to processing;
• the right to data portability;
• the right to complain to a supervisory authority; and
• the right to withdraw consent.

2.11.2.. You have the right to confirmation as to whether or not we process your personal data and, where we do, access to the personal data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of personal data concerned and the recipients of the personal data. Providing the rights and freedoms of others are not affected, we will supply to you a copy of your personal data. The first electronic copy will be provided free of charge, but additional copies in specific formats may be subject to a reasonable fee.

2.11.3. You have the right to rectify any inaccurate personal data we hold about you and, taking into account the purposes of the processing, to have any incomplete personal data about you completed.

2.11.4. In some circumstances you have the right to the erasure of your personal data without undue delay. Those circumstances include: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; and the personal data have been unlawfully processed. However, there are exclusions of the right to erasure. The general exclusions include where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defence of legal claims.

2.11.5. In some circumstances you have the right to restrict the processing of your personal data. Those circumstances are: you contest the accuracy of the personal data; processing is unlawful but you oppose erasure; we no longer need the personal data for the purposes of our processing, but you require personal data for the establishment, exercise or defence of legal claims; and you have objected to processing, pending the verification of that objection. Where processing has been restricted on this basis, we may continue to store your personal data. However, we will only otherwise process it: with your consent; for the establishment, exercise or defence of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest.

2.11.6. You have the right to object to our processing of your personal data on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for: the performance of a task carried out in the public interest or in the exercise of any official authority vested in us; or the purposes of the legitimate interests pursued by us or by a third party. If you make such an objection, we will cease to process the personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.

2.11.7. You have the right to object to our processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes). If you make such an objection, we will cease to process your personal data for this purpose.

2.11.8. You have the right to object to our processing of your personal data for scientific or historical research purposes or statistical purposes on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

2.11.9 To the extent that the legal basis for our processing of your personal data is:

• consent; or
• that the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract and such processing is carried out by automated means, you have the right to receive your personal data from us in a structured, commonly used and machine-readable format. However, this right does not apply where it would adversely affect the rights and freedoms of others.

2.11.10. To the extent that the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.

2.11.11. You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk (link is external)). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.