Website Privacy Policy
1.0 Introduction
1.1 David Kohn Architects Ltd (“we” or “us”) take the privacy of your information very seriously. This policy explains how and for what purposes we use the information collected about you, whether we collect this information via this website (referred to below as “our Website” or “the Site”) or otherwise. Please read this privacy policy carefully.
1.2 By using our Site or any services we offer (including registering for our e-newsletter via our Site), you are agreeing to be bound by this policy in respect of the information collected about you by us.
1.3 If you have any queries about the policy, please get in touch with us at gdpr@davidkohn.co.uk and we will do our best to answer your questions.
1.4 For the purpose of the Data Protection Act 1998, the data controller (”the Controller”) is David Kohn Architects Ltd of Bedford House, 125-133 Camden High Street, London NW1 7JR.
1.5 For the purpose of the General Data Protection Regulations (“GDPR”), the Data Protection Officer of the Controller is the Finance Manager of David Kohn Architects Ltd. Any enquiries relating to data protection or the use of information by DKA may contact the Data Protection Officer at gdpr@davidkohn.co.uk.
1.6 David Kohn Architects Ltd is a limited company providing architectural design services pursuant to and subject to the powers contained in the Architects Act 1997.
2.0 Personal information collected
2.1 We may collect and process the following personal information or data about you:
2.1.1 Your email address;
2.1.2 Other information that you provide by filling in forms on our Website or by sending hardcopy forms and documents to us;
2.1.3 Your replies to any surveys or questionnaires that we may use for research purposes;
2.1.4 Details of your visits to our Site and the resources that you access;
2.1.5 Information we may require from you when you report a problem with our Website;
2.1.6 Information you provide in applying for employment; or
2.1.7 Information you provide when making an enquiry to our practice regarding a potential service contract;
2.2 Although it will not be compulsory to provide us any of the information described above, the nature of our practice requires that we obtain certain personal information from you in order to provide certain services.
3.0 Use of this information
3.1 The following is a broad description of the way in which we process personal information. To understand how your own personal information is processed you may need to refer to any personal communications you have received, or request a description from the Data Protection Officer. We process personal information to fulfil our statutory obligations in the delivery of the Architects Act 1997, to maintain our own accounts and records and to manage our employees and service providers.
We will use this information to:
3.1.1 Ensure that content of our Website presented in the most effective manner for you and for your computer;
3.1.2 Carry out and administer any obligations arising from any agreements entered into between you and us;
3.1.3 Allow you to participate in features of our Website and other services;
3.1.4 Notify you about changes to our Website and other services;
3.1.5 Assist in making general improvements to our Website;
3.1.6 Analyse how users are making use of our Websites;
3.1.7 Recruit staff and service providers; or
3.1.8 Communicate with you.
4.0 Legal basis for processing data
4.1 The legal basis for processing shall be where:
4.1.1 You have given consent to the processing of your personal data for one or more specific purposes;
4.1.2 Processing is necessary for the performance of a contract to which the data subject is party to or in order to take steps at the request of the data subject prior to entering into a contract;
4.1.3 Processing is necessary for compliance with a legal obligation to which we are subject;
4.1.4 Processing is necessary in order to protect your vital interests or those of another natural person;
4.1.5 Processing is necessary for the performance of a task carried out in the public interest; and
4.1.6 Processing is necessary for our legitimate interests, except where those interests are overridden by your interest or fundamental rights and freedoms that require protection of personal data.
5.0 Newsletter
5.1 By actively opting-in to our mailing list, you have consented to receiving information from us in the form of an email newsletter.
6.0 Your rights
6.1 GDPR affords you with rights, which are summarised below. In order to assert any of those rights, you may contact the Data Protection Officer at gdpr@davidkohn.co.uk.
6.1.1 Right of confirmation – you have the right for confirmation as to whether your personal data is being processed;
6.1.2 Right of access – you have the right to obtain free information about any of your personal data we hold, or have transferred to a third party, and a copy of that information;
6.1.3 Right to rectification – you have the right to have any inaccurate information held about you corrected. You have the right to add information to remedy any incomplete information we hold;
6.1.4 Right to erasure – you have the right to have your personal data erased where one of the statutory grounds applies, so long as the processing of that data is no longer necessary;
6.1.5 Right to restrict processing – you have the right to restrict our processing of your personal data where a statutory reason applies;
6.1.6 Right to data portability – you have the right to receive a copy of your personal data in a structured, commonly used and machine-readable format;
6.1.7 Right to object – you have the right to object to our processing of your personal data;
6.1.8 Automated decision making – you have the right not to be subject to a decision based on automated processing, including profiling;
6.1.9 Right to withdraw consent – where the basis of our processing your data is based on consent, you have the right to withdraw consent; and
6.1.10 Right to complain – you have the right to complain to the Information Commissioner’s Office about our processing of your data. The contact details for the ICO are available at www.ico.org.uk.
7.0 Sharing data
7.1 Where necessary or required we share personal data with third parties. Examples of this include:
7.1.1 Third parties to whom we delegated some of our functions including communicating with you and others for the purposes of providing news updates and notifications (amongst other things);
7.1.2 Third party companies for the purpose of outsourcing essential communications;
7.1.3 Where we are under a duty to disclose or share your personal data in order to comply with any legal obligation (for example, if required to do so by a court order or for the purposes of prevention of fraud or other crime);
7.1.4 To protect the rights, property, or safety of David Kohn Architects Ltd, our Site’s users, or any other third parties;
7.1.5 With third-party IT companies employed to provide processing and storage services; and
7.1.6 With current or past employees.
7.2 Where information is shared with a processor that information will be securely transferred, and the data processor contractually and legally obliged to maintain its security, and only use it for the purposes intended.
8.0 Retention of data
8.1 Personal data will only be held for a period where there remains a legitimate purpose for its retention, as defined by David Kohn Architects’ retention and destruction policy (available upon request). After the expiration of that period, the data will be securely deleted.
9.0 Information automatically collected from your computer
9.1 When you visit our Site, our webs servers automatically record your IP address. This IP address is not linked to any of your personal information.
9.2 We may also gather other non-personal information (from which we cannot identify you) such as the type of your Internet browser which we use to provide you with a more effective service.
9.3 When you visit the Site, we may store some information (commonly known as a “cookie”) on your computer. Cookies are pieces of information that a website transfers to your hard drive to store and sometimes track information about you. Cookies are specific to the server that created them and cannot be accessed by other servers, which means that they cannot be used to track your movements around the web. Passwords and credit card numbers are not stored in cookies generated by or accessed by our Site. A cookie helps you get the best out of the Site and helps us to provide you with a more customised service.
9.4 You can block or erase cookies from your computer if you want to (your browser’s help screen or manual should tell you how to do this), but certain parts of our Websites are reliant on the use of cookies. Unless you have adjusted your browser setting so that it will refuse cookies, our Site may issue cookies as soon as you visit it.
9.5 If you register with us or continue to use our Site, you agree to our use of cookies.
10. Other websites
10.1 We cannot be responsible for the privacy policies and practices of websites that are not operated by us, even if you access them via our Site. We recommend that you check the policy of each site you visit and contact its owner or operator if you have any concerns or questions.
10.2 In addition, if you browsed to this website from a third party website, we cannot be responsible for the privacy policies and practices of the owners or operators of that third party site and recommend that you check the policy of that third party site and contact its owner or operator if you have any concerns or questions.
11. Transferring your information outside of Europe
11.1 As part of the services offered to you through our Website, the information you provide to us may be transferred to, and stored at, countries outside of the European Union (“EU”). By way of example, this may happen if any of our servers are from time to time located in a country outside of the EU r one of our service providers is located in a country outside of the EU. We may also share information with other equivalent national bodies, which may be located in countries worldwide. These counties may not have similar data protection laws to the UK. If we transfer your information outside of the EU in this way, we will take steps with the aim of ensuring that your privacy rights continue to be protected as outlined in this privacy policy.
11.2 If you use any of our Websites while you are outside the EU, your information may be transferred outside the EU in order to provide you with those services.
11.3 By submitting your personal information to us you agree to the transfer, storing or processing of your information outside the EU in the manner described above.
12. General
12.1 You may not transfer any of your rights under this privacy notice to another person. We may transfer our rights under this privacy notice where we reasonably believe that your rights will not be affected.
12.2 If any court or competent authority finds that any provision of this privacy notice (or part of any provision) is invalid, illegal or unenforceable, that part or provision will, to the extent required, be deemed to be deleted, and that validity and enforceability of the other provisions of this privacy notice will not be affected.
13. Changes to our privacy policy
13.1 Any changes we may make to our privacy policy in the future will be posted on our Website and, where appropriate, notified to you by email.