Privacy & Cookies Notice (‘Notice’)

Last updated: 10 May 2021

Previous version: 4 June 2019

What is this Notice for?

This Notice explains how we protect and handle any personal information you provide to us. By using our website, you understand that we may use your personal information as outlined in this Notice.

Who are we?

Daily Mail and General Trust plc (“DMGT”, “we”, “us” or “our”) is the controller of your personal data for the purposes of data protection law. We are registered in England and Wales with company registration number 184594, and are registered at Northcliffe House, 2 Derry Street, London, United Kingdom, W8 5TT.

What information do we collect?

When you contact us When you contact us, DMGT will process your name and contact information, including email address, company details and any other information concerning your enquiry.

Alert services If you register for the alert service, our processor, Sailthru Inc. (“Sailthru”), will collect your name, country, occupation, email address and marketing preferences on our behalf. You can read Sailthru’s privacy notice here.

Device and cookie information

Cookies help DMGT provide you with a good experience when you browse the Website and allow us to improve it.

Our Website uses Mixpanel, a web analytics service provided by Mixpanel, Inc. (“Mixpanel”). Mixpanel uses cookies to help us analyse how you use the site. The information collected does not include any data that identifies you as an individual but does include other generic information such as your location, browser name and version, your activity on the site including which pages you have visited and at what date and time. You can find Mixpanel’s privacy notice here.

You are able to accept or decline our use of optional cookies when you visit our Website via our Consent Management Platform that appears when you first visit our Website, or by clicking on Cookie Settings.

The links below take you to the help sections for each of the major browsers that will tell you how you can manage your cookies:

– Firefox

 Internet explorer

– Microsoft Edge 

– Chrome

– Safari OS X

– Safari iOS

– Android

– Blackberry

– Windows phone

Shareholder information If you are a DMGT shareholder who has acquired A Ordinary Non-Voting shares, please read our separate shareholder privacy notice for information about shareholder data processing.

What legal basis do we have for processing your data?

Our legal basis for processing your data are:

  • Legitimate Interest: We process some of your data because it is in our legitimate interests to do so. Where this is the case, we have considered the impact using your information may have on you and limited our use to only what is necessary. In the case of improving our website experience, it is in our legitimate interest as an organisation to ensure that we provide you with the best possible experience. We need to use browsing data to identify trends and where improvements can be made. We believe that it is within the reasonable expectations of the visitors to our website that we would use their information in this way. Where we are using this as our basis, we can provide you with an explanation of why the processing is in our interests and you can object to the use of your data.
  • Legal Obligation: There may be situations where we need to use your information to comply with legal and regulatory obligations or engage in legal claims.
  • Consent: If we require your consent, we will provide you with full details of the information that we would like and how we want to use it. Once given, you have the right to withdraw your consent at any time and we shall stop processing your data and delete it .
  • What do we use your data for?

Improving the website Mixpanel uses device and cookie data in aggregate form so that DMGT can understand how users interact with our website and to help us generally enhance the user experience.

Legal basis for processing: Legitimate Interests/Consent

Aggregate statistics or reporting Mixpanel may also collect anonymised details about visitors to the website for the purposes of aggregate statistics or reporting purposes for DMGT. However, no single individual will be identifiable from the anonymised details collected for these purposes.

Legal basis for processing: Legitimate Interests

Managing our alert service communications with you As part of the alert service we will send you regular communications by email. If you would like these to stop at any time, you can unsubscribe either through the opt-out link in the emails or by contacting us at [email protected]

Legal basis for processing: Consent

Disclosures permitted or required by law

Your data will be disclosed where we are obliged to do so by law. We may also disclose your information in order to protect or enforce our rights or the rights of others and for the prevention and detection of crime.

Legal basis for these processing activities: Legitimate Interest/Legal Obligation

Data transfers outside the UK or the EEA

If you register for the alert service, you will need to provide your name and email address. This information will be held by our third-party communications partner, Sailthru. Your data is protected by contracts between us and this organisation which ensure that appropriate safeguards are put in place and mandate an equivalent compliant level of security when they access your information outside the United Kingdom (UK) and / or the European Economic Area (EEA). The information will not be used for any other purpose; it will be stored securely and will not be shared with other third parties.

DMGT may transfer personal information that is collected from you to third-party data processors located in countries that are outside of the UK, and / or the EEA, including the US, in connection with any of the other above purposes. Please be aware that countries which are outside the UK and / or the EEA and have not been deemed adequate by the UK government and / or EU Commission may not offer the same level of data protection as the UK and / or the EEA, although the collection, storage and use of your personal data will covered by agreements which ensure that appropriate safeguards are put in place and an equivalent level of protection by the third party when it is processing your data.

Third-party use of information

Except as described above, DMGT will not disclose, sell or otherwise share your personal information to any third party.

However, if a third party acquires all or part of DMGT’s business and / or assets, DMGT may disclose your personal information to that third party and its professional advisors in connection with the acquisition.

Security

We have technical and organisational measures to safeguard and secure the information we collect. For more information on our efforts to ensure your data is held in a secure manner, please feel free to contact us at [email protected].

How long do we store your data?

The amount of time we hold your data varies according to the purpose we have for using it. However, we will not hold data for any longer than is necessary for the purposes we collected it, the legal basis we rely upon to process the data, and our relevant legal or operation retention requirements.

Any personal data collected for the purposes of administering the alert service will be retained until you opt-out of this service.

Details on specific retention periods for our data can be obtained by contacting us at [email protected].

Your data rights under UK law and EU law

You can exercise your rights under UK General Data Protection Regulation (“UK GDPR”) or the EU General Data Protection Regulation (“EU GDPR”) by sending an email to [email protected]. indicating the type of right you would like to exercise and that you are making the request under the UK GDPR and/or the EU GDPR.

Please note that we may seek to verify the identity of the person submitting the request.

Where you are making a request via a third party, we need to be satisfied that the third party making the request is entitled to act on your behalf and may ask that third party to provide evidence of this entitlement. If we are satisfied that the third party has the appropriate authority, we will respond directly to that third party.

You have the right to access information we hold about you. This includes the right to ask us supplementary information about:

  • the categories of data we are processing
  • the purposes of data processing
  • the categories of third parties to whom the data may be disclosed
  • how long the data will be stored (or the criteria used to determine that period)
  • your other rights regarding our use of your data

We will provide you with the information in electronic within one month of your request, unless doing so would adversely affect the rights and freedoms of other individuals (e.g. another person’s confidentiality or intellectual property rights). We will inform you if we are unable to meet your request for that reason. If we have received a number of requests from you and / or if your request is complex, we may extend this time limit for additional two months and let you know the expected timeframe to process your request.

You have the right to data portability.

Where the legal justification for our processing of your personal data is based on consent or for the performance of a contract, you have the right to request that data you have provided to us (and not data we may have created about you) be provided to you in a structured, commonly used and machine-readable format or transmitted directly to another controller. We will comply with your request unless we have compelling legitimate grounds for why we cannot comply.

If you would like to exercise your data portability right, please contact us

You have the right to make us correct any inaccurate personal data about you. If you would like to update or rectify your data, please contact us.

You can object to us using your data for profiling you or making automated decisions about you.

If you wish to opt-out of having your personal information profiled for personalisation purposes, please contact us.

You have the right to have your personal data deleted

You can do this by asking us to erase any personal data we hold about you, if it is no longer necessary for us to hold the data for the purpose we collected it. Please note that there may be circumstances where we are legally entitled to retain certain data, for example, in order to comply with a legal obligation or to establish, exercise or defend legal claims.

You have the right to object to processing based on legitimate interests.

Where the legal justification for our processing of your personal data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise or defence of a legal claim.

If you wish to object to our processing of your data where we are pursuing our legitimate interests or those of a third party, please contact us stating the nature of and reasons for such objection.

You have the right to restrict the processing of your personal data.

You have the right to restrict our processing of your personal data where you believe such information to be inaccurate, our processing is unlawful or that we no longer need to process such information for a particular purpose, but where we are not able to delete the information due to a legal or other obligation or because you do not wish for us to delete it. In such case, we would mark stored personal data with the aim of limiting particular processing for particular purposes in accordance with your request, or otherwise restrict its processing.

To request the restriction or suppression of your personal data, please contact us.

You have the right to withdraw your consent for our alert service.

If you would like to stop our alert service communications at any time, you can unsubscribe either through the opt-out link in the emails or by contacting us.

You have the right to lodge a complaint regarding our use of your data

Please tell us your concerns first so that we have a chance to address them.

If you are not satisfied with the way we have handled your request, you can address any complaint to your local supervisory authority, e.g. the UK Information Commissioner’s Office as directed on their website at www.ico.org.uk.

Your data rights under the CCPA

This section of the applies solely to visitors, users and others who are residents of the State of California.

You can exercise your rights under the California Consumer Privacy Act (“CCPA”) by sending an email to [email protected], indicating the type of right you would like to exercise and that you are making the request under the CCPA.

In order to process your deletion and / or access request, we are required by law to collect certain information about you to verify your identity. If, however, we cannot verify your identity from the information already maintained by us, we may request additional information from you, which shall only be used for the purposes of verifying your identity under the CCPA, and for security or fraud-prevention purposes.

You may use an authorised agent to submit a request to us on your behalf if they have written permission signed by you. However, we may require that you verify your identity directly with us and confirm that you have provided the authorised agent permission to act on your behalf.

We shall not discriminate against you because you have exercised your rights under the CCPA. 

You have the right to be informed.

This includes information about:

  • the categories and the specific personal information that we may collect
  • the purposes for collecting that personal information
  • the categories of third parties to whom we may disclose that personal information
  • whether we disclose personal information for business purposes or for commercial purposes that would be considered a “sale” under the CCPA

This information is provided in this Notice.

You have the right to access information we hold about you.

You may request to access a copy of the personal information we have collected about you during the 12 months preceding the request.

Upon receipt of a valid and verifiable request from you, we shall disclose to you:

  • both the categories and specific pieces of personal information we have collected about you
  • the categories of sources from which the personal information is collected
  • the business or commercial purpose for collecting that personal information
  • the categories of third parties which whom we share that information

You have the right to receive the above twice per year. If we provide the information electronically, it will be in a in a portable and, to the extent technically feasible, readily useable format that allows you to transmit the information to another entity without hindrance from us.

You have the right to have your personal information deleted.

You may request that we delete any personal information that we have collected from you unless retention of that information is permitted under applicable law.

You have the right to opt-out of the sale of your personal information.

We do not sell your personal information to third parties.

Children and young people

Our website is not aimed at children. We do not intentionally target, or otherwise process information from individuals who are under the age of 18.

If you are aged under 18, please ask for permission from your parent or guardian before giving us your information or using our websites.

If you are a parent or guardian of a child under 18, please contact us if you are aware that your child has used our websites or otherwise provided their information to us without your consent. We shall delete or otherwise cease processing your child’s personal information within a reasonable time.

In accordance with industry best practice guidelines, we may retain your information for a reasonable amount of time to make sure that we do not contact you in the future

Third-party sites

The website may contain links to other websites operated by third parties. Please note that this Notice applies only to the personal information that DMGT collects through our website and DMGT is not responsible for personal information that third parties may collect, store and use through their websites. You should always read the privacy notice of each website you visit carefully.

Updates to this Notice

We may make changes to this Notice and recommend you check this Notice periodically. We will inform you of material changes to this Notice by email.

Contact Us

If you have any queries regarding how we protect your personal data, you may email us at [email protected].

Alternatively, you may write to us at:

DMGT plc, Northcliffe House, 2 Derry Street, London, W8 5TT