APPLYING TO BROADCAST PROGRAMMING & RESEARCH AND IT ASSOCIATED TRADING BUSINESS AND SUBSIDIARIES
BPR is committed to respecting your privacy and protecting your personal information
- We will be transparent about the information we are collecting and what we will do with it.
- If you tell us you don’t want to receive communication from us we will stop sending them. We will, of course, continue to send essential information relating to a product or service you have purchased from us.
- We will put in place measures to protect your information and keep it secure.
- We will respect your data protection rights and aim to give you control over your own information.
Controller of Personal Information:
What do we mean by personal information?
Personal information means details which identify you or could be used to identify you, such as your name and contact details.
When does this policy apply?
How can we keep your personal information safe?
We take great care to protect the personal information you provide to us. Here are some things you can do to keep your information secure.
Keep your login details confidential
To make sure your access to our websites, other online services, and mobile applications is secure, you should not share your log in details with anyone else. When you finish using the website, online services or mobile app you should log out if others may be able to access your computer or device. This is especially important if you are using a publicly accessible computer.
Be aware of and protect yourself against Internet fraud and ‘phishing’
There is an Internet fraud practice known as ‘phishing’ which is the illegal gathering of personal information by deception. Unsolicited emails are sent to individuals from lists illegally gathered by a third party, and recipients are asked to enter or reconfirm bank or password details into a ‘cloned’ or illegal copy website. If you have any doubt about a communication claiming to be from BPR please contact us immediately at email@example.com
When do we collect information from you?
We collect personal information about you whenever you use one of our services, online services or provide information to us upon request, or opt-in to receive information from us.
What types of information do we collect and retain?
We collect the following categories of personal information:
- Information you provide to BPR to register or enrol in the delivery of a service.
- Information you provide in order to receive information from BPR or a newsletter.
- Information about online registration and other interactions you may have with us.
- Information about your use of our websites, social media and mobile applications.
When and why do we collect ‘sensitive personal data?
BPR does not collect what is considered sensitive personal data information, such as that about race, ethnicity, religion, health, sexuality or biometric information are special categories of data requiring additional protection under European Union and Australian law and is referred to here as “sensitive personal data”.
What do we use your personal data for?
The main purposes for which we use your personal information are:
- To fulfil your request for information about our products and services.
- To enable authorised access to our online services such as online software passwords and cloud services.
- To update you if there are changes to the products and services you have purchased from us.
- To invite you to events or seek your opinion on subjects related to the media industry.
- To carry out analysis and market research for BPR purposes only.
- To keep you informed of BPR products and services.
- To improve our websites, products and services.
- For management and administrative purposes.
How We Collect Personal Information via Cookies and Related Technologies
We collect personal information about you when you use and access our Websites.
You can adjust your Internet browser to disable cookies or to warn you when cookies are being used. However, if you disable cookies, you may not be able to access certain areas of our Websites or take advantage of the improved Website experience that cookies offer.
When you visit our Websites, our web servers may record other information about or relating to you, such as the time and date of your visit or the IP address assigned to the computer you are using to access the Website. In many cases, we cannot and do not use this information to identify you personally – rather, we simply use this information to analyse trends, administer the Websites, track user movements, gather broad demographic information and improve the performance of the Websites.
The third party vendors may also receive and record non-personal information from cookies and similar technology from your browser or mobile device, including your IP address.
How can you change what communications you receive from us?
If you decide you would no longer like to be sent communications, you can change your mind at any time. The ways to stop being sent communications are described below:
By contacting us at firstname.lastname@example.org and requesting the change.
By clicking the Unsubscribe link found at the bottom of all emails sent you and following the instructions.
We aim to action requests to stop being sent communications within 10 working days of receiving those requests, but it is possible you will receive some communication in the period prior to that change being made.
Please note that if you tell us that you do not wish to be sent further communications, you may still receive product and service communications relating to services you are enrolled for or products and services you have purchased from us. If you request us to stop sending communications, please note we will retain your personal information for the purposes of indicating that you do not want to receive communications.
What is the legal basis for using your personal information?
BPR will only process your personal information where we have a legal basis to do so. The legal basis will depend on the reason or reasons BPR collected and needs to use your information. Under EU and Australian data protection laws in almost all cases the legal basis will be:
- Because we need to use your information so that we can allow you access to a service you have requested.
- To fulfil the delivery of products and services you have purchased from us.
- Because it is in BPR’s legitimate interests as a provider of products and services to the media industry to use your personal information to operate and improve our business.
- Because BPR needs to use your personal information to comply with a legal obligation.
- To protect the vital interests of you or another person.
- Because you have consented to BPR using your information for a particular purpose.
If processing of your data is subject to any other laws, then the basis of processing your data may be different to that set out above and may in those circumstances be based on your consent in all cases.
How long do we keep personal information?
We will keep your information for as long as we need it for the purpose it is being processed for. For example, where you have enrolled for a BPR cloud service we will keep the information related to your access for the period that access has been purchased or otherwise contracted.
We will keep the information for a period which enables us to handle or respond to any complaints, queries or concerns relating to your transaction with us. The information may also be retained so that we can continue to improve our services.
We will actively review the information we hold and delete it securely, or in some cases anonymise it, when there is no longer a legal, business or customer need for it to be retained. If you stop interacting with us as a customer, we will remove or anonymise your information after 7 years.
It may be necessary for BPR to use your personal information to complete a business transaction with us.
As a media research and consultancy provider BPR has a legitimate business interest to use the personal information we collect to offer an effective service and carry out our business.
Compliance with legal obligations
Should there be a situation where BPR is subject to a legal obligation and needs to use your personal information to comply with those obligations.
Alternatively, we may collect and use your personal information where you have given your specific consent to us doing so.
However, if you withdraw your full consent, in some circumstances, it may mean we will not be able to provide all or parts of the products and services you have purchased requested from us.
Who do we share your personal information with?
Your personal information will not be shared with any third-party organisation without your express (opt-in) consent.
What countries will your personal information be sent to?
Your personal information may be sent to and stored by us in countries outside the country in which you are located and outside the European Union or Australia, however such transfer of personal information is only ever between the offices of BPR.
In addition, we may need transfer your data to another division of BPR in countries outside the country in which you are located to provide products and services to you.
Requesting a copy of your personal information:
Under the European Union’s GDPR and Australia’s Privacy Act, you may request a copy of any personal data about you held by BPR. There is no fee for this request.
The request must be in writing and must contain the following:
- Your name and postal address.
- Details of your request.
- Any details which may help us locate the information which is the subject of your request, for example:
- Online services for which you are enrolled.
- Communications for which you are you registered.
- If a client of BPR, your BPR client account number or business that you represent.
You must also provide:
- A contact telephone number and email address.
- Your BPR client account number or name of the business your represent.
- photocopy of your passport or driving licence, so that we can verify your identity.
- Your signature and the date of the request.
- If you are applying on behalf of another person then signed authority from the individual is required.
Please send your request to:
Data Protection Officer
Broadcast Programming & Research
Suite G05, 25-29 Berry Street, North Sydney, NSW 2060, Australia
What are your legal rights in relation to the personal information we hold about you?
Under data protection laws in the European Union and Australia, you have certain rights in relation to your personal information. Responses to exercise your rights will be provided within one month and generally there is no fee for making these requests. If your request is particularly complicated we may extend the deadline for responding to three months, but we will let you know if this is the case.
We will handle all requests in accordance with applicable law. However, depending on the right you wish to exercise, and the nature of the personal information involved, there may be legal reasons why we cannot grant your request. Further explanation of those rights and the exceptions to them are set out below.
Details of how to exercise your rights are set out in the section below “How can you exercise your legal rights and change how we use your data?
Your rights include the following:
- You may request us to stop sending you marketing. To see how to change your permission to market please refer to the section “What communication will we send you?”. If you do so we will no longer be able to send you communications. However, if you subsequently purchase a product or service from us we will need to send you communications about the products or services you have contracted from us.
- You may request us to stop using your personal information where we are doing so under legitimate interests (see the section “What is our legal basis for using your personal information” unless it is needed for dealing with legal claims or we have other compelling legitimate reasons that override your rights.
- You may request us to stop processing of your personal information for marketing purposes including analytics for the purposes of targeted marketing.
- You may access the personal information we hold on you.
- You may ask us to correct your personal information (the ‘right of rectification’) if that information is inaccurate.
- You may ask for personal information which identifies you to be erased (or forgotten).
To do this we will remove the information that identifies you from the data we hold in our active systems (“anonymise”). However, a separate and restricted copy of the identifying information will be kept for 7 years to meet the obligations we have to law enforcement, national authorities and legal proceedings.
- We may need to retain certain elements that relate to a contract between you and BPR because we need it for our own legal and auditing purposes (for more information on the basis on which we process your personal information see the section “What is our legal basis for using your personal information?”).
- A record of your request including the personal information you supplied will be retained in the application used to carry this out for 3 years.
- We cannot erase your personal information if we have identified that you either have an open complaint with us or we hold a previous case for you within the past 6 years. We are required to retain this information in case there is a need to re-open the complaint.
How can you exercise your legal rights and change how we use your data?
If you wish to change how we use your personal information, please send your request to:
Data Protection Officer
Broadcast Programming & Research
Suite G05, 25-29 Berry Street, North Sydney, NSW 2060, Australia
Please ensure you mark the letter for Customer Permissions.
We work hard to handle your information responsibly. If you are unhappy about the way we do this, please contact BPR’s Data Protection Officer who will address your concerns.