How we collect personal information
We will collect and store your personal information when you physically or electronically give or send it to us, interact with our website or visit our premises. We collect personal information in writing, by telephone, by email, by audio, by video media, by online forms and by website analytics.
BIH collects personal information directly from the individual to whom it relates, except where that individual has consented to BIH collecting the personal information from a third party or the law otherwise permits BIH to do so.
What personal information do we hold about you
Personal information means any information relating to a person that enables them to be identified either directly or indirectly. Personal information that we hold about you may include your:
- email address(es)
- phone number(s)
- job title
- employer/business name
- IP address
- location data
- your CV, identity documents and evidence of qualifications if you have applied for a position with us
- still images, CCTV or video media footage
- audio recordings.
How we use your information
We will use your personal data, and may share your personal data with other parties acting on our behalf, for one or more of the following purposes:
- for legitimate business purposes
- to conduct research about the use of our website
- to assess and respond to a complaint you might make to us
- for our own administrative purposes, including training our staff, conducting internal audits or transferring assets as part of a sale, purchase or investment in the business
- if you are a customer, to carry out our contract with you
- for market research purposes
- to prevent and conduct investigations of suspicious, harmful or corrupt activity
- to comply with BIH’s regulatory and legal obligations.
We do not sell or rent your personal information to others. If we wish to use your personal information for a purpose beyond that for which it was originally provided, we will ask for your consent or seek to rely on another valid legal ground to process your personal information in accordance with the applicable law. Staff and other parties acting on our behalf have a duty of confidentiality under our systems.
Information for marketing purposes
Where you have consented to us using your personal data for marketing purposes, we may use your information to conduct marketing and data analysis or to send you updates and news concerning BIH.
If at any time after you have consented to us using your information for marketing purposes you wish us to stop using your information for these purposes, please email us at email@example.com.
Grounds for processing
To process your data lawfully we need to rely on one or more valid legal grounds. The grounds we may rely upon include:
- your consent to particular processing activities. For example, where you have consented to us using your information for marketing purposes
- our legitimate interests as a business (except where your interests or fundamental rights override these). For example, it is within our legitimate interests to use your data to prevent or detect fraud or abuses of our website
- our compliance with a legal obligation to which BIH is subject. For example, we have a duty to investigate and respond to complaints made against us and may need to process your personal information as part of such investigation
- if you are a customer, because processing your personal data is necessary for the performance of a contract.
Disclosure of your personal information
There are circumstances where we may wish to disclose or are compelled to disclose your personal data to third parties. This will only take place in accordance with the applicable law and for the purposes listed above. These scenarios include disclosure:
- to our subsidiaries, branches or associated offices
- to our outsourced service providers or suppliers to facilitate the provision of our services
- to third party service providers and consultants in order to protect the security or integrity of our business, including our databases and systems and for business continuity reasons
- to another legal entity, on a temporary or permanent basis, for the purposes of a joint venture, collaboration, financing, sale, merger, reorganization, change of legal form, dissolution or similar event. In the case of a merger or sale, your personal data will be permanently transferred to a successor company
- to legal advisers who may need to manage or litigate a claim
- to public authorities where we are required by law to do so
- to any other third party where you have provided your consent.
International transfer of personal data
We may disclose your information to any person as required by law and specifically to any government agency if we believe in good faith that we must do so to comply with the law or that doing so is required to prevent, detect, investigate or remedy improper conduct potentially affecting BIH.
Retention of personal information
CCTV records are generally retained for 12 months. If you apply for a position with us and are unsuccessful, we generally destroy the application within 24 months of the closing date.
Confidentiality and security
BIH is committed to:
- seeking to safeguard all personal information that you provide to us
- seeking to ensure that it remains confidential and secure
- taking all reasonable steps to ensure that personal privacy is respected.
Your rights with regards to your personal information
Data protection law provides individuals with certain rights, including the right to: access, rectify, withdraw consent, erase, restrict, transport, and object to the processing of, their personal information. Individuals also have the right to lodge a complaint with the relevant information protection authority if they believe that their personal information is not being processed in accordance with the law. Further information about your rights is set out below:
- Right to obtain a copy of your personal information. You have the right to obtain a copy of the personal information we hold about you. All requests for access to personal information should be made to firstname.lastname@example.org. You may be required to submit a proof of your identity and a fee.
- Right to rectification. You may request that we rectify any inaccurate and/or complete any incomplete personal information. If we disagree and believe the information to be accurate and complete, we will advise you and include a notation on the record that you dispute the information’s accuracy. Requests for corrections or supplements to all other personal information should be made to email@example.com. We will respond to your request to correct or supplement your personal information within a reasonable time period and, in any event, within any time period specified in relevant laws.
- Right to withdraw consent. You may, as permitted by law, withdraw your consent to the processing of your personal information at any time. Such withdrawal will not affect the lawfulness of processing based on your previous consent. Please note that if you withdraw your consent, you may not be able to benefit from certain service features for which the processing of your personal information is essential.
- Right to object to processing. You may, as permitted by law, request that we stop processing your personal information.
- Right to erasure. You may request that we erase your personal information and we will comply, unless there is a lawful reason for not doing so.
- Your right to lodge a complaint with the supervisory authority. We suggest that you contact the BIH Data Protection Officer about any questions or if you have a complaint in relation to how we process your personal information. However, you do have the right to contact the relevant supervisory authority in the relevant country directly.
Our website provides hyperlinks to websites owned and controlled by others. BIH is not responsible for the privacy practices of any website that it does not own or otherwise control.
Compliance with Privacy Laws
BIH complies with the data protection and privacy laws to which it is subject. You should satisfy yourself that you are familiar with those laws, including any exceptions which may apply under them. You should also be aware that privacy laws in various jurisdictions may change from time to time.
What is a cookie?
A cookie is a small text file downloaded onto your computer or mobile device when you access a website, including this website. Cookies are widely used to make websites work, or work more efficiently, as well as to provide information to the website’s owners and third parties.
Cookies allow a website to recognize your computer or mobile device. Cookies do not identify you as an individual, but do identify the computer or mobile device you use to access the internet and can therefore be used to collect information about your use of the internet. Cookies do not allow access to any information stored on your computer or mobile device.
- to determine the number of visitors to our website and to identify how visitors move around the site and, in particular, which pages they visit. This allows us to improve our website and our services
- to determine from where in the world our website is being visited so that we can ensure sufficient coverage
- to collect information, where available, about your computer or mobile device for system administration purposes, such as your IP address, operating system and browser type.
What cookies are set by our website?
BIH uses Google Analytics session cookies to provide meaningful reports about site visitors. Google Analytics cookies do not collect personal information about website visitors. Cookies set via our website include those listed below:
_utma This Google Analytics cookie keeps track of the number of times a visitor has been to the site relevant to the cookie, when their first visit was, and when their last visit occurred.
_utmb This Google Analytics cookie is used to create a timestamp of the exact moment in time when a visitor enters a site.
_utmc This Google Analytics cookie is used to create a timestamp of the exact moment in time when a visitor leaves a site.
_utmz This Google Analytics cookie keeps track of where the visitor came from, what search engine the visitor used, what link the visitor clicked on, what keyword the visitor used, and where they were in the world when the visitor accessed the website.
ISAWPLB This session cookie keeps track of the current server client session and is purged when the visitor leaves the site. It is used to direct http traffic to the correct web server.
To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.
Note, however, that in some cases, restricting, removing or refusing to accept cookies may reduce the functionality of, or prevent access to, this and other websites.