Who We Are
We will only use the personal data gathered over the Site as set out in this Policy. Below you will find information on how we use your personal data, for which purposes your personal data is used, with whom it is shared and what control and information rights you may have.
Personal Data We Collect, How it is Collected and How We Use It
For the purposes of data protection legislation in the United Kingdom and the European Economic Area (“EEA”), Bloomsbury is the controller of your personal data. This means that we determine the purposes for, and ways in which, we collect and use personal data in accordance with applicable data protection legislation, such as the UK Data Protection Act 2018 and/or the EU General Data Protection Regulations 2016/679, as applicable.
We collect and process personal data as follows:
To administer the Site - When you visit our Site for informational reasons, i.e. without registering for any of our provided services and without providing us with personal data in any other form, we may automatically collect additional information about you which will contain personal data only in limited cases and which is automatically recognised by our server, such as:
• the website from which you have been directed to our Site;
• the date and time of your requests;
• your device type, screen resolution and browser version;
• your internet service provider;
• information on your operating system, including language settings; and
• information on the pages you have visited on our Site
We use such information only to assist us in providing an effective service (e.g. to adapt our Site to the needs of your device or to allow you to log in to our Site), and to collect broad demographic information which is anonymised and/or aggregated.
The personal data automatically collected is necessary for us to provide the Site to you and for our legitimate interests to guarantee the Site’s stability and security.
If you have signed up to receive our Newsletter - With your email address you can subscribe to our newsletter that provides you with the latest news about our products and services if you consent to receiving such newsletters. Your email address will be retained as long as you subscribe to our newsletter.
The personal data collected is necessary to send you the newsletter and is processed with your consent. You can unsubscribe from this service by opting out via the link provided in each email newsletter.
To customise your experience on the Site - You can opt to customise the way you use the Site by creating an account with us. With regard to the registration of an account and its subsequent use, we process:
• Information (such as, your name, country and email address) that is provided by registration;
• Information in connection with an account sign-in facility (such as, log-in and password details);
• Communications sent by you (such as, via e-mail or Site communication forms).
The purposes for which we process such information is to:
• Identify you at sign-in;
• Provide you with the services and information offered through the Site or which you request;
• Administer your account;
• Communicate with you; and
• Send you advertising which is tailored to your profile.
We process this personal data in order to perform our contract with you and for our legitimate interests to improve your experience while using the Site.
Analytics - For statistical analyses we use web analytics services and tools to collect information about the use of this Site:
1. General tracking information
The tools collect information such as:
• Device and browser information (operating system information, Mobile device identifier, mobile operating system, etc.);
• IP address;
• Page accessed, URL click stream (the chronological order of our internet sites you visited);
• Geographic location;
• Time of visit; and
• Referring site, application, or service;
We use the information we get from the providers only to determine the most useful information you are looking for, and to improve and optimise this Site.
2. Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). On our behalf Google will use the information generated by a cookie for the purpose of evaluating your use of the Site, compiling reports on Site activity and providing other services relating to Site activity and internet activity in connection with the use of the Site.
We have activated the IP-anonymisation within the Google Analytics service, and your IP address will be truncated within the area of member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transferred to a Google server in the USA and truncated there. The IP-address your browser conveys within the scope of Google Analytics will not be associated with any other data held by Google.
For more information on the cookies we use, please see our Cookies Policy here.
Where We Process Your Personal Data
We normally process personal data only in the UK or elsewhere in the EU, or in non-EU countries that are certified as providing an adequate level of protection for personal data.
Where necessary in order to manage our business, we may share relevant personal data with our group companies outside the EU, but only to the extent necessary in order to provide the services concerned.
Within the scope of our information sharing activities set out above, your personal data may be transferred to other countries (including countries outside the EEA) which may have different data protection standards from your country of residence, such as the United States. Please note that data processed in a foreign country may be subject to foreign laws and accessible to foreign governments, courts, law enforcement, and regulatory agencies. However, we will endeavour to take reasonable measures to maintain an adequate level of data protection when sharing your personal data with such countries.
In the case of a transfer outside of the EEA and/or the United Kingdom, where required, we will implement appropriate safeguards in line with applicable data protection laws (such as, without limitation, implementation of the European Commission pre-approved standard contractual clauses). You can find further information about the aforementioned safeguards by contacting the Data Protection Officer as per the Contacting Us section below.
Security of Your Personal Data
All personal data processed by us is stored securely (the level of security being appropriate to the nature of the data concerned and the other relevant circumstances).
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Site and any transmission is at your own risk. Once we have received your information, we will use appropriate procedures and security features to try to prevent unauthorised access
Who We Share Your Personal Data With
We may, where appropriate, share your information with:
• Agents, consultants and related third parties: we, like many businesses, sometimes hires other companies to perform certain business-related functions. Examples of such functions include mailing information, marketing services, email hosting providers, maintaining databases, and hosting and cloud computing services. When we employ another entity to perform a function of this nature, we only provide them with the information that they need to perform their specific function.
• our legal advisers, auditors and other professional advisers or service providers.
Other Disclosures We May Make
There are certain circumstances in which we may share your personal data with certain third parties without further notice to you, as set forth below:
• Business transfers: as we develop our business, we might sell or buy businesses or assets to or from third parties. In the event of a corporate sale, merger, reorganisation, dissolution or similar event, personal data may be part of the transferred assets and therefore shared with a third party.
• Legal requirements: We may disclose personal data if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend the rights or property of Bloomsbury, (iii) act in urgent circumstances to protect the personal safety of users of our products or services or the public, or (iv) protect against legal liability.
Legal Basis for Processing Your Personal Data
The legal basis for which we process your personal data is as follows:
• Where it is necessary to obtain your prior consent to processing in order for us to be allowed to do it (for example, if you have signed up for our Newsletter), we will obtain and rely on your consent in relation to the processing concerned.
• Otherwise, we will process your personal data where the processing is necessary:
• for the performance of a contract to which you, or your institution, are a party or in order to take steps at your request prior to entering into such a contract;
• for compliance with a legal obligation to which we are a subject; or
• for the purposes of the legitimate interests pursued by us or another person, provided that this will only be in circumstances in which those legitimate interests are not overridden by your interests or fundamental rights and freedoms which require protection of personal data.
We process personal data only for so long as is necessary for the purpose(s) for which it was originally collected, after which it will be deleted or archived except to the extent that it is necessary for us to continue to process it for the purpose of compliance with legal obligations to which we are subject or for another legitimate and lawful purpose.
Links to Third Party Sites
We use YouTube services in order to play videos directly from the Site. This processing is based on pursuing our legitimate interests to improve your Site experience and to optimize our services.
Your browser will directly communicate with YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066
You have the following rights in relation to personal data relating to you that we process:
• You may request access to the personal data concerned.
• You may request that incorrect personal data that we are processing be rectified.
• In certain circumstances (normally where it is no longer necessary for us to continue to process it), you may be entitled to request that we erase the personal data concerned.
• You may request that we restrict the processing of the personal data concerned.
• You may require: to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and to transmit such data to another controller without hindrance from our side; where technically feasible you shall have the right to have the personal data transmitted directly from us to another controller;
• Where we are processing your personal data for marketing purposes or otherwise based on our legitimate interests, you may in certain circumstances have a right to object to that processing.
• Where we are processing personal data relating to you on the basis of your prior consent to that processing (such as in relation to marketing by email), you may withdraw your consent, after which we shall stop the processing concerned.
To exercise any of your rights (including withdrawing relevant consents or obtaining access to your personal data), you should contact us as set out below. To unsubscribe from any electronic newsletters or other marketing communications, you can click on the unsubscribe link in the relevant communication.
If you have a complaint about any processing of your personal data being conducted by us, you can contact us or lodge a formal compliant with the Information Commissioner.
Our contact details are:
Bloomsbury Publishing Plc
50 Bedford Square
Company Number 01984336
ICO Registration Number Z7552956
Contact: Maya Abu-Deeb, Data Protection Officer
Phone: +44 (0)20 7631 5000
Updates to This Policy
This policy was last updated on 01 June 2021.
• Legitimate interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us.
• Personal Data means any information relating to a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, or an online identifier.
• Processing means any operation which is performed on personal data, such as collection, recording, organisation, structuring, storage, adaptation or any kind of disclosure or other use.