1.4 The capture, storage and use of your data is governed by Data Protection Act 2018 and the General Data Protection Regulation (EU) 2016/679. We are committed to safeguarding your personal information in a confidential and secure environment. We are registered with the Information Commissioner’s Office (“ICO”) as a data controller, with registration number ZA048993. Our registration can be confirmed by searching the Register of Data Controllers on the ICO website.
2. What Personal Information do we collect and why?
2.1 “Personal Information” is information relating to you, which can be used to personally identify you (either directly or indirectly). The types of Personal Information we may collect about you include any Personal Information you submit onto any of the GBBO Sites or otherwise send to us and/or any information you are asked by us to provide including but not limited to your name, user name (whether or not you have identified yourself by your real name or otherwise), place of origin, email address, other contact information, recipes, photographs, tweets, posts and/or any other information you may choose to submit to the GBBO Sites. We collect this Personal Information so that it can be used for the purposes set out in the Terms and Conditions. We may for example publish amusing or interesting tweets in any Programme or invite you to submit examples of your bakes on any GBBO Site for potential inclusion in any Programme and/or other initiatives.
2.2 We may also collect information about your usage of the GBBO Sites, such as browsing patterns, but information collected in this way will not identify you personally. Our servers also automatically record certain information that your web browser sends whenever you visit any website. This may include your web request, internet protocol address, browser type, browser language, URLs, URLs domain names, pages viewed and other matters together with cookies which may identify your browser. We use this information to find out about how visitors use the GBBO Sites.
3. What is our lawful basis for using your Personal Information?
3.1 We will only use your Personal Information when we have a valid reason (also known as a ‘lawful basis’) to do so. Which legal basis is applicable will depend on precisely how we are using your Personal Information and for what purpose.
3.2 Most commonly, we will use your Personal Information:
- a) because it is necessary to pursue our legitimate interests and where there is no undue adverse impact on you;
- b) in order to comply with a legal obligation to which we are subject;
- c) because you have consented to us doing so
3.3 Where we are processing your Personal Information for the purposes of pursuing our legitimate interests, those interests may include:
(a) responding to any queries you may have, providing you with information you request and/or to help us operate and improve the GBBO Sites;
(b) the development, production, exhibition, exploitation, distribution, advertising, publicity and promotion of the Programme and your contribution to the Programme;
(c) identifying you when you contact us or use any of the GBBO Sites;
(d) describing and identifying you when using any information you submit or otherwise in accordance with the Rights granted under the Terms and Conditions and to accord you credit therefor;
(e) establishing, exercising or defending legal claims;
(f) monitoring and managing access to our systems;
(g) protecting our networks and your Personal Information;
(h) investigating and preventing fraud;
(i) co-operating with investigations by regulatory bodies and/or the police or other law enforcement agencies and/or governmental agencies; and
(j) compiling, aggregating and disclosing to third parties general demographic information – this information may relate to age, gender, location etc. but will not specifically identify you or your computer personally.
4. How may we share your Personal Information?
4.2 Should a third party acquire all or a substantial portion of our business (whether such acquisition is by way of merger, consolidation or purchase of all or a substantial portion of our assets, or as part of any insolvency where such a transaction has been approved by the court) we may include your Personal Information then in our possession as part of the transferred business assets in such sale/ transfer and share the same with our advisors and any prospective purchasers and their advisors.
4.3 Where we transfer your Personal Information outside the EEA we will ensure that it is protected and transferred in a manner consistent with legal requirements applicable to the Personal Information concerned. This can be done in a number of different ways, for example: the country to which we send the Personal Information may have been assessed by the European Commission as providing an “adequate” level of protection for personal data; the recipient may have signed a contract based on standard contractual clauses approved by the European Commission; where the recipient is located in the US, it may be a certified member of the EU-US Privacy Shield scheme. In other circumstances, the law may permit us to otherwise transfer your Personal Information outside the EEA. In all cases, however, any transfer of your Personal Information will be compliant with applicable data protection law.
5. Security and retention of Personal Information
5.1 We have implemented appropriate technical measures designed to secure your Personal Information from accidental loss and from unauthorised access, use, alteration or disclosure, including encryption, firewalls and secure socket layers. Notwithstanding such measures, the Internet is an open system and we cannot guarantee that unauthorised third parties will never be able to defeat those measures or use your Personal Information for improper purposes.
5.2 We shall retain your Personal Information as follows: (i) in respect of any Public User Material (as defined in the Terms and Conditions) submitted by you via the GBBO Sites: for the length of time that the GBBO Sites are available to the public and/ or if used in any of our Programmes: for as long as is necessary in order to produce, market, distribute, exhibit, exploit, publicise, promote and/or advertise the Programme and to comply with our obligations to any broadcaster or distributor or other licensee authorised to do the same; or (ii) in respect of any Non-Public User Material sent to us by you via any of the GBBO Sites for 6 months from the date of submission or as long as necessary to address the purpose for which they have been sent; unless you request that your Personal Information is deleted (see clause 6.1 below).
6. Your rights in respect of your Personal Information
6.1 Under EU data protection laws you have a number of rights in relation to your personal data. Those rights include the right to:
- a) access your Personal Information (via what is commonly known as a “data subject access request”);
- b) require us to correct any mistakes in your Personal Information which we hold;
- c) withdraw your consent if we are relying on consent as our lawful basis for using your Personal Information;
- d) require the erasure of your Personal Information;
- e) require us to restrict processing of your Personal Information, in certain circumstances;
- f) receive the Personal Information you have provided to us, in a structured, commonly used and machine-readable format and/or transmit that information to a third party, in certain situations; and
- g) object to our continued processing of your Personal Information if such processing is carried out for the purpose of our legitimate interests;
6.2 Please note that not all of these rights are absolute – in some cases they will not apply to you, or to the particular use that we are making of your Personal Information (for example if we have to process the information to comply with our own legal obligations). For further information on each of these rights, including the circumstances in which they apply, please contact us or see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals’ rights under the General Data Protection Regulation here: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/. If you wish to access a copy of your Personal information or exercise any of your other rights your request must be made in writing and we will endeavour to respond within a reasonable period and in any event within one month in compliance with applicable data protection legislation.
6.3 We are reliant on you to ensure that the Personal Information you provide to us is up to date and accurate, and you agree to provide true and accurate information about yourself as requested by us. To assist us in ensuring your Personal Information is up to date, please let us know if any of your personal details change by emailing us at [email protected].
Please see our separate Cookies Policy for details of cookies in use on GBBO Sites.
We may monitor and record any communications we receive from you. This may be done to improve the services which we provide or to ensure compliance with our practices and procedures.
10. Contact Us
Last updated August 2023
© Love Productions 2023