Privacy Policy

At the IFABC we take the responsibility of looking after personal data in our possession seriously. This policy explains who we are and what we do with individuals’ personal data. ‘Personal data’ in this context means data relating to a living individual who can be identified from that data, or can be identified from that data taken together with other information that we hold or we may be likely to obtain. The persons or organisation responsible for determining how and why your personal data is used is known as a ‘Data Controller’.

​

Who we are and how to contact us
What personal data we collect and where we get it from
What we do with your personal data and why
Sharing your personal data
Sending your personal data to other jurisdictions
Keeping your personal data secure
How long we keep your personal data
Your rights in relation to personal data
Updates to this policy
Contact us

​

Who we are

• The International Federation of Audit Bureaux of Certification (IFABC) is a global federation of industry-sponsored organisations in the media industry.

• IFABC member organisations deliver services designed to support transparency and accountability in the media data that is used in advertising trading in their respective markets.

• IFABC itself aims to promote and advance the interests of its members and independent audit bureaux generally.

• The Company is a private company, limited by guarantee, incorporated in the UK. The registration number is 13148098. The registered office is Charter House, Black Prince Yard, 207-209 High Street, Berkhamsted, Herts, HP4 1AD.

​

You can contact us by email at dataprotection@abc.org.uk or by post at the above address.​

 

What personal data we collect and where we get it from

 

If you are a member or customer registering to use our products or services (or are a prospective customer) we will collect the personal data necessary to provide these services (or engage with you regarding them) and keep you updated with information relevant to these services. These will be obtained from you via registration forms, contact with our representatives or our website.

 

They may also be obtained from other publicly available sources such as your website or directories. This may include (but is not limited to) the following types of personal data:
 

• Name, job title, company, postal address, email address, telephone number and information you provide about other people (such as work colleagues) where we assume you have their permission to share this data.

 

What we do with your personal data and why

​

• We will use your personal data to deliver our products and services, manage your registration or subscriptions and communicate updates and relevant notifications and reminders.

  • The lawful basis which we apply for this purpose is that it is necessary for the performance of a contract or in order to take the steps prior to entering a contract.

• We may send you marketing information about our products and services by post, email or telephone. If you wish to change how marketing messages are sent or wish to stop receiving them please contact us.

  • The lawful basis which we apply for this purpose is that, on balance, and taking account of your own interests, we have determined that it is necessary for our legitimate business interests to process your personal data for the purposes of direct marketing.

 

Sharing your personal data

• We will only disclose personal data to other third parties (such as regulatory authorities) if we were legally compelled to do so, plus in the following circumstances:​

  • When we share your information with third parties who provide services on our behalf and on our instruction (for example the storage of records). These third parties will be subject to contractual obligations to keep your data secure.

 

Sending your personal data to other jurisdictions

• If we transfer your personal data to processors outside the European Economic Areas (EEA) we will do so with appropriate measures and controls to ensure your privacy rights continue to be protected in accordance with the appropriate legislation.

 

Keeping your personal data secure

• We will take specific steps (as required by applicable data protection laws) to ensure we take appropriate security measures to protect your personal data from unlawful or unauthorised processing and accidental loss, destruction or damage.

 

How long we keep your personal data

• We will retain your information for as long as necessary for the uses set out in this policy unless a longer period is required or permitted by law.

 

Your rights in relation to personal data

Data protection legislation gives you a number of important rights:

• Right of access

  • Subject to certain conditions, you are entitled to have access to your personal data (this is more commonly known as submitting a “data subject access request”). This right also means you can obtain information about how we process your personal information.

• Right to data portability

  • Subject to certain conditions, you are entitled to receive the personal data which you have provided to us and which is processed by us by automated means, in a structured, commonly-used machine readable format.

• Rights in relation to inaccurate personal or incomplete data

  • You may challenge the accuracy or completeness of your personal data and have it corrected or completed, as applicable. You have a responsibility to help us to keep your personal information accurate and up to date. We encourage you to notify us of any changes regarding your personal data as soon as they occur, including changes to your contact details or telephone number.

• Right to object to or restrict our data processing

  • Subject to certain conditions, you have the right to object to or ask us to restrict the processing of your personal data.

• Right to erasure

  • Subject to certain conditions, you are entitled to have your personal data erased (also known as the “right to be forgotten”). For example where your personal data is no longer needed for the purposes it was collected for, or where the relevant processing is unlawful.

• Right to withdrawal of consent

  • As stated above, where our processing of your personal data is based on your consent you have the right to withdraw your consent at any time.

• Rights in relation to automated decision making

  • We do not currently undertake any automated decision making including profiling. However if we do then you have the right to object in relation to automated decision making which has a legal effect or otherwise significantly affects you.

 

If you wish to exercise any of the above rights please contact us via the post or email addresses given above.

 

If you wish to make a complaint please contact us so that we can look into the issue and respond. You also have the right to complain to the Information Commissioner’s Office (ICO) which enforces data protection laws in the UK. For further information on your rights and how to complain to the ICO, please refer to the ICO website.

 

Updates to this policy

1. This privacy policy is held on our website or can be provided on request. We may update this policy from time to time and you may check to see if any changes have been made by referencing the date of the last update at the foot of the policy.

 

Contact us

1. You can contact us:

   1. By email: dataprotection@abc.org.uk

   2. By post: IFABC, Charter House, Black Prince Yard, 207-209 High Street, Berkhamsted, Herts, HP4 1AD, United Kingdom

 

This policy was last updated: December 2023