For the purposes of data protection legislation in the United Kingdom and the European Economic Area (“EEA”), Macmillan is the controller of your personal data. This means that we determine the purposes for, and ways in which, we collect and use personal data in accordance with applicable data protection legislation, such as the UK Data Protection Act 2018 and/or the EU General Data Protection Regulations 2016/679, as applicable.
Our VAT number is GB199440621. We will only use the personal data gathered over this website as set out in this Policy. Below you will find information on how we use your personal data, for which purposes your personal data is used, with whom it is shared and what control and information rights you may have.
I. Summary of our processing activities
The following summary provides you with a quick overview of the processing activities that are undertaken on our website. You will find more detailed information under the indicated sections below.
• When you visit our website for informational reasons without setting up an account, only limited personal data will be processed to provide you with the website itself (see III).
• In case you register for one our services (e.g. discussion form, blog or web shop) or subscribe to our newsletter, further personal data will be processed in the scope of such services (see IV, V and VI).
• Your personal data may be disclosed to third parties (see XI) that might be located outside your country of residence; potentially, different data protection standards may apply (see XII). We have implemented appropriate safeguards to secure your personal data (see XIII) and retain your personal data only as long as necessary (see XIV).
• Under the legislation applicable to you, you may be entitled to exercise certain rights with regard to the processing of your personal data (see XV).
• Personal Data: means any information relating to a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, or an online identifier.
• Processing: means any operation which is performed on personal data, such as collection, recording, organisation, structuring, storage, adaptation or any kind of disclosure or other use.
III. Informational use of the website
When you visit our website for informational reasons, i.e. without registering for any of our provided services listed under IV and without providing us with personal data in any other form, we may automatically collect additional information about you which will contain personal data only in limited cases and which is automatically recognised by our server, such as:
• the website from which you have been directed to our website
• the date and time of your requests
• your device type, screen resolution and browser version
• your internet service provider
• information on your operating system, including language settings
• information on the pages you have visited on our website
We use such information only to assist us in providing an effective service (e.g. to adapt our website to the needs of your device or to allow you to log in to our website), and to collect broad demographic information for anonymised, aggregated use.
The personal data automatically collected is necessary for us to provide the website to you and for our legitimate interests to guarantee the website’s stability and security.
IV. Registration for our services
Our website offers a web shop, the option to receive newsletters and lecturer and book sampling services. In order to use the aforementioned services you have to set up an account. With regard to the registration of an account and its subsequent use, we process:
• Information (such as, your name, country and email address) that is provided by registration
• Information in connection with an account sign-in facility (such as, log-in and password details)
• Communications sent by you (such as, via e-mail or website communication forms)
Whenever you complete transactions using our website, e.g. purchasing a publication or requesting a free book sample further data processing processes may take place, of which you will of course be separately informed. We will process the personal data you provide to:
• Identify you at sign-in
• Provide you with the services and information offered through the website or which you request
• Administer your account
• Communicate with you
• Send you advertising which is tailored to your profile
We process this personal data in order to perform our contract with you and for our legitimate interests to improve your experience while using the website.
Your personal data is, in the absence of exceptions within the specific services mentioned below, retained for as long as your user account is used. After deletion of your account, your personal data will be erased 1 month later. Statutory storage obligations or the need for legal actions that may arise from misconduct within the services or payment problems can lead to a longer retention of your personal data.
V. Information about the specific uses that require registration
For the use of the following services you have to set up an account as described under IV. Your customer account retains your personal data for future purchases and other activity. You can delete the personal data as well as the account in your account settings. This processing is necessary to perform our contract with you and/or for our legitimate interests.
1. Web shop
For the use of our web shop you have to set up an account as described under IV. Your customer account that retains your personal data for future purchases. You can delete the personal data as well as the account as a whole in your account’s settings. This processing is based on us performing our service to you.
By statutory law we are required to retain the provided financial data in relation to transactions (including address, payment and order information) for 10 years. However, after 2 years we will restrict the processing of your personal data to comply with the statutory requirements and will not process the personal data any further.
With your email address you can subscribe to our newsletter that provides you with the latest news about our products and services if you consent to receiving such newsletters. Your email address will be retained as long as you subscribe to our newsletter.
You can unsubscribe from this service by opting out via the link provided in each email newsletter.
VII. Automated decision making
We do not use your personal data for automated decision making which produces legal effects concerning you or similarly significantly affects you.
For statistical analyses we use web analytics services to collect information about the use of this site
1. General tracking information
The tools collect information such as
• Device and browser information (operating system information, Mobile device identifier, mobile operating system, etc.)
• IP address
• Page accessed, URL click stream (the chronological order of our internet sites you visited)
• Geographic location
• Time of visit
• Referring site, application, or service
We use the information we get from the providers only to determine the most useful information you are looking for, and to improve and optimise this website.
Depending on the provider the information generated about your use of the website may be transferred to and processed in third countries, e.g. the United States. For further information about the potential risks of a cross border data transfer please refer to section XII. The tools collect only the IP address assigned to you on the date you visit this site, rather than your name or any other identifying information. The provider will use this information in order to evaluate your use of the website, to compile reports on website activities and to provide other services relating to website and internet use to us.
We process this personal data for our legitimate interests to analyse our website’s traffic to improve the user’s experience and to optimise the website in general.
Please see our Cookies Policy [https://www.macmillanihe.com/page/cookies/], for further details.
2. Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). On our behalf Google will use the information generated by a cookie for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet activity in connection with the use of the website.
We have activated the IP-anonymisation within the Google Analytics service, and your IP address will be truncated within the area of member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transferred to a Google server in the USA and truncated there. The IP-address your browser conveys within the scope of Google Analytics will not be associated with any other data held by Google.
You can opt out of Google Analytics tracking on our site here.
We use Marketo, a marketing automation service provided by Marketo 901 Mariners Island Blvd, Suite 500, San Mateo, CA 94404 ( “Marketo”) On our behalf Marketo will use the information generated by a cookie for the purpose of evaluating your use of the website and pages visited, compiling reports on website activity and providing other services relating to website, email and internet activity in connection with your use of the website. You may prevent the collection of the information generated by the cookie about your use of the website (including you IP address) and the processing of this data by Marketo by opting of tracking here.
IX: Third Party Content and social media plug-ins
We use YouTube service in order to play videos directly from our website. This processing is based on pursuing our legitimate interests to improve your website experience and to optimize our services.
Your browser will directly communicate with YouTube, LLC
901 Cherry Ave.
San Bruno, CA 94066
3. Links to third party websites
X: Information sharing
There are certain circumstances in which we may share your personal data with certain third parties without further notice to you, as set forth below:
• Business transfers: as we develop our business, we might sell or buy businesses or assets to or from third parties. In the event of a corporate sale, merger, reorganisation, dissolution or similar event, personal data may be part of the transferred assets and therefore shared with a third party.
• Agents, consultants and related third parties: we, like many businesses, sometimes hires other companies to perform certain business-related functions. Examples of such functions include mailing information, marketing services, email hosting providers, maintaining databases, and hosting and cloud computing services. When we employ another entity to perform a function of this nature, we only provide them with the information that they need to perform their specific function.
• Legal requirements: We may disclose personal data if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend the rights or property of Macmillan, (iii) act in urgent circumstances to protect the personal safety of users of our products or services or the public, or (iv) protect against legal liability.
XI. Cross border data transfers
Within the scope of our information sharing activities set out above, your personal data may be transferred to other countries (including countries outside the EEA) which may have different data protection standards from your country of residence, such as the United Kingdom and the United States. Please note that data processed in a foreign country may be subject to foreign laws and accessible to foreign governments, courts, law enforcement, and regulatory agencies. However, we will endeavour to take reasonable measures to maintain an adequate level of data protection when sharing your personal data with such countries.
In the case of a transfer outside of the EEA and/or the United Kingdom, where required, we will implement appropriate safeguards in line with applicable data protection laws (such as, without limitation, implementation of the European Commission pre-approved standard contractual clauses). You can find further information about the aforementioned safeguards by contacting the Group Data Protection Officer via email@example.com
We have reasonable state of the art security measures in place to protect against the loss, misuse and alteration of personal data under our control. For example, our security and privacy policies are periodically reviewed and enhanced as necessary and only authorised personnel have access to personal data. Whilst we cannot ensure or guarantee that loss, misuse or alteration of information will never occur, we use all reasonable efforts to prevent it. You should bear in mind that submission of information over the internet is never entirely secure. We cannot guarantee the security of information you submit via our website whilst it is in transit over the internet and any such submission is at your own risk.
XIII. Data retention
We strive to keep our processing activities with respect to your personal data as limited as possible. In the absence of specific retention periods set out in this policy, your personal data will be retained only for as long as we need it to fulfil the purpose for which we have collected it and, if applicable, as long as required by statutory retention requirements.
XIV. Your rights
Under the legislation applicable to you, you may be entitled to exercise some or all of the following rights:
1. require (i) information whether your personal data is retained and (ii) access to and/or duplicates of your personal data retained, including the purposes of the processing, the categories of personal data concerned, and the data recipients as well as potential retention periods;
2. request rectification, removal or restriction of your personal data, e.g. because (i) it is incomplete or inaccurate, (ii) it is no longer needed for the purposes for which it was collected, or (iii) the consent on which the processing was based has been withdrawn;
3. refuse to provide and – without impact to data processing activities that have taken place before such withdrawal – withdraw your consent to processing of your personal data at any time;
4. object that your personal data shall be subject to processing. In this case, please provide us with information about your particular situation. After the assessment of the facts presented by you we will either stop processing your personal data or present you our compelling legitimate grounds for an ongoing processing; and/or
5. lodge a complaint before your local data protection authority.
6. require (i) to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and (ii) to transmit those data to another controller without hindrance from our side; where technically feasible you shall have the right to have the personal data transmitted directly from us to another controller;
7. not to be subject to any automated decision making, including profiling (automatic decisions based on data processing by automatic means, for the purpose of assessing several personal aspects) which produce legal effects on you or affects you with similar significance.
You may (i) exercise the rights referred to above or (ii) pose any questions or (iii) make any complaints regarding our data processing by contacting us under the contact details set out below.
XV. Contacting us
The information you provide when contacting us will be processed to handle your request and will be erased when your request is completed. Alternatively, we will restrict the processing of the respective information in accordance with statutory retention requirements.
XVI Amendments to this Policy
This policy was last updated on 20 April 2021