Our core data protection obligations and commitments are set out in the organisation’s primary privacy notice.

This notice provides additional privacy information for individuals who enter competitions and prize draws run by TfGM.

Purposes

We hold your personal information for the following purposes:

  • Administrating competitions and prize draws; and
  • Publication of winners of prize draws in line with the CAP Code

Categories of personal data

In order to carry out these purposes we collect and obtain:

  • Personal details

We do not collect, store or use any special category personal information for this purpose.

Legal basis for processing

The legal basis we rely on for processing your personal information is:

  • The processing is necessary for the performance of a contract; and
  • The processing is necessary for the purposes of our legitimate interests in managing competitions in a transparent way. We have carried out a Legitimate Interests Assessment in respect of this processing.

If you fail to provide certain information when requested, we may not be able to perform the contract we have entered into with you such as entering you into the competition or prize draw, or providing you with a prize if you are the winner of a competition or prize draw.

Information sharing recipients

We may share personal information about you with the following types of organisations:

  • Suppliers – in order to deliver services on our behalf;
  • The public – by publishing limited personal information about the winners of our competitions and prize draws; and
  • Social Media Companies – by publishing limited personal information about the winners or our competitions and prize draws.

Sources of personal data other than the data subject

All the information we collect is provided directly by you entering into the competition or prize draw as set out in the terms and conditions.

Data transfers beyond the EEA

We may publish limited personal information about the winners of our competitions and prize draws on our social media sites which are hosted in the United States. Facebook (including Instagram and Facebook), Twitter, Snapchat and Google (including YouTube) are all certified under the EU-US Privacy Shield Framework and this is the safeguard we rely on when transferring your personal data for this purpose.

Data Retention Criteria

Our Retention Schedule outlines how long we retain certain types of information for.

Rights of individuals

You have a right to be informed about how and why your personal information is being processed. This notice fulfils that obligation. You also have a number of other rights.
Information about the following rights is available in our Guide to Exercising Your Rights:

  • Contacting our Data Protection Officer;
  • Raising a concern with us; and/or
  • Making a compliant to the Information Commissioner

Updates

We may update or revise this Privacy Notice from time to time and provide supplementary privacy information as is necessary.