Metropolis Group (Metropolis Group Holdings Ltd) is a media group with a number of media brands which are shown on its website www.metropolis.co.uk. Our principal business activities involve the creation and delivery of information to businesses and consumers through organising events, conferences, exhibitions, publishing magazines, delivering content digitally through our websites and by email and the provision of ad hoc marketing services to our customers.
The following companies in our group (with company registration number) are data controllers:
- Metropolis International Group Limited – 02916515
- Innovare Media Limited - 0781637
- MPI Media Limited - 486758
- Diamond Publishing Limited - 04611236
- EMAP Publishing Limited - 07880758
- Centaur Financial Platforms Ltd - 06439194
The registered address of all of these companies is 10thFloor, 10th Floor, Southern House, Wellesley Grove, Croydon, CR0 1XG except MPI Media which is Merchants Hall, 25/26 Merchants Quay, Dublin 8.
Metropolis Group respects the privacy of every person for whom we have personal data [“data”]. We comply with data protection legislation such as the Data Protection Act 1998 and the General Data Protection Regulation which regulates the processing of data and ensures that your data is processed fairly and lawfully, is kept secure and only that data necessary for any processing is kept.
This policy summarises the information we may collect about you and how we may use that data. We primarily collect data to provide you with services you have requested, to provide services likely to meet your needs, to improve services provided to you and to sell advertising space to help us provide many services free of charge. The policy tells you how we ensure the information we have is kept accurate and how you can request access, deletion, rectification, restriction, transfer and withdraw consent (where applicable) and make a complaint.
We have a number of businesses within the group and each may collect and use data about you in different ways. In the event that one of those businesses does use data other than detailed in this policy, it will publish its own policy on its own web site and you should refer to the privacy policy of that business and not this group policy. Both at a business and group level we may update the privacy policy at any time without notice so please check back regularly so you are aware of any changes. This privacy policy is subject to our terms and conditions which are found on each business’s website.
1. What Information do we collect and how is this collected?
We only collect personal information if we have your permission, or we have reasonable commercial reasons for doing this, such as collecting information to process event registrations or to supply you with services. We will only collect the minimum amount of information we need to do these things.
We may collect some of the following data such as name, job title, company that employs you, home post code, email address, birthdate, telephone number, gender, purchasing preferences and history, content you post on our websites, and content you read on our websites plus various other data. This data may be collected when you order a service or product, use our websites (or a third-party website e.g. to pay for a subscription), post content to our websites, sign up for a newsletter or subscription, on completion of a survey, questionnaire or entry to a competition, or by communication to us by email, phone and by other means.
When you pay us, we will record details of the financial transaction but do not directly store your debit or credit card information. Online payments are made through our websites but are processed securely by a third-party payment provider: we only store the last 4 digits of your credit card number.
If you use our website we may record your IP address, registration details and your browsing history such as the pages you have visited within our sites. If you sign up for a newsletter we may track your response e.g. open a newsletter or click on a link in a newsletter or the pages you visit.
For employees we keep personal data needed to recruit you, pay you, provide company benefits and to fulfil our legal obligations.
We do not share personal data with third parties for marketing purposes, other than with the direct consent of the individual(s) which may be withdrawn at any time.
2. Cookies
We use cookies to monitor web usage. Cookies are written to the hard drive of a web user, they contain no personal information about the website user and only keep a record of the sites visited and actions on the web site. Some cookies expire after your browser is closed whilst others stay on your hard drive. They are of standard use across many websites. We use them on an aggregated information basis and to assess your areas of interest – they are used to identify the number of unique visitors to a site, to improve further web visits (store preferences, user name and your email address so you don’t need to reinput every time you visit) and to improve the user experience for you by, amongst other things, providing content based on your preferences.
Most browsers offer you ways to control or block cookies should you wish to. These browser controls will usually be found in the “options” or “preferences” menu in your toolbar. The “help” portion of the toolbar on most browsers will tell you how to stop or manage cookies. Note that should all cookies be rejected we are unable to match site content appropriate to the preferences given to us by previous visits and you will not be able to fully utilise all of the web site features. For further information on cookies visit aboutcookies.org or the Information Commissioner's webpage on cookies ico.org.uk/for-the-public/online/cookies/
3. Legal basis for processing data
Different legal bases are used which depend upon the purpose for processing your data.
- When data is provided when purchasing a product or service under a contract with you we process your data under contract necessity with the data being needed to fulfil the contract.
- When you sign up for a newsletter, an event or magazine subscription we process your data under consent
- Any additional processing i.e. sharing data with third parties, marketing to you on behalf of third parties is done through either consent or legitimate interest (you are provided with useful information by us in exchange for supplying your information (including personal data) and the relationship between us is balanced in your favour. You have the choice to opt out of processing under this basis).
- When you pay us, or we pay you, we only keep data as long as it is necessary to comply with the law.
4. Use of personal data
We will only use personal information for the purpose it was collected. Should we ever wish to use it for another purpose we will contact you first asking you for your consent. We primarily use data to communicate with you, deliver the service you have requested, or services that might interest you (subject to your right to opt out with the details on how to do this found on each business website), to renew a subscription, improve our service, to verify your identity when taking payment or to meet legal, regulatory and compliance requirements.
Profiling – from time to time we may use some elements of the data you supply to target the messages we send you. For example, we may use your location to send you information about an event which is happening in the same country, or we may use your company type or job title to send you a relevant news story. We do not use this information to make automated decisions.
5. How long do we keep your data for?
Data is not kept any longer than is required for the purposes of the processing or to comply with the law. As we collect data for many different purposes there is not a single retention period for all data. We instead carefully assess the length of time to retain data according to the processing purpose and to comply with our legal obligations. When data is no longer required for the purposes of the processing it is securely removed from our systems.
6. Security & Confidentiality
Metropolis takes commercially reasonable physical, technical and administrative measures to protect personal information from theft, misuse or accidental destruction and to keep it confidential. We aim to protect personal information but cannot provide a 100% guarantee of security. All employees and data processors (third parties who process data on our behalf) who access your data are obliged to keep the information confidential and secure and not to use it for any other purpose other than that they are contracted to carry out for us.
7. Transfer of data to third parties
We may use third party providers e.g. for web site hosting, web maintenance, email alerting, subscription fulfilment and taking payment. We share information with these third party to provide these services. We collect broad statistical anonymised information on an aggregate basis, which doesn’t identify you personally, which we may provide to third parties to sell advertising. This allows us to provide content free of charge. We will also share data with public or regulatory authorities where required by law or to enforce our terms of service. We take reasonable commercial steps to ensure that your data is kept secure and confidential by any third party, is deleted when not needed for the purpose it was given, that their data privacy policies protect your data and that they only process your data on our instruction. We do not sell or rent your personal data, although we may transfer, sell or assign your data outside of our group to a third party if we merged, sold or reorganised all, of part, of the group. Your data will be processed fairly, lawfully and securely in the UK and will only be transferred outside of the European Union when there is protection in place for your rights and when the data will be kept secure.
8. Withdrawal of consent
When you have provided consent, if you should wish to withdraw that consent, you can let us know by sending an email (details provided on the business website) or by emailing dataprivacy@metropolis.co.uk including the email address and brand associated with your account and we will remove your data from our systems.
9. Restriction of liability
Our websites link to other websites. Metropolis is not responsible for the privacy policies of those websites nor does it have or accept any liability for their content.
10. Legal information and how to contact us
You have the right to see, erase and correct data we hold, the right to restrict the processing we do, and the right to object to it and to have your data transferred to a third party. If you wish to do any of these things or have any questions about how we use your data, or wish to make a complaint about any privacy issues, please contact the Group Data Privacy Lead – Richard Hutchinson at richard.hutchinson@metropolis.co.uk or write to him at :
Richard Hutchinson
Group Data Privacy Lead
Metropolis International Group Limited
10th Floor
Southern House
Wellesley Grove
Croydon, CR0 1XG
Requests will be dealt with and responded to within a reasonable period, and no longer than 30 days. If you are not satisfied with the way your request was handled you have the right to lodge a complaint with the supervisory authority – details of which are given below:
Information Commissioner’s Office
Telephone: +44 303 123 1113