Privacy Policy
Your privacy is important to us
We respect your personal information and will do our utmost to keep it safe. Our Privacy Policy makes it easier for you to find out what information we collect and how we use it. This notification for First Ascent Group Ltd was updated on 23 May 2018 and any future updates to the policy will be shared here. Our company and contact information can be found at the bottom of this page if you would like to get in touch.
> How are you using my data?
> International transfer of data
> What are my rights?
> Company and contact details
How are you using my data?
We use your personal information to make your experience with us better and deliver the best service possible.
To find out more about how we use and store your information in more detail, please select the relevant category below.
- Enquirers. You have made an enquiry or expressed an interest in a service offered by us.
- Suppliers. You are a representative of a supplier working with us.
- Job Applicants. You are an applicant for a job vacancy.
- Job Interviewees. You are an interviewee for a job vacancy.
- Employees. You are a member of permanent staff.
- Former Employees. You were formerly a member of staff.
- Client/Partners. You are a representative of a client working with us.
- Blackton Grange Clients. You are a client or guest of Blackton Grange.
- Event Delegates. You have attended an event, workshop or programme ran by us.
- Associates. You are a First Ascent or Emergenetics Associate.
- Referees. You have provided us with a reference for a prospective employee.
- Website visitor. You have visited our website.
Enquirers
Data categories used: email address, name, photograph, telephone, address, organisation, job title, profile.
We process your data in 20 different ways:
|
Process |
Legal Basis |
Purpose |
|
Legitimate interest |
To print information |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To contact individuals |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To print information |
|
Consent |
To send marketing information |
|
Legitimate interest |
To contact individuals |
|
Legitimate interest |
To print information |
|
Consent |
To send marketing information |
|
Legitimate interest |
To contact individuals |
|
Legitimate interest |
To send information for operational use |
|
Legitimate interest |
To keep information up-to-date |
|
Legitimate interest |
To provide profiles |
|
Legitimate interest |
To collect enquiry information |
|
Legitimate interest |
To collect venue enquires |
|
Legitimate interest |
To collect new enquirer information |
|
Legitimate interest |
To collect and fulfil venue bookings |
|
Legitimate interest |
To collect and fulfil venue bookings |
|
Legitimate interest |
To collect and fulfil venue bookings |
|
Legitimate interest |
To store information for operational use |
Data retention criteria: 365 days since last contact.
Legal bases for processing: legitimate interest, consent
We collect consent to send information for email marketing to enquirers. You have the right to withdraw your consent at any time. You can do this by unsubscribing or updating your preferences via the link in our marketing emails, or contacting us directly.
Sources from which we receive your data: Email Marketing Platform, Emergenetics International, Event Management Site, Telemarketing Company, Venue Enquiry Website, Yourself, Company Website, Digital Form Provider, CRM, Data Storage Provider
Categories of recipients of your data: CRM, Data Storage Provider, Email Marketing Platform, Yourself, Venue Enquiry Website
Suppliers
Data categories used: address, email address, name, telephone, organisation, job title, profile
We process your data in 17 different ways:
|
Process |
Legal Basis |
Purpose |
|
Legitimate interest |
To print information |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To contact individuals |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To print information |
|
Legitimate interest |
To contact individuals |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To print information |
|
Legitimate interest |
To contact individuals |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To send information for operational use |
|
Contract |
To process payment |
|
Contract
|
To process payment |
|
Contract |
To process payment |
|
Legitimate interest |
To store information for operational use |
Legal bases for processing: legitimate interest, contract
Sources from which we receive your data: Yourself, Emergenetics International, CRM, Data Storage Provider, Finance System, Accountants, Bank
Categories of recipients of your data: Yourself, CRM, Data Storage Provider, Finance System, Accountants, Bank.
Job Applicants
Data categories used: address, email address, name, telephone, CV, organisation, job title
We process your data in 6 different ways:
|
Process |
Legal Basis |
Purpose |
|
Legitimate interest |
To print information |
|
Legitimate interest |
To fill an internal vacancy |
|
Legitimate interest |
To send information for operational use |
|
Legitimate interest |
To fill an internal vacancy |
|
Legitimate interest |
To fill an internal vacancy |
|
Legitimate interest |
To fill an internal vacancy |
Legal bases for processing: legitimate interest
Sources from which we receive your data: Yourself, Company Website, Recruitment Website
Categories of recipients of your data: Yourself, Recruitment Website
Job Interviewees
Data categories used: address, email address, name, telephone, CV, organisation, job title, profile
We process your data in 7 different ways:
|
Process |
Legal Basis |
Purpose |
|
Legitimate interest |
To print information |
|
Legitimate interest |
To fill an internal vacancy |
|
Legitimate interest |
To provide profiles |
|
Legitimate interest |
To send information for operational use |
|
Legitimate interest |
To fill an internal vacancy |
|
Legitimate interest |
To fill an internal vacancy |
|
Legitimate interest |
To provide profiles |
Legal bases for processing: legitimate interest
Sources from which we receive your data: Yourself, Referee, Recruitment Website, Emergenetics International
Categories of recipients of your data: Yourself, Referee, Recruitment Website, Emergenetics International
Employees
Data categories used: address, criminal record, education, email address, video, gender, marital status, nationality, name, passport, photograph, salary, salutation, signature, telephone, assessment results, bank details, car registration, CV, date of birth, learning and other requirements, disciplinary record, driving licence details, emergency contact details, ethnic origin, medical emergency details, NI Number, organisation, pension contributions, performance review, photograph, salary, sickness records, dietaries, job title, profile
We process your data in 11 different ways:
|
Process |
Legal Basis |
Purpose |
|
Legitimate interest |
To print information |
|
Legitimate interest |
Employee management |
|
Legitimate interest |
To send information for operational use |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To send information for operational use |
|
Legitimate interest |
To send information for operational use |
|
Contract |
To process payment |
|
Legitimate interest |
To provide profiles |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To provide profiles |
|
Legitimate interest |
Employee management |
Legal bases for processing: legitimate interest, contract
Sources from which we receive your data: Yourself, Emergenetics International, Accountants, Profile Provider, Associates, Client Organisation, CRM, Data Storage Provider, Email Marketing Platform, Event Management Site, Finance System, HR System, Pension Provider, Bank, Travel/Logistics Provider, Venues/Event Organiser, Bank
Categories of recipients of your data: Associates, Client Organisation, CRM, Data Storage Provider, Email Marketing Platform, Emergenetics International, Event Management Site, Finance System, HR System, Profile Provider, Venues/Event Organiser, Travel/Logistics Provider, yourself, Accountants, Bank, Pension Provider.
Former Employees
Data categories used: address, criminal record, education, email address, video, gender, marital status, nationality, name, passport, photograph, salary, salutation, signature, telephone, assessment results, bank details, car registration, CV, date of birth, learning and other requirements, disciplinary record, driving licence details, emergency contact details, ethnic origin, medical emergency details, NI Number, organisation, pension contributions, performance review, photograph, salary, sickness records, dietaries, job title, profile
We process your data in 8 different ways:
|
Process |
Legal Basis |
Purpose |
|
Legitimate interest |
To print information |
|
Legitimate interest |
Employee management |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To send information for operational use |
|
Legitimate interest |
To provide profiles |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To provide profiles |
|
Legitimate interest |
Employee management |
Legal bases for processing: legitimate interest
Sources from which we receive your data: Yourself, Accountants CRM, Data Storage Provider, Profile Provider, Finance System, Pension Provider, Bank, Emergenetics International, HR System
Categories of recipients of your data: CRM, Data Storage Provider, Finance System, HR System, Referee, yourself, Accountants, Bank, yourself.
Client/Partners
Data categories used: address, email address, name, photograph, signature, telephone, address, organisation, photograph, job title, profile
We process your data in 21 different ways:
|
Process |
Legal Basis |
Purpose |
|
Legitimate interest |
To print information |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To contact individuals |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To print information |
|
Legitimate interest |
To send information |
|
Legitimate interest |
To contact individuals |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To print information |
|
Legitimate interest |
To send further information |
|
Legitimate interest |
To contact individuals |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To send information for operational use |
|
Contract |
To process payment |
|
Contract
|
To process payment |
|
Contract |
To process payment |
|
Legitimate interest |
To keep information up-to-date |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To store information for operational use |
Legal bases for processing: legitimate interest, contract.
Sources from which we receive your data: Yourself, Client Organisation, Emergenetics International, Associate, CRM, Data Storage Provider, Email Marketing Platform, Finance System, Profile Provider, Accountants, Bank.
Categories of recipients of your data: Client Organisation, CRM, Data Storage Provider, Email Marketing Platform, Finance System, Profile Provider, Yourself, Accountants, Bank.
Blackton Grange Clients
Data categories used: address, email address, name, photograph, signature, telephone, bank details, organisation.
We process your data in 22 different ways:
|
Process |
Legal Basis |
Purpose |
|
Legitimate interest |
To print information |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To contact individuals |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To print information |
|
Legitimate interest |
To send information |
|
Legitimate interest |
To contact individuals |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To print information |
|
Legitimate interest |
To send further information |
|
Legitimate interest |
To contact individuals |
|
Legitimate interest |
To store information for operational use
|
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To send information for operational use |
|
Contract |
To process payment |
|
Contract
|
To process payment |
|
Contract |
To process payment |
|
Legitimate interest |
To keep information up-to-date |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To collect and fulfil venue bookings |
|
Legitimate interest |
To collect and fulfil venue bookings |
|
Legitimate interest |
To collect and fulfil venue bookings |
Legal bases for processing: legitimate interest, contract.
Sources from which we receive your data: Yourself, Venue Enquiry Website, CRM, Data Storage Provider, Email Marketing Platform, Finance System, Accountants, Bank.
Categories of recipients of your data: CRM, Data Storage Provider, Email Marketing Platform, Finance System, Accountants, Bank, Venue Enquiry Website, Yourself. Back to top >
Event Delegates
Data categories used: address, email address, gender, medical, name, photograph, date of birth, learning and other requirements, emergency contact details, organisation, photograph, dietaries, job title, feedback
We process your data in 40 different ways:
|
Process |
Legal Basis |
Purpose |
|
Legitimate interest |
To print information |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To provide profiles |
|
Legitimate interest |
To provide profiles |
|
Legitimate interest |
To contact individuals |
|
Legitimate interest |
To send information for operational use |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To print information |
|
Legitimate interest |
To send information |
|
Legitimate interest |
To provide profiles |
|
Legitimate interest |
To track progress on qualifications |
|
Legitimate interest |
To process payment |
|
Legitimate interest |
To process information for event delivery |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To print information |
|
Legitimate interest |
To send information for operational use |
|
Legitimate interest |
To send further information |
|
Legitimate interest |
To provide profiles |
|
Legitimate interest |
To track progress on qualifications |
|
Legitimate interest |
To process payment |
|
Legitimate interest |
To process information for event delivery |
|
Legitimate interest |
To contact individuals |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To send information for operational use |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To send information for operational use |
|
Legitimate interest |
To send information for operational use |
|
Contract |
To process payment |
|
Contract
|
To process payment |
|
Contract |
To process payment |
|
Legitimate interest |
To keep information up-to-date |
|
Legitimate interest |
To provide profiles |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To collect enquiry information |
|
Legitimate interest |
To provide profiles |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To process information for event delivery |
|
Legitimate interest |
To provide profiles |
|
Legitimate interest |
To provide profiles |
|
Legitimate interest |
To provide profiles |
Legal bases for processing: legitimate interest, contract.
Sources from which we receive your data: Yourself, Associate, Client Organisation, Event Management Site, Emergenetics International, Venues/Event Organiser, Company Website, Profile Provider, Certification Body, CRM, Data Storage Provider, Email Marketing Platform, Finance System, Accountants, Bank.
Categories of recipients of your data: Associates, Certification Body, Client Organisation, CRM, Data Storage Provider, Email Marketing Platform, Emergenetics International, Event Management Site, Finance System, Profile Provider, Venues/Events Organiser, Travel/Logistics Provider, Yourself, Accountants, Bank.
Associates
Data categories used: address, email address, video, medical, name, photograph, signature, telephone, address, assessment results, bank details, car registration, CV, date of birth, emergency contact details, organisation, photograph, insurance details, dietaries, job title, profile
We process your data in 23 different ways:
|
Process |
Legal Basis |
Purpose |
|
Legitimate interest |
To print information |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To provide ESP profiles |
|
Legitimate interest |
To contact individuals |
|
Legitimate interest |
To send information for operational use |
|
Legitimate interest |
To store information for operational use |
|
Legitimate interest |
To print information |
|
Legitimate interest |
To send information |
|
Legitimate interest |
To print information |
|
Legitimate interest |
To send information for operational use |
|
Legitimate interest |
To send further information |
|
Legitimate interest |
To store information for operational use
|
|
Legitimate interest |
To send information for operational use |
|
Legitimate interest |
To store information for operational use |
Posted information: Individual contact |
Legitimate interest |
To send information for operational use |
Posted Information: Operational delivery |
Legitimate interest |
To send information for operational use |
|
Contract |
To process payment |
|
Contract
|
To process payment |
|
Contract |
To process payment |
|
Legitimate interest |
To keep information up-to-date |
|
Legitimate interest |
To provide profiles
|
|
Legitimate interest |
To store information for operational use
|
|
Legitimate interest |
To provide profiles |
Legal bases for processing: legitimate interest, contract.
Sources from which we receive your data: Yourself, Emergenetics International, Client Organisation, CRM, Data Storage Provider, Email Marketing Platform, Finance System, Profile Provider, Venues/Event Organiser, Travel/Logistics Provider, Accountants, Bank.
Categories of recipients of your data: Associates, Client Organisation, CRM, Data Storage Provider, Email Marketing Platform, Emergenetics International, Finance System, Profile Provider, Venues/Events Organiser, Travel/Logistics Provider, yourself, Accountants, Bank.
Referees
Data categories used: address, email address, name, telephone, organisation, job title
We process your data as follows:
|
Process |
Legal Basis |
Purpose |
|
Legitimate interest |
Employee management |
Legal bases for processing: legitimate interest.
Sources from which we receive your data: Yourself, Job Interviewees, HR System, Data Storage Provider, CRM.
Categories of recipients of your data: CRM, Data Storage Provider, HR System, Yourself.
Website visitor
Data categories used: behaviour, browser details, browser name, cookies, device fingerprint, device id, duration, identifier, ip address, location, mac address, network id, time
We process your data in 2 different ways:
|
Process |
Legal Basis |
Purpose |
|
Consent |
To understand website visitors |
|
Consent |
To understand website visitors |
Data retention criteria: Dependent upon the cookies collected. Can be persistent.
Legal bases for processing: consent.
We will ask you to consent to our use of cookies when you first visit our website. You have the right to withdraw your consent at any time. For more information on how to manage cookies, please see our cookie policy.
Sources from which we receive your data: Yourself, Website Analytics Software, Company Website, Web Agency.
Categories of recipients of your data: Website Analytics Software, Web Agency, Yourself.
International transfer of your data
In some instances, it is necessary to transfer your personal data internationally, outside of the EEA. Any international transfers will be made in full compliance with data protection legislation and where adequate safeguards are in place in relation to your data.
These safeguards may take the form of a data transfer agreement that includes standard contractual data protection clauses, use of EU-US Privacy Shield Framework, or other approved certification or safeguard. Otherwise, your data will only be transferred internationally with your explicit consent or to fulfil a contractual obligation to you.
Organisations we may transfer your data to include:
Emergenetics International is certified under the EU-US Privacy Shield framework. View Emergenetics International's Privacy Policy.
MailChimp (Email Marketing Platform) is certified under the EU-US Privacy Shield framework and has a data processing agreement in place. View MailChimp’s Privacy Policy.
DropBox (Data Storage Provider) is certified under the EU-US Privacy Shield framework. View DropBox's Privacy Policy.
Eventbrite (Event Management Site) is certified under the EU-US Privacy Shield framework. View Eventbrite’s Privacy Policy.
Xero (Finance System) has agreements in place with their hosting providers that use European Commission model contract clauses. View Xero’s Privacy Policy.
TripAdvisor (Venue Enquiry Website). View TripAdvisor’s Privacy Policy.
GoCanvas (Digital Form Provider). View GoCanvas’ Privacy Policy.
What are my rights?
You are in control of your information. To fulfil any of the below rights, please contact us at info@firstascentgroup.com, explaining your request. Please note we may be unable to fulfil your request where it impacts on the rights of others, or information is required under law.
Access your information
You have the right to ask for the full details of the personal information that we have collected or process about you.
Rectify, erase and restrict the processing of your data
You have the right to ask us to update any information about you that is incorrect. You also have the right to ask us to delete your information or restrict processing, where you believe the processing is inaccurate, unlawful, excessive, or no longer necessary to the purpose for which it was collected.
Object to the processing of your data
You have the right to object at any time to the processing of your information on grounds relating to your individual circumstances. You can object to the processing of your data for automated decision-making, including profiling and/or direct marketing at any time. You can do this by unsubscribing or updating your preferences via the link in our marketing emails, or contacting us directly.
Move your information easily
You have the right to data portability - to receive your personal information in an understandable, commonly used electronic format so that you can copy or move your data with ease.
Withdraw your consent
Where we process your data on the legal basis of consent, you have the right to withdraw your consent at any time. Where consent is collected, it is specific, clearly distinguishable from other matters and given freely.
Lodge a complaint
We are committed to resolve any complaints about the collection or use of your personal data. If you have any questions in relation to this, please get in touch. If you feel your complaint has not been adequately resolved, you have the right to lodge a complaint with a supervisory authority. In the UK this is the Information Commissioner’s Officer.
Company Details
This website is owned and operated by First Ascent Group Ltd. We are registered in England and Wales under registration number 3499793, and our registered office is at St John’s Innovation Centre, Cowley Road, Cambridge CB4 0WS.
Contact us by email at info@firstascentgroup.com, by phone on +44(0)1223 223 807, by post to the address above, or via our website contact form.
