Your legal rights
Under the GDPR, you have the following rights, which we will always work to uphold:
- The right to be informed about our collection and use of your personal data. This Privacy Notice should tell you everything you need to know, but you can always contact us to find out more or to ask any questions.
- The right to access the personal data we hold about you.
- The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete.
- The right to be forgotten, i.e. the right to ask us to delete or otherwise dispose of any of your personal data that we have.
- The right to restrict (i.e. prevent) the processing of your personal data.
- The right to object to us using your personal data for a particular purpose or purposes.
- The right to data portability. This means that, if you have provided personal data to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask us for a copy of that personal data to re-use with another service or business in many cases.
- Rights relating to automated decision-making and profiling. we do not use your personal data in this way.
Further information about your rights can also be obtained from the Information Commissioner’s Office or your local Citizens Advice Bureau.
If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office.
Information we may collect about you
We may collect the following data, which includes personal data from you:
- Your name
- Contact details (including your email address, postal address and telephone number)
- Country of residence
- IP address
- Web browser type and version
- Operating system
- A list of URLs starting with a referring site and your activity on our site
How we use your information about you
Under the GDPR, we must always have a lawful basis for using personal data. This may be because the data is necessary for our performance of a contract with you, because you have consented to our use of your personal data, or because it is in our legitimate business interests to use it. Your personal data may be used for one of the following purposes:
- To provide you with convenient and optimal access to our website.
- To send you our email newsletters when you have opted-in to receiving them.
- To enable you to participate in prize draws, competitions and other promotions.
- To provide you with advertising about Cecelia Ahern’s books.
- To carry out surveys and other market and consumer research, including aggregating and anonymising personal information for this purpose.
- To administer, test, support and maintain this website, deal with enquiries or complaints about the website and provide customer support.
- To communicate with you in connection with your requests and enquiries and about changes to our policies.
- To protect, investigate, and deter against fraudulent, unauthorised, or illegal activity.
- To enable us to comply with our policies and procedures, enforce our legal rights, process any claims we receive in connection with our products, services or the website and enforce the usage terms of the website.
Sharing your information
We may share your personal information with selected third parties, although it is likely that the exact identity of the third parties with whom we share your personal information will change during your relationship with us. Depending on that relationship, it is anticipated that your personal information will be disclosed to the following categories of third parties:
- Third parties with whom you have consented to us sharing your information, for example, if you consent to our sharing your information with specific third parties for marketing purposes.
- Third parties who provide data processing and IT services to us including website hosting providers, data back-up, security and storage providers and cloud-based software providers.
- Other third party service providers who help us run and improve our business. For example providers of email services, marketing services, survey and market research providers, providers of fulfilment and postal services and travel service providers.
- Other companies which are related to us through common ownership who provide IT and system administration services and undertake group level reporting.
- Our partners with whom we co-organise competitions, events and promotions.
- In the case of our authors and illustrators, we share personal information with providers of editorial and production services, including third party manuscript readers, translators, printers and typesetters. We may also share personal information with our publishing partners, such as the publishers of foreign editors of our books, although we will only do this with your permission or the permission of your agent.
- Professional advisors such as external lawyers, external auditors, insurance or tax consultants and claims handlers.
- Third parties with whom we may choose to transfer or merge parts of our business or our assets.
- Any other third parties (including regulatory authorities, the police, courts and government agencies) where necessary to enable us to enforce or protect our legal rights, or where such disclosure may be permitted or required by law.
Accessing, reviewing, updating and modifying personal data
You may request to access, rectify or erase your Personal Data. You have the right to object to the processing of your Personal Data, restrict the processing of your Personal Data and exercise your right to data portability. Where you have given us your consent for our use of your Personal Data, you have the right to withdraw your consent at any time and we will apply your preferences for the future. We will respond to your questions or complaints relating to the processing of your Personal Data. If you are not satisfied with our responses, you have the right to lodge a complaint with a supervisory authority.
How we protect and retain personal data
We maintain administrative, technical and physical safeguards designed to protect the Personal Data we have about you against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. We make reasonable efforts to ensure a level of security appropriate to the risk of the processing, taking into account the costs of implementation and nature of the processing of Personal Data.
We retain Personal Data for the period needed to fulfill the purposes for which Personal Data was collected and as otherwise required or permitted by applicable law, such as in relation to our record retention obligations.
The Services may be hosted in and managed from a country outside the country in which you initially provided the information, including the United States. When your Personal Data is transferred to (or accessed from) a country outside the European Economic Area (“EEA”) for which the European Commission has not issued an adequacy decision, we will implement appropriate safeguards to ensure that your Personal Data remains protected. This may include data transfer agreements, a copy of which you can obtain by contacting us as indicated in the Contact Us Section below.
However, your Personal Data may be accessed by the courts, law enforcement and national security authorities of the recipient country in accordance with applicable law. When we transfer your Personal Data, we will protect that information as described in this Privacy Notice.
Links to other websites
Our website contains links to other websites, for example to enable you to “buy” or “download” books from third party retailers. Please be aware that this Privacy Notice does not apply to such websites and that we are not responsible for your information that third parties may collect through these websites. We encourage you to be aware of this when you leave our website, and to read the privacy and cookie policies of other sites that collect or use personal information.