Watatunga Wildlife Reserve Privacy Notice

This privacy notice is provided to demonstrate our transparency by informing you about how and why your personal data is used and to ensure that you are aware of your rights under data protection legislation.

The Company

We are Watatunga Wildlife Reserve and we are the Data Controller. Our address is Watlington Road, Kings Lynn, Norfolk, PE33 0RG. We can also be contacted at info@watatunga.co.uk.

The purpose for processing your data and our basis for doing so.

Watatunga Wildlife Reserve is a visitor experience and we process your personal data for the purpose of taking tour bookings as well as for our lodges, BBQ Experience and our Forest school. This includes the use of our online booking platforms, direct communication and for marketing purposes.

When you book a tour, lodge or BBQ experience, we process your name and contact details. We do this to secure your booking, to enable payment and to allow us to contact you should we need to in an event of an emergency or to confirm your attendance. The legal basis for this processing is Article 6.1.f of the UK GDPR – legitimate interest. The legitimate interest we have is to provide an effective booking process and a good line of communication. For Tour bookings we will also ask if you have any accessibility issues which would require the use of our wheelchair enabled transport. Our legal basis for this processing is Article 6.1.c – legal obligation. Also, we ask for your explicit consent to process any health data disclosed to us in accordance with Article 9.2.a UK GDPR. To process your payments our legal basis is Article 6.1.b – performance of a contract.

For booking our Forest School, we process adult’s data only which comprises name and contact details. The legal basis for this is Article 6.1.f – legitimate interest. For taking payments, our legal basis is Article 6.1.b – performance of a contract.

For marketing purposes, we process your personal data to send you news, updates and offers. We do this based on Article 6.1.a UKG GDPR – consent. You are free to withdraw your consent at any time by contacting us.

If you fail to provide your data for processing, we will not be able to provide our services to you.

Recipients of your data

As a general principle, we will not transfer your personal data to other recipients without your permission. There are some exceptions to this:

· It is possible, that we might be obliged to disclose personal information in response to a court order or other lawful obligation.

· We will share limited personal data with our accountants.

· We may share your data as part of a sale, transfer, or merge part of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them.

Data processed by third parties on our behalf.

We use the services of other organisations in the processing of your data. We use cloud-based email and document storage, web hosts and video conference platforms. We use third party cloud based booking systems. Our website processes limited personal data such as through our contact form and our external IT service provider has limited access to data.

Transferring your data outside of the UK

Personal data is transferred to the EU based on the UK / EU Adequacy decision.

Retention periods

We will retain your data only for the time we require it for the purposes stated and / or where we have a legal obligation or other legitimate purpose. We will retain personal data obtained through our booking systems for a period of 7 years.

Automated decision making

We do not undertake any automated decision making.

Your rights

The UK GDPR provides you with several rights in relation to the data of your we process. The rights relevant to our activities are:

· You have the right to get access to and copies of your personal data.

· You can ask us to rectify any inaccurate information we may be holding.

· You can request we restrict our processing of your data.

· You can ask us to erase your personal data if it is no longer required for the purpose we collected it or have no legal obligation to retain it.

· You have the right to object to processing we undertake under a legitimate interest basis.

If you want to exercise any of these rights, please contact us using the above contact details.

You also have the right to lodge a complaint about our processing with a supervisory authority — the UK’s Information Commissioner’s Office.

The Information Commissioner’s Office
Wycliffe House, Water Lane,
Wilmslow, Cheshire SK9 5AF.

Helpline number: 0303 123 1113