B2B Privacy Notice

This Privacy Notice describes the types of personal data which may be collected about you, as a business contact who has an interest in the work of the London Legacy Development Corporation (the Legacy Corporation).

The collection and use of your personal data must be compliant with data protection legislation including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act (2018) and the Privacy and Electronic Communications Regulations (2003). This Privacy Notice sets out the lawful basis for the collection and use of your personal data.

The Privacy Notice describes the roles and responsibilities of the Legacy Corporation and how to contact us if you have any questions. It also describes what rights and freedoms you have as a data subject. 

The London Legacy Development Corporation is committed to protecting your privacy and processing your data so that it is secure and safe.

Personal data is being collected for a number of reasons including the following: 

• To keep you up to date with everything happening at the Park.
• To tell you about events you may be interested in across the Park.
• Announcements about the opening of new venues, restaurants, and bars at and adjacent to Queen Elizabeth Olympic Park.
• Highlight news stories across the Park.
• Sharing business opportunities and projects across the Park.
• When you contact us directly, including to deal with any requests, comments, and complaints that you have.

Personal data you provide directly

The data which will be collected about you is the Stakeholder Data. This includes: 

• First Name
• Last Name
• Email address
• Organisation
• Organisation postcode
• Organisation industry
• Job title
• Job level 

Legitimate Interests

There needs to be a lawful basis for the collection of personal data as defined by the General Data Protection Regulation (UK GDPR). 

The lawful basis which is being used to hold your data and to send you notifications about the work of the Legacy Corporation is legitimate interest. 

We believe that as a business contact, by definition you wish to be kept up to date of the work of the Legacy Corporation. 

Additionally, we may acquire contact information from reputable third-party sources for the purpose of informing businesses of the work and activities undertaken by the Legacy Corporation. The data we acquire will be of relevant business contacts that we recognise have a legitimate interest in hearing more about business opportunities at Queen Elizabeth Olympic Park. These third-party sources adhere to data protection regulations, and the data acquired is limited to what is necessary for our communication purposes.

The part of the GDPR which applies is Article 6 (1)(e) ‘processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. 

The Legacy Corporation does this based on ‘taking into consideration the reasonable expectations of data subjects based on their relationship with the data controller’. 

As part of the GDPR compliance you can request that you are removed from the mailing list at any time.

dataprotection@londonlegacy.co.uk

The newsletter which you will be sent will also have details on how to withdraw consent. 

Your contact details will be collected in the following ways: 

• When you contact the Queen Elizabeth Olympic Park and/or Legacy Corporation by email and express an interest to be kept up to date with what we are doing.
• If you give your business card to a Queen Elizabeth Olympic Park and/or Legacy Corporation employee or representative at an event.
• If you provide your contact details in some other way.
• If you sign up via our online form.
• If your contact details are shared with us by reputable third-party sources.
• Please note – if you provide your data to any member of the Legacy Corporation and ask to be kept up to date, your data will then be provided to the Communications Marketing and Strategy Directorate who manage the business contact database.

Your data will not be shared with third parties unless you explicitly give the Legacy Corporation consent to do so. Those third parties are likely to be partner organisations which the Legacy Corporation works with.

However, there may be instances when data will be shared which is outside the control of the Legacy Corporation, for example, legitimate requests from the police, other law enforcement agencies or an event such as a medical emergency. 

All of your personal data which is held in digital systems will be held in the UK or the European Economic Area (EEA). 

Your personal data will be held in accordance with the purpose it was collected for unless there is a legal reason for keeping it longer. 

When your personal data is no longer needed, it will be destroyed or returned to you. 

DotDigital includes tools which may be used to assess how effective communications are between the Legacy Corporation and its stakeholders. 

These include email tracking which records when an email sent from the Legacy Corporation has been opened and whether links within a message are opened.  

The Legacy Corporation will always work to ensure that the data it holds about you is up to date and accurate and only held for the purpose for which it was collected. It is constantly reviewed. 

Data protection law gives you rights in relation to your own data. These are outlined below, but please be aware that these are not necessarily automatic rights. There is a ‘right to be forgotten’ in general, but in practice, there are other considerations which may mean that data cannot be deleted:

Right of notification – how your data is collected and how it is processed are supported through this Privacy Notice.

Right to privacy – your data will not be shared with third parties without your consent, unless there is a legal reason to do so, or an event such as a medical emergency.

Right of access – you can ask for details of the personal data which is held about you.

Right to rectification– you can ask that data is corrected if need be, and if it is incomplete, to be completed.

Right of erasure (right to be forgotten) – you can ask that data is deleted an no longer processed if it is no longer necessary to do so. This will be done if possible but there will be instances where personal data cannot be deleted for legal or other reasons.

Right to restriction on processing – you can ask that data is not processed.

Right to data portability – you can request a portable version of your personal data.

Right to withdraw consent – if you have consented to provide personal data – for example, consent for biometric data to be processed, then you can withdraw that consent. 

This Privacy Policy may change over time. If there are any significant changes then you will be contacted. No changes to this policy will be made which will adversely affect your rights as a data subject. 

This Privacy Notice was last updated. in January 2023.

The Data Controller is the London Legacy Development Corporation. 

The Data Processors are: 

London Legacy Development Corporation

Two Circles

The sub-processer of the data is DotDitigal

If you have any questions about your personal data, or this Privacy Policy, please contact: 

dataprotection@londonlegacy.co.uk

London Legacy Development Corporation

Level 9
5 Endeavour Square
Stratford 
London 
E20 1JN