Privacy Notices - Schedule A

The personal data we collect will be used for the following purposes: 

This section details the activities listed above that will determine the processing of your data. 

What are your rights? 

For more information on your rights that apply to all the privacy notices listed below, please see ‘Your rights as an individual’. 

Data Sharing 

Unless stated below in individual notices SSVC do not share data with any external agency.  Data may be shared internally out of legitimate interests for marketing other related services that we think you would find of interest.  

Competitions 

Purpose and legal basis for processing 

a) Our purpose for collecting this information is so we can facilitate the competition and distribute prizes. 

b) The legal basis we rely on for processing your personal data is your consent under article 6(1)(a) of the GDPR. 

What we need 

a) If you wish to enter a competition, we may require a combination of your first name, last name, email address and personal phone number for the competition entry depending on the source of the competition.  Competition winners may also need to provide the home address so that SSVC can have the prize delivered. 

Why we need it 

a) We use this information to facilitate the competition. We also need this information, so we can respond to you in the event you are successful. 

What we do with it 

a) This data is used for the competition only, but it could be shared to an external provider for the sole purpose of delivering a prize to the winner of the competition. 

How long we keep it 

a) For information about how long we hold personal data, see our retention schedule. 

Do we use any data processors? 

a) No 

Register for a Newsletter 

Purpose and legal basis for processing 

a) Our purpose for collecting the information is so we can provide you with up to date information on the top stories from the world of defence and the military. 

b) The legal basis we rely on for processing your personal data is your consent under article 6(1)(a) of the GDPR. 

What we need 

a) If you wish to register for one of our newsletters, you will be asked to provide your email address. 

Why we need it 

a) We use this information so that we can email you content on a daily or weekly basis (depending on the option you sign up for). 

What we do with it 

a) This data will be used to provide you with the requested information only.  We do not share this data externally or for any other purpose. 

How long we keep it 

a) For information about how long we hold personal data, see our retention schedule. 

Do we use any data processors? 

a) No 

Job applications 

Purpose and legal basis for processing 

a) Our purpose for processing this information is to assess your suitability for a role you have applied for. 

b) The legal basis we rely on for processing your personal data is article 6(1)(b) of the GDPR, which relates to processing necessary to perform a contract or to take steps at your request, before entering a contract.  

Why we need it 

a) The information we ask for is used to assess your suitability for employment. You don’t have to provide what we ask for, but it may affect your application if you don’t. 

What we do with it 

a) We'll use all the information you provide during the recruitment process to progress your application with a view to offering you an employment contract with us, or to fulfil legal or regulatory requirements if necessary. 

b) We will not share any of the information you provide with any third parties for marketing purposes. 

c) We’ll use the contact details you give us to contact you to progress your application. We’ll use the other information you provide to assess your suitability for the role. 

How long we keep it 

a) For information about how long we hold personal data, see our retention schedule. 

Do we use any data processors? 

a) No 

Jobs for ex-military 

Purpose  

a) SSVC provide a link to a third-party job board provider called Cross Deck.  SSVC do not process your personal data and this is a connection to a third-party provider who specialise in employment opportunities for ex-service personnel.  

Cross Deck Ltd, Sowton Business & Technology Centre, Capital Court, Bittern Road, Sowton, Exeter, Devon, EX2 7FW  

BFBS user research

Purpose and legal basis for processing 

a) The purpose of user research is to allow us to improve the services we provide. 

b) The legal basis we rely on for processing your personal data is your consent under article 6(1)(a) of the GDPR. 

Why we need it 

a) We’re constantly striving to improve our services to you, from our music and radio programmes to our television, to our Armed Forces information and our wide-range of broadcasts and entertainment.  By gaining insights and feedback from our users we can understand where improvements can be made and anticipate future needs.

What we do with it 

a) Your research contributions will be presented to internal staff only.  We will not share any of the information you provide with any third parties for marketing purposes. 

How long we keep it 

a) For information about how long we hold personal data, see our retention schedule

Do we use any data processors? 

a) No 

Personal information request 

Purpose and legal basis for processing 

a) Our purpose for processing your personal data is so we can fulfil your information request to us. 

b) The legal basis for this is article 6(1)(C) of the GDPR, which relates to processing necessary to comply with a legal obligation to which we are subject. 

c) If any of the information you provide us in relation to the information request contains special category data, such as health, religious or ethnic information, the legal basis we rely on to process it is article 9(2)(g) of the GDPR, which also relates to our public task and the safeguarding of your fundamental rights. And Schedule 1 part 2(6) of the DPA2018 which relates to statutory and government purposes. 

What we need and why we need it 

a) We need information from you to respond to you and to locate the information you are looking for. This enables us to comply with our legal obligations under the legislation we are subject to: 

  • General Data Protection Regulations (2016) 
  • Data Protection Act (2018) 
  • Freedom of Information Act (2000) 

What we do with it 

a) When we receive a request from you, we’ll set up an electronic case file containing the details of your request. This normally includes your contact details and any other information you have given us. We’ll also store on this case file a copy of the information that falls within the scope of your request. 

How long we keep it 

a) For information about how long we hold personal data, see our retention schedule. 

Do we use any data processors? 

a) No 

Social media 

Purpose and legal basis for processing   

a) We need to collect WhatsApp profile information so that we can serve forces news content that you have consented to receive from SSVC. 

b) The legal basis we rely on for processing your personal data is your consent under article 6(1)(a) of the GDPR. 

c) Consent is required for SSVC to process both types of personal data, but it must be explicitly given. Where we are asking you for sensitive personal data we will always tell you why and how the information will be used.   You may withdraw consent at any time by sending ‘STOP’ to the WhatsApp service.  

What we need  

a) We will collect and process your mobile number.  

Why we need it  

a) We use your mobile number to send you information you have subscribed to.    

What we do with it   

a) The mobile number is the only data we use.  Because we must process your WhatsApp profile we will by default have access to your profile data (including public data you have added, such as your photo).  Although our staff would be able to view this in the system, we do not process or share this information.  We do not share your mobile number.  

How long we keep it   

a) All personal data is deleted from the system within two hours of unsubscribing from the WhatsApp service (by texting the word STOP into the WhatsApp chat window).  It will remain in the backup for a further 61 days until overwritten with newer data.    

Do we use any data processors?   

a) We are using a data processor to help run the WhatsApp service for SSVC: MessengerPeople GmbH Herzog-Heinrich-Str. 9 80336 München.  

SSVC retention policy

retention policy