Contents
1. Data Controller
The Yountville Tribune (yountvilletribune.com), operated by Tribune Publications, is the data controller in respect of personal data processed through this website. Our representative for UK data protection matters may be contacted at [email protected].
2. Lawful Basis for Processing
Under the UK GDPR (as retained in UK law by the European Union (Withdrawal) Act 2018), we process personal data on the following bases:
- Legitimate Interests: We process server log data for website security and performance. Our legitimate interests are balanced against your rights and freedoms.
- Consent: Where you contact us voluntarily via our contact form, we process your data on the basis of consent. You may withdraw consent at any time.
3. What Data We Process
We process only the minimum personal data necessary:
- Contact enquiries: Name, email address, and message text provided voluntarily through our contact form. Used only to respond to your message.
- Server logs: IP address, browser and device information, pages visited, and referring URL. Retained for up to 30 days for security purposes only.
We do not process special category data as defined in UK GDPR Article 9.
4. Your UK GDPR Rights
UK residents have the following rights under the UK GDPR and the Data Protection Act 2018:
- Right of Access: Obtain a copy of your personal data and information about how it is processed.
- Right to Rectification: Request correction of inaccurate personal data.
- Right to Erasure: Request deletion of personal data where there is no longer a lawful basis to retain it.
- Right to Restrict Processing: Request that we limit the way in which we process your data.
- Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
- Right to Object: Object to processing carried out on the basis of legitimate interests.
- Rights Related to Automated Decision-Making: We do not carry out automated decision-making or profiling.
To exercise any of these rights, email [email protected]. We aim to respond within one calendar month.
5. International Data Transfers
This website is operated in the United States. Personal data you submit may be transferred to and processed there. Where required, such transfers are subject to appropriate safeguards in accordance with UK GDPR Chapter V, including the UK's International Data Transfer Agreement (IDTA) or equivalent mechanisms.
6. Your Right to Complain to the ICO
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
- Website: ico.org.uk
- Helpline: 0303 123 1113
7. Contact
UK data protection enquiries: [email protected]
See also our general Privacy Policy and EU GDPR Notice.