The Data Controller is The MG ‘T’ Society Limited, 34A Bath Road, Keynsham, Bristol, BS31 1SN, United Kingdom, a Company Limited By Guarantee company incorporated and registered in England and Wales with Registration Number 10411553.
Data Protection Officer
What personal information does the MG ‘T’ Society Ltd collect?
The MG ‘T’ Society Ltd collects and stores the following personal information that you give to us when you become a member of the Club:
Contact information: such as name, address, email, phone number and user login
Order information: details regarding purchases through the T-Shop
Communication information: such as when you have been in touch with us, or we have contacted you, and the content of such communication
Comment/Article information: such as comments on articles in our bimonthly publication, Totally T-Type 2, and stories/images you provide for publishing in the magazine
If you do not want to provide to us personal data that we need to confirm your membership and legally maintain records of members as a Company Limited by Guarantee then we will not be able to offer you membership of the Society or use of its Services.
Personal Information Collected Automatically
As well as the personal information you provide to us, we also collect additional information using automated means such as cookies and other kinds of technology.
Browsing and use information: such as pages, links, products, and content viewed, including metrics surrounding those views including time, length of visit, the locations viewed before and after
Device and technical information: such as the internet protocol (IP) addresses of devices you use, device identifiers, browser characteristics, operating system details, language preferences, referring uniform resource locators (URLs), services used, log files, audit trails, or cookie IDs.
Why do you need my personal information?
We use the personal information we collect about you for the purposes, and with their corresponding legal basis, as per the following:
Provide member Services and Features
Legal basis: To take steps prior to and to perform the membership contract
Data types: Contact information, communication information
Process, fulfil, and send orders from the T-Shop and contact you as needed for these orders
Legal basis: To take steps prior to and to perform the contract
Data types: Contact information, order information, financial information
Respond to emails or comments
Legal basis: To respond to a request coming directly from the interested data subject
Data types: Contact information, communication information, order information
Enable and improve website functionality
Legal basis: Legitimate interest – better customer experience
Data types: Contact information, device and technical information, browsing and use information
Send you the bimonthly Membership Newsletter to inform you that the latest issue of Totally T-Type 2 magazine has been published
Legal basis: ePrivacy and GDPR consent, without prejudice to legitimate interest where possible.
Data types: Contact information, browsing and use information, demographic or interest information
Legal basis: Compliance with legal obligation
Data types: Contact information
Prevent fraud or other misuse
Legal basis: Legitimate interest – protect customer and business information
Data types: Contact information, order information, device and technical information, browsing and use information
Who can see my personal information?
The Directors of the MG ‘T’ Society John James and Stephen James, are granted access to your personal information in order to provide Membership Services.
We also share personal information about you with others for additional purposes, including:
When you give your explicitly written consent for your personal information to be shared with another member, for example when tracing car histories and/or previous owners.
Compliance with legal obligations, and/or at the request of government authorities when conducting an investigation.
If we believe there has been a violation of our terms or policies, or to protect anyone’s rights, property, life, health, security, or safety.
For other purposes disclosed elsewhere in this Privacy Statement, or at the time you provide your personal information.
Aggregated or de-identified information that cannot be used to identify an individual and anonymised information is not considered personal information that is covered under this Privacy Statement.
Links to Other Websites
The MG ‘T’ Society Ltd is not responsible for the content or privacy practices of any website or application that is not controlled by them.
How long does the MG ‘T’ Society keep your personal information?
Personal information is retained based on legal, business, and contract requirements. If you have any questions regarding data retention, please contact jj(‘at’)ttypes.org.
Requests for deletion will be limited by their continued necessity under Article 5(1)(e) of the GDPR, as required or permitted by applicable law, for compliance with a legal obligation; establishment, exercise or defense of legal claims, or if we believe in good faith that such disclosure is necessary; at the request of government authorities conducting an investigation; if we believe there has been a violation of our terms or policies, or to protect anyone’s rights, property, life, health, security, or safety; to resolve outstanding disputes; or to troubleshoot existing problems, such as submitted security or functionality issues.
Logs within systems will be kept with consideration of the type of data in the system, as well as legal and regulatory guidance requires.
How do we protect your personal information?
The MG ‘T’ Society Ltd maintains security procedures, both online and offline, to protect your information from unauthorised access.
Rights of Access and Rectification
You have the right to know what personal information we possess about you, as well as the right to rectify discrepancies in such information.
You can opt out of receiving the MG ‘T’ Society Membership Newsletter at any time by clicking the ‘Unsubscribe’ link at the top of any of the bimonthly emails you receive.
You can also change your browser cookie settings, which may prevent some essential services of the website from functioning (e.g. login), but will eliminate all data processing.
You have the right to ask us what personal information we hold about you, pending verification of your identity. All such requests should be directed to John James, Data Controller of the MG ‘T’ Society Ltd, at jj(‘at’)ttypes.org
Right to Be Forgotten
You have the right to request the deletion or removal of personal data where there is no compelling reason for its continued processing.
Deleting your data requires us to also delete your Membership. This means we will terminate your membership of the MG ‘T’ Society Ltd. However, we may retain archived copies of your information as required by law for legitimate business purposes such as to help address fraud and spam. Retention of this information will be reviewed on an annual basis to confirm that the additional purposes still apply.
Right to Restrict Processing of Your Data
Under the Right to Restrict Processing, you may also question the legality of our processing or retention period for data.
Should you wish to limit the reasons why we process your personal information, please submit a request to jj(‘at’)ttypes.org. We will contact you to verify your identity and discuss your request.
Right of Data Portability
You have the right to obtain a copy of your personal information as held by the MG ‘T’ Society Ltd for your own purposes across different services. Any data we capture will be provided to you in a CSV (Comma Separated Values) machine-readable format.
Data Portability Requests can be submitted to jj(‘at’)ttypes.org.
Right to Object to Our Data Processing
You have the right to object to why we consider we have the right to process your personal data.
What to do if your rights have been violated
In the event you have a concern about violations of the above rights, please contact the MG ‘T’ Society Ltd in the first instance. Should you not be satisfied with the outcome, you have the right to contact your regional EU data protection authority.