Aviva respects your privacy and is committed to protecting your personal data. This privacy notice gives you information about how Aviva and any third parties on Aviva’s behalf collect and process your personal data through your participation in ‘Let’s tackle loneliness in Norwich, together’ (the “Audience”).

The Audience is not intended for people under the age of 18 and we do not knowingly collect data relating to children.

It is important that you read this privacy notice together with any other privacy policy or fair processing notice we may provide on specific occasions when we are processing personal data about you. This notice is supplementary to the Aviva Privacy Policy which contains additional details about our use of your personal data as well as how the law protects you and your rights in relation to your personal data.

1. Who we are

We, Aviva Digital UK Limited on behalf of the Aviva Community Group (“Aviva”, “we”, “us” or “our”), are the data controller.

Aviva has appointed a Data Protection Officer (“DPO”) who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the DPO using the details set out below.

We keep this privacy notice under regular review. This version was last updated on 23 July 2019.

2. Personal data we collect

So that we can provide you with relevant information, we ask you to tell us your first name, surname, email address and whether you are a customer or employee of Aviva, an insurance broker or a financial advisor. If you work for or are associated with a local business, not for profit or public sector organisation, we ask you to also provide us with the name of the business or the organisation and your role with the business or organisation.

3. How we use your personal data

Aviva may collect, use, store and transfer your personal data to provide you with information about events and volunteering opportunities in your area, as well as other information that we think you will find relevant, including about Aviva products and third parties. This processing is in accordance with our legitimate interest to promote charitable and community initiatives.

Aviva will only use your personal data for the purposes for which we collect it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to receive an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us (see details below).

If Aviva needs to use your personal data for an unrelated purpose, Aviva will notify you and explain the legal basis for doing so.

Please note that Aviva may process your personal data without your knowledge or consent where this is required or permitted by law.

4. How we share your personal data with others

Aviva may share or disclose data as required or permitted by applicable legal or regulatory requirements, including to respond to lawful request, court order and legal process.

Aviva may also share your personal data with the parties set out below for the purposes set out in section 3 above:

  • the Aviva Group Companies, our agents and third parties who provide services to us;
  • our media agencies who support us in promoting Aviva community initiatives to the right audiences; and
  • research agencies who assist us in understanding and gathering feedback provided by Audience participants voluntarily.

5. How long we keep your personal data

We maintain a retention policy to ensure we only keep personal data for as long as we reasonably need it for the purposes explained in this notice. The Audience is initially being run as a pilot only. We expect to retain your personal data until the end of 2020.

6. How we protect your personal data

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to access your data. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

7. Your legal rights

You may opt-out of receiving Audience communications at any time by contacting us at communityfund@aviva.com.

You have further rights in relation to your personal data, including the right to restrict the processing of your personal data, to receive a copy of the personal data we hold about you and the right to make a complaint at any time to the ICO. Please see the full Aviva Privacy Policy and the section titled ‘your rights’ for more detail.

If you’re not happy with the way we’re handling your information, you have a right to make a complaint with your local data protection supervisory authority at any time. In the UK this is the Information Commissioners Office (“ICO”). We ask that you please attempt to resolve any issues with us before contacting the ICO.

8. Contacting us about your personal data

If you would like more information about how we process your personal data, please access our full Aviva Privacy Policy.

If you have any questions about this privacy notice or how to exercise your rights, please contact our Data Protection Officer.

Write to: The Data Protection Team, Aviva, Pitheavlis, Perth, PH2 0NH

Email us: DATAPRT@aviva.com