The Botanist: Foundation Privacy Policy

Our Privacy Policy describes how we collect, use and protect personal data (i.e. any information relating to an identified or identifiable person, referred to as a "Data Subject") in the context of the services and activities conducted by The Botanist Foundation C.I.C (collectively, the "Services").

The Botanist Foundation C.I.C [Bruichladdich Distillery, Bruichladdich, Isle of Islay PA49 7UN] (hereinafter referred to as “The Botanist Foundation”) acts as a data controller with regard to the applicable legislation and regulations on data protection, in particular: (i) the UK General Data Protection Regulation and the Data Protection Act 2018; (ii) the Privacy and Electronic Communications Regulations 2003 (which are derived from the Privacy and Electronic Communications Directive 2002/58/EC); (iii) the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, hereinafter the "GDPR"), which entered into force on 25 May 2018 ; and (iv) all applicable laws, statutes, statutory instruments, orders, regulations and codes of practice (whether or not having the force of law) in force from time to time and which apply to the processing of your personal data- hereinafter collectively referred to as the "Applicable Laws".

Depending on the Services, the personal data concerning you (your "Personal Data") that we collect and process mainly includes:

• Data relating to your identity and contact details (title, surname, first name, email address, telephone number, age, address, country of residence).
• Educational qualifications (including subject, grade and year), other qualifications or relevant experiences, covering letter and any other information you may disclose when applying for a bursary.
• Educational course / apprenticeship information.
• Bank information for successful applicants
• Any other information you may disclose when applying for funding from The Botanist Foundation project or contacting us.

Personal data collected as part of the Services are collected and processed for the following purposes:

• To supply/perform the Services requested;
• To respond to your requests, comments and complaints;
• To comply with our legal requirements.

The processing of your personal data is based on the execution of the contract, on our legitimate interest, on our obligation to act in compliance with the applicable legal and regulatory obligations and on your consent to the extent it is required by law.

Your personal data will not be transferred to or made accessible by third parties except to our affiliates, to our external advisors and to our service providers.

Your personal data will be processed in the UK and in the European Union. Your personal data is processed both manually and electronically and is protected by appropriate security measures. We will provide an adequate level of protection for your data and ensure that appropriate technical and organisational security measures are in place to protect your data against accidental or unlawful destruction, accidental loss or alteration, unauthorised disclosure or access and against all other forms of unlawful processing. The same level of protection is contractually imposed by The Botanist Foundation on all its subcontractors.

Your personal data will be retained, in a form that allows you to be identified, only for as long as is necessary for the purposes described in this Privacy notice, or for as long as is necessary to comply with any legal obligation. For example, personal data of non-successful applicants will be kept for a period of 1 year. After this period, the data will be deleted or anonymized.

In accordance with the applicable laws, you have the rights of access, rectification, erasure, restriction of processing, objection, portability of your personal data we hold about you to the extent applicable, unless we can demonstrate a compelling legitimate reason for retaining your personal data. When the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time.

You have the right to lodge a complaint with your local data protection authority.

You can exercise your rights by writing to us at: privacy@remy-cointreau.com.