This privacy notice sets out to describe what happens to your personal data that we hold through interactions with The MISRA Consortium Limited (“MISRA”). If you require further information, please use the standard contact form.

Where personal data of other parties is provided (for example when making a purchase on behalf of an end user), the provider must be authorized to do so by the owner. The provider may be required to facilitate requests between the data owner and MISRA with regard to this Privacy Statement. Where possible, the data owner should be informed of this Privacy Statement.

Personal data about you is collected when you purchase MISRA goods, services or participate in forum discussions. The data collection starts with the creation of an account to interact with MISRA. The creation of an account is automatic and mandatory for the purchasing of MISRA goods and services.

The personal data processed includes:

• Forum Discussions
  • Company name and email address – required to confirm legitimate user accounts
  • IP address – required to identify source of forum posts for enforcing forum rules
• Purchases
  • Name, address and contact information – basic information to create a user account
  • Shipping contact and address – basic information required for delivered goods
  • End user name – goods are assigned to individual users for copyright protection
  • Name and position of license signatory – record of senior approval to enter into an agreement with MISRA
  • Purchase history – used as proof of entitlement to goods and services

MISRA use payment service providers to enable you to make purchases through our website. It is clearly stated when you are being transferred to another site to complete purchases.

Personal data may be shared with third parties for web hosting and identity checking in order to fulfil the goods and services requested.

The lawful basis of collecting your personal data, identified in Clause 1, is ‘legitimate interests’. This means that the data that we collect is the minimum necessary to deliver the goods and services requested.

As part of the Data Protection obligations under GDPR, MISRA must ensure that personal data is handled in the following ways:

• Processed lawfully, fairly and in a transparent manner
• Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes
• Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed
• Accurate and where necessary kept up to date
• Kept for no longer than is necessary for the purposes for which the personal data are processed
• Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage

For details regarding our current retention policy, please contact MISRA through the standard contact form.

The GDPR provides the following rights for individuals:

• The right to be informed
  • This Privacy Statement defines the personal data processed and MISRAs legitimate interests in doing so, including any third party disclosures.
• The right of access
  • Individuals can make a subject access request. MISRA will respond within one calendar month and most requests will be free of charge.
  • The most efficient way of making a request is through the standard contact form.
• The right to rectification
  • Individuals can request that inaccurate personal data is rectified. MISRA will respond within one calendar month.
  • Individuals can also rectify their own personal data, see Clause 4. All other requests can be made via the standard contact form.
• The right to erasure
  • Also known as ‘the right to be forgotten’, individuals can make a request for erasure. MISRA will respond within one calendar month.
  • The most efficient way of making a request is through the standard contact form.
• The right to restrict processing
  • Individuals can request that personal data is restricted or suppressed, therefore the data may be stored by MISRA, but not used. MISRA will respond within one calendar month.
  • The most efficient way of making a request is through the standard contact form.
• The right to object
  • Individuals have the right to object to the processing of personal data in certain circumstances. MISRA will respond within one calendar month.
  • The most efficient way of making a request is through the standard contact form.
• Rights in relation to automated decision making and profiling
  • MISRA do not use automated decision making and profiling.

Your personal information can be accessed and maintained through your registered account with MISRA. For any other requests, please use the standard contact form.

Issue 2.0 – August 2021, added statement on providing data on other parties
Issue 1.0 – July 2021