Data Controller

Vuology Ltd

Collected Personal Data

This means personal data has to be information that relates to an individual. That individual must be identified or identifiable either directly or indirectly from one or more identifiers or factors specific to the individual.                       

The UK GDPR covers the processing of personal data in two ways:

• personal data processed wholly or partly by automated means (that is, information in electronic form); and
• personal data processed in a non-automated manner which forms part of, or is intended to form part of, a ‘filing system’ (that is, manual information in a filing system).
• ethnic origin
• religious or philosophical beliefs
• genetic data
• health data;
• sex life; or
• sexual orientation

Purpose of collecting data

         Personal data for the specific purpose or purposes consensual by participants.

         Legal obligation: the processing is necessary to comply with the law (not including contractual obligations).

        Vital interests: the processing is necessary to protect someone’s life.

        Public task: the processing is necessary to perform a task associated with the public interest or for your official functions,         and the task or function has a clear basis in law.

       Legitimate interests: the processing is necessary for your legitimate interests or the legitimate interests of a third party            unless there is a good reason to protect the individual’s data that overrides those legitimate interests. (This cannot apply if        you are a public authority processing data to perform your official tasks.)