BBC Photo Archive Privacy Notice
Your trust is very important to us. This means the BBC is committed to protecting the privacy and security of your personal data. It is important that you read this notice so that you are aware of how and why we are using such personal data. This privacy notice describes how we collect and use personal data about you during and after your relationship with us, in accordance with data protection law.
About BBC Photo Archive
The BBC Photo Archive offers BBC copyright images for sale for editorial use in digital and print media on a business-to-business basis. The photos are not available to members of the public for private use.
All customers must register before being able to use this service. During the registration process you will be asked for your company or organisation's details, and you will be asked to provide some background on how you intend to use photos purchased from the BBC Photo Archive. This information will be used to assess if your registration is suitable for access to the portal and to purchase images from the BBC in line with our Terms & Conditions. The BBC will confirm the outcome of this assessment with you and provide you with log in details, if accepted. The login details are solely for use by that individual and may not be passed to any other person.
Regular customers of the site may be given the opportunity to become account customers and be invoiced for their purchases on a monthly basis.
Non-account customers will need to make payments by credit card. Payments are processed via a secure third party payment portal provided by Barclays Bank Plc. Please see their privacy notice for information on how they process your personal data.
Following the purchase, you will receive an e-receipt confirming the specific Reproduction Rights and any other specific terms relating to the purchase of the Picture(s).
Why do we collect and use your personal data?
Customers must be aged 18 and over to access the BBC Photo Archive portal and purchase pictures.
The BBC we will collect and process the following personal data about you:
- Your name
- Your job title
- Your work email address
- Your phone number
- Company name
- Company address
You will also be given the chance to opt-in to receiving newsletters and marketing communications.
Your personal data will be used by the BBC for the purposes of assessing your registration and setting up an account for you, enabling you to access to the BBC Photo Archive portal and to make any purchases. Your personal data will also be processed by us when we carry out access audits of users of our web portal.
Who is the Data Controller?
The BBC is the “data controller” of your personal data. This means that the BBC decides what your personal data is used for, and the ways in which it is processed. For the avoidance of doubt, your personal data will be collected and processed solely for the purposes set out in this privacy notice. As the data controller, the BBC has the responsibility to comply, and to demonstrate compliance with, data protection law.
Financial transactions are routed directly to Barclaycard (Barclays Bank Plc.) who are the data controller for this processing. The financial data you provide during this transaction is not accessible or stored by the BBC.
Lawful basis for processing your personal data
The legal basis on which the BBC processes your personal data is our legitimate interest to assess that your registration is suitable for access and in line with our Terms & Conditions for this service, and to manage the use of the BBC Photo Archive portal.
For newsletters and marketing communication we rely on consent as our legal basis. You can unsubscribe at any time.
Sharing your personal data
The BBC works with our approved third-party providers who help us to provide some of our services. These partners only use your personal data on behalf of the BBC and not independently of the BBC.
Your personal data will be shared with Barclays Bank Plc for the purpose of enabling any financial transaction. Please see their privacy notice for information on how they process your personal data.
We may also share your personal data with a third party where required or permitted by law.
Retaining your personal data
The BBC will retain your personal data for as long as you have an account with BBC Photo Archive.
If you request a deletion of your account, your personal data will be deleted but we will retain the company name and address for audit purposes.
Your personal data will be stored in the UK and the European Economic Area (EEA).
Your rights and more information
You have rights under data protection law:
- You can request a copy of the personal data the BBC stores about you.
- You have the right to request that we rectify any inaccurate or incomplete personal data that we hold about you.
- You have the right to ask for the personal data we collect about you to be deleted, however there are limitations and exceptions to this right which may entitle the BBC to refuse your request.
- In certain circumstances you have the right to restrict the processing of your personal data, or to object to the processing of your personal data.
- You have the right to ask that we transfer the personal data to you or to another organisation, in certain circumstances.
You can contact our, Data Protection Officer if you have questions or wish to find out more details about your rights, please visit the BBC’s Privacy and Cookies Policy at http://www.bbc.co.uk/privacy.
If you have a concern about the way the BBC has handled your personal data, you can raise your concern with the supervisory authority in the UK, the Information Commissioner’s Office (ICO) https://ico.org.uk/.
Updating this privacy notice
We will revise the privacy notice if there are significant changes to how we use your personal data.