Privacy Policy

The Takeover Code website https://code.thetakeoverpanel.org.uk (the “Site”) is hosted and managed by The Stationery Office Limited (“TSO”) on behalf of the Takeover Panel (the “Panel”).

The Data Controller, for the purposes of the UK General Data Protection Regulation 2016/679 and the Data Protection Act 2018, is the Panel of One Angel Court, London, EC2R 7HJ whose Data Controller Registration Number is Z5171012.

The Data Processor, for the purposes of the UK General Data Protection Regulation 2016/679 and the Data Protection Act 2018, is TSO of St Andrews Business Park, 18 Central Avenue, Norwich, Norfolk, NR7 0HR, who is bound to process all personal data only on behalf of and as directed by the Panel as the Data Controller.

References to "you" or "your" are references to any person accessing the Site. References to "we", "us" or "our" are references to the Panel.

TSO hosts and manages the Site on behalf of the Panel. Personal data TSO collects about you may, to a limited extent, be shared with the Panel for its various purposes including:

1. to support the Panel’s operations and understand and manage demand from the public for online access to the Takeover Code;

2. to facilitate monitoring of TSO’s performance in providing services to the Panel and the relationship between TSO and the Panel; and

3. to transition the running of the Site, and the provision of related services, to a third party in the event that TSO and the Panel choose to end their arrangement.

You should not submit any personal data to TSO if you do not wish it to be shared with the Panel. The Panel will process your personal data in accordance with the privacy policy on its website at https://www.thetakeoverpanel.org.uk/.

The following categories of personal data may be collected:

1. information collected or generated about you through your use of the site, e.g. documents downloaded and searches made; and

2. technical information collected by cookies. When you visit the Site, cookies are used to collect technical information about the services that you use, and how you use them. For more information on cookies, see the Cookie Policy.

We will only use your personal data in line with all applicable laws. Most commonly, we will use your personal data in the following circumstances:

1. where it is necessary for the performance of a task we carry out in the public interest or in the exercise of official authority vested in us, in particular our obligation to make the text of the Takeover Code available to the public;

2. where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; and

3. where we need to comply with a legal obligation.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

The period for which we will retain personal data will vary depending on the purposes that it was collected for, as well as the requirements of any applicable law or regulation.

In some circumstances you can ask us to delete your data: see paragraph 7 below for further information.

In all of the cases described in this Privacy Policy, you may have the following rights and, in most cases, you can exercise them free of charge. These rights include a right to:

1. request access to, and deletion or correction of, information about you;

2. object to the way in which we use information about you; and

3. request that your personal data be transferred to another organisation.

There may be limitations or exemptions applicable to the exercise of your rights. If we do not comply with your request we will explain the reason when we responds to the request.

You can exercise your rights by contacting us as described in paragraph 10 below.

This Privacy Policy will be reviewed from time to time to take account of changes to our operations or practices and, further, to make sure it remains appropriate to any changes in law, technology and the business environment. Any personal data held will be governed by our most current policy.

This Site may contain links to other third-party websites. We do not control these third-party websites and the websites are not covered by this privacy policy. If you access other websites using the links provided, you do so at your own risk. The operators of these websites may collect and use your information in accordance with their privacy policies, which may differ from ours. We encourage you to read the privacy policies on the other websites you visit.

If you have any questions or concerns about the Panel’s handling of your personal data, or about this privacy policy, please email us or write to: Privacy Officer, The Takeover Panel, One Angel Court, London, EC2R 7HJ.

The Panel would always hope to be able to directly resolve any questions or concerns you may have around our use of your personal data. However, you do have the right to lodge a complaint with the applicable privacy regulator in your jurisdiction, which in the UK is the Information Commissioner’s Office (“ICO”) whose website is www.ico.org.uk.