Privacy Policy

Thevaluefactory SL, having its registered office in Barcelona, Pg. de Sant Joan 6, Pral. 1º, 08010, BARCELONA. VAT No. ESB66175910 and Fiscal Code No. B66175910 (hereinafter, “Controller”), manager of the website what-a-wonder.com (hereinafter, the “Website”), its capacity as data controller in relation to personal data pertaining to the users using the Website (hereinafter, the “Users”) hereby provides the privacy policy pursuant to UK GDPR and to art. 13 of the Regulation EU 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter,jointly defined “Regulation” or “Applicable Law”).

The Controller takes the outmost account to the privacy rights and to the protection of its Users’ personal data. For any information in relation to this privacy policy at any time whatsoever, the Users may contact the Controller using the following modalities: • Sending a registered letter to the registered office of the Controller Thevaluefactory SL, Pg. de Sant Joan 6, Pral. 1º, 08010, BARCELONA. • Sending an email to [email protected]

The Controller is registered with the UK Supervisory Authority, the Information Commissioner’s Office (the ICO) under registration number ZB617902. The Controller has appointed the UK Representative. If you wish to exercise your rights under the UK General Data Protection Regulation (UK GDPR) or have any queries in relation to your rights or privacy matters generally please contact our Representative, using the following modalities:

Contact Details Adam Brogden: Tel: +44 (0) 1772 217800 Email: [email protected]

UK Representative Address: GDPR LOCAL LTD - 1st Floor Front Suite, 27-29 North Street, Brighton, England, BN1 1EB

1. Purposes of data processing

The Users’ personal data will be processed by the Controller lawfully pursuant to art. 6 of the Regulation for the following processing purposes:

a) Service’s supply: in order to consent to the User the use of the Website or to give execution to the request of the User to receive advertising and promotional communications (receiving advertising material, direct sale, commercial communication) or to being contacted by the Controller, by means electronic mail, for proposals relating to products and/or services offered by selected third parties companies, for offers, promotions and commercial opportunities. The personal data being processed for this purpose are: first name, last name, e-mail address and IP address.

b) Communication of data to third parties for marketing purpose: in order to consent to the User to receive advertising and promotional communications (receiving advertising material, direct sale, commercial communication) or to being contacted by selected third parties companies, listed below, by means electronic mail, for proposals relating to products and/or services offered by selected third parties companies, for offers, promotions and commercial opportunities. The personal data being processed for this purpose are: first name, last name, e-mail address and IP address. Selected third party companies include:
- We Breathe Media. https://webreathemedia.com/privacy-policy with Client Portfolio https://webreathemedia.com/client-list
- MDeg Limited. https://mdeg.co.uk/privacy-policy/
- Pharmacy2U. https://www.pharmacy2u.co.uk/privacy.html
- Honest Quotes. https://honestquotes.co.uk/privacy-policy/
- Kumon. https://www.kumon.co.uk/privacy-policy/
- Sun Bingo. https://www.sunbingo.co.uk/privacy-policy
- Sun Vegas. https://www.thesunvegas.co.uk/privacy-policy
- Doddle. https://itsadoddle.co.uk/privacy-policy/
- National Injury Claimline Ltd (T/A: The Compensation Experts, Should I Claim Compensation, Time To Claim, The Medical Negligence Experts.). https://the-compensation-experts.co.uk/privacy-policy. https://the-medical-negligence-experts.co.uk/privacy-policy/
- Fabulous Bingo. https://www.fabulousbingo.co.uk/privacy-policy
- Fabulous Vegas. https://www.fabulousvegas.co.uk/privacy-policy
- Accell Digital Limited (t/a Compensation Gurus). https://www.accelldigital.co.uk/privacypolicy
- Neilson Financial Services Limited (t/a British Seniors Insurance Agency). https://www.britishseniors.co.uk/privacy-policy/
- Neilson Financial Services Limited (t/a Smart Insurance). https://www.smartinsurance.co.uk/privacy-policy-cookies/
- Neilson Financial Services Limited (t/a Cover Today). https://www.smartinsurance.co.uk/privacy-policy-cookies/
- Neilson Financial Services Limited (t/a OverFifties.co.uk). https://www.overfifties.co.uk/privacy-policy-cookies/
- BV Gaming Limited (trading as “BetVictor”). https://www.betvictor.com/en-gb/pages/privacy-notice
- Heart Bingo. https://www.heartbingo.co.uk/en-gb/pages/privacy-notice
- NiftyFifty. https://nifty-fifty.co.uk/privacy.html
- Magnet Kitchens. https://www.magnet.co.uk/privacy-notice
- Shutterly Fabulous Retail Ltd. Channel: Email. https://www.shutterlyfabulous.com/privacy-policy/
- My Car Loan Claims. Channel: Email. https://mycarloanclaims.co.uk/en/privacy
- Vintage Cash Cow. https://www.vintagecashcow.co.uk/privacy-policy
- Harrington Jones Ltd trading as Mandy’s Tips. https://mandystips.com/privacy-policy
- Harrington Jones Limited is Authorised and regulated by the Financial Conduct Authority in respect of regulated Claims Management Activity FRN: 834856. https://mandystips.com/privacy-policy
- Blue Panda Finance Ltd. https://bluepandafinance.co.uk/privacy-policy/
- MR Consumer Services Limited (trading as Redwood Claims), an FCA-authorised claims management company. https://apply.mis-soldexpert.co.uk/privacy-policy/
- Verisure Services (UK) Ltd. https://www.verisure.co.uk/privacy-notice
- Bamboo Marketing NW Ltd trading as Claim Hidden PCP https://claimhiddenpcp.co.uk/
- Post Office Management Services Limited https://www.postoffice.co.uk/privacy
- Monetise Media Limited https://monetise.co.uk/client-list/
- dealhelper.co.uk is a trading name of Impact Growth Marketing Ltd, a lead generation company registered in England and Wales (Company No. 10111420.), with its registered office at 59 Gloucester Road, Exeter, EX4 2EE. It is registered with the Information Commissioners Office under registration number ZA411012.

c) legal obligations, or in order to fulfil obligations provided by the law or the Applicable laws and regulations.
Providing the personal data for the processing purposes specified above is optional but necessary, since failing to provide the same imply the impossibility for the User to take advantage of the services offered by the Controller through the Website.

The User may revoke the consent given at any time whatsoever upon request to the Controller following the methods specified under the following paragraph 4. The User may also easily oppose to the sending of further marketing communications (by e-mail) also clicking on the specific opt-out link for revoking the consent, which is included in each marketing e-mail.

The Controller hereby informs that, following the exercise of the right to object to the sending of marketing communications, it could be possible due to technical issues (i.e. sending list already completed a little before the receipt by the Controller of the objection request) the relevant User continues receiving further marketing messages. In the event that the User continues receiving marketing messages once elapsed 24 hours from the exercise of the objection right, please flag such issue to the Controller, using the contacts specified under the following paragraph 4.

2. Processing methods and data retention

The Controller will carry out the processing of Users’ personal data by manual and IT instruments, applying logics strictly connected to the purposes and, in any case, so that the security and confidentiality of the relevant data is guaranteed (i.e. by taking measures such as pseudonymisation and encryption). Users’ personal data may be transferred outside of the UK or EU but the Controller has affirmation that those companies have taken equivalent security measures that adhere to the Applicable Laws.

Users’ personal data will be retained for the time strictly necessary to carry out the relevant purposes described in the previous paragraph 1, and in any case for the time necessary for the protection of the civil interests of the Users and of the Controller.

3. Data disclosure and dissemination

Controller’s employees and/or workers appointed to manage personal data may become aware of any Users’ personal data. Such subjects, who are formally appointed by the Controller as persons in charge for the processing, will process the relevant User’s data exclusively for the purposes specified under this policy and in compliance with the provisions of the Applicable Law.

Furthermore, other companies which may process personal data for the account of the Controller may become aware of any Users’ personal data in their capacity as “data processor”, such as, including, but not limited to, providers entrusted with the sending of marketing e-mails for the account of the Controller, outsourcing or cloud computing services providers, professionals and advisors.

Data Processors are as well: