November 2021 Privacy statement - Uncharted Waters Event Introduction This privacy statement describes why and how PricewaterhouseCoopers LLP (“PwC”, “we”, “us”, or “our”) collects and uses personal data in connection with the Uncharted Waters event (“Event”) for which you are registering , and provides information about your rights (“you”, “user” or “individual”). Personal data is any information relating to an identified or identifiable living person. This privacy statement applies to personal data provided to us, both by you or by others and any personal data created i n connection with your registration for, and attendance at, the E vent. We may use personal data provided to us for any of the purposes described in this privacy statement or as otherwise stated at the point of collection. When collecting and using personal data, our policy is to be transparent about why and how we process personal data. To find out more about our specific processing activities in connection with the E vent , please go to the relevant sections of this statement. The Event is being organised and run in association with Sainsbury’s. We will share your details with Sainsbury’s as co - sponsor of the report we have produced and the Event. This privacy statement is separate from the EventBrite and Slido privacy notices which explain how and why they use your personal data. C ontroller and contact information The controller is PricewaterhouseCoopers LLP (the limited partnership registered i n England under registration no. OC303525 and with its registration address at 1 Embankment Place, London, WC2N 6RH). Our contact details are: Data Protection Officer PricewaterhouseCoopers LLP 1 Embankment Place London WC2N 6RH Email: UK_privacy_information_management@pwc.com Collection of personal data We will collect personal data when you register for the E vent, including your name, contact details and email address. Use of personal data We use personal data you provide to us for the following purposes: ● To register and facilitate your attend ance at the E vent, whether in person at our Glasgow office or online at the livestream platform website (Slido) , ● In connection with the administration of the E vent, ● To contact you by email or other equivalent forms of electronic communication in order to send you a re cording of the E vent, and to send you additional communications related to the E vent and/or communications regarding updates, news, other events or general information, and ● To manage any requests you make to us. November 2021 Our lawful basis for this processing is for the purposes of the legitimate interests pursued by us in hosting and supporting the E vent. When and how we share personal data and locations of processing We will only share personal data with others when we are legally permitted to do so. When we share data with others, we put contractual and security measures in place to protect the data. In addition to Sainsbury’s, we also share personal data processed in connection with the E vent as follows: ● Third party organisations that provide services to us We are part of a global network of firms and in common with other professional service providers, we use third parties to help us run our business (including events) and these third parties may be located in other countries outside the UK and EEA. ● Auditors and other professional advisers where it is necessary to do so ● Law enforcement or other government and regulatory agencies or to other third pa rties as required by, and in accordance with, applicable law or regulation Occasionally, we may receive requests from third parties with authority to obtain disclosure of personal data, such as to check that we are complying with applicable law and regulat ion, to investigate an alleged crime, to establish, exercise or defend legal rights. We will only fulfil requests for personal data where we are permitted to do so in accordance with applicable law or regulation. Data retention We will retain and use p ersonal data to the extent it is necessary in connection with the E vent. Your rights and how to exercise them You have certain rights over your personal data. These are the right of access to personal data, to rectification of personal data, to erasure of personal data / right to be forgotten, to restrict processing of personal data, to object to processing of personal data, to data portability, the right to withdraw consent at any time (where processing is based on consent) and the right to lodg e a complaint with a supervisory authority. You may exercise any of these right by emailing us at UK_privacy_information _management@pwc.com Complaints We hope that you won’t ever need to, but if you do want to complain about our use of your personal data, please send an email with the details of your complaint to UK_privacy_information_management@pwc.com We will look into and respond to any complaints we receive. You also h ave the right to lodge a complaint with the Information Commissioner's Office (“ICO”), the UK data protection regulator/supervisory authority. For further information on your rights and how to complain to the ICO, please refer to the ICO website