Privacy and cookies

This Privacy Notice details how the Association of the Petroleum Industry of Kurdistan (“APIKUR”, “we”, “us”, “our”) uses the personal data that you provide when using our website and how we use cookies on our website. APIKUR is a company limited by guarantee, which is registered in England and Wales under company number 14638733. APIKUR’s registered office is at 1 Park Row, Leeds, LS1 5AB.

We are committed to safeguarding your personal data in line with all applicable laws including the UK Data Protection Act 2018 and UK GDPR. We encourage you to read the remainder of this Privacy Notice to understand how we process your personal data.

Collecting and using personal data

We will only use your personal data when the law allows us to. The law requires us to have a legal basis for processing your data. Our legal basis for processing your personal data will be either:

Where it is necessary in our legitimate interests (or those of a third party). When using your personal data in this way, we will consider any potential impact on you (both positive and negative). We do not use your personal data for activities where our interests are overridden by the impact on you; or
Where we need to comply with a legal or regulatory obligation that we are subject to.

If you choose to get in touch with us via contact, we will collect the information you choose to provide within your email (email address, name and any other information you deem relevant). We will use that information to respond to your email. It is in our legitimate interests to process your personal data in this way.

We may also collect information about how you use our website. We may need to collect this personal data to improve, administer or protect our website (including through troubleshooting, data analysis, system maintenance, testing) or to understand how our website is used. This is necessary in our legitimate interests and may be necessary to comply with applicable laws.

We may process your personal data to comply with laws, to respond to requests from the government, regulators and other third parties with legal authority, or to investigate, detect and prevent fraud or crime. This is necessary to comply with our legal obligations.

Finally, we may process your personal data to exercise or defend legal claims. This is in our (or a third party’s) legitimate interests.

Sharing your personal data

In order to achieve the purposes set out above, we may disclose your personal data to:

our members;
our professional advisors;
other third party suppliers, business partners and sub-contractors for business administration, support, processing, services, or IT purposes;
analytics or search engines that enable us to optimise and improve your website experience;
third parties that you approve (including without limitation, social media sites);
our regulators, law enforcement or fraud prevention agencies, as well as our legal advisers, courts, the police and any other authorised bodies, for the purposes of investigating any actual or suspected criminal activity or other regulatory or legal matters; and
HMRC or other tax bodies or agencies to comply with our legal and regulatory obligations.

Protecting your personal information and data retention

Data security is extremely important to us and we have put in place appropriate security measures to protect your personal data. Even though we take these steps, the use of the internet is not entirely secure and so we cannot guarantee the security or integrity of any personal data which is transferred via the internet.

We retain your personal data for as long as is necessary for the purposes for which it was collected. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means.

Third party website links

We may direct you to third party websites from content within our site. Linked sites will have their own privacy notices, policies and use of cookies which we suggest you review in order to understand their procedures for collecting, using and disclosing personal information.

Please note, we are not responsible for the content of linked websites, any use of these sites, or the privacy practices of these websites.

Children

Whilst this site does not contain explicit or sensitive content, it is not intended for children under the age of 13. We do not knowingly collect personal information from or about any person under the age of 13. If you are under 13 years old and wish to contact us, please get your parent or guardian to do so on your behalf.

International transfers of your personal data

We may transfer your personal data to countries outside the United Kingdom. The laws in these countries may not offer the same level of protection for personal data as in the United Kingdom.

If we transfer your personal data to countries outside of the United Kingdom, we will do so in a lawful way and may rely on:

an adequacy decision from the Secretary of State, which says that the recipient country provides an adequate level of protection of personal data;
appropriate safeguards to protect the personal data (for example, the approved standard contractual clauses or international data transfer agreement); or
a lawful exception to the rules relating to overseas data transfers (for example, the transfer is necessary to perform a contract with you, which is in your interests).

Cookies

A cookie is a small text file that is stored on your computer or mobile device when you visit a website – we use these to make a user's experience more efficient.

The law states that we can store cookies on your device if they are strictly necessary for the operation of the site. For all other types of cookies we need your permission.

On this website we use persistent cookies (necessary for the functioning of the site) and performance cookies (to enable Google Analytics to analyse how users interact with our site). For more information about Google's privacy policy in respect of Google Analytics, please refer to http://www.google.com/analytics/learn/privacy.html

Details of the cookies used on our website are provided below:

Persistent or Necessary (1 cookie)

Name	Provider	Purpose	Expiry	Type
smConsent	apikur.uk	Stores the user's cookie consent state for the current domain	1 year	HTTP Cookie

Performance (3 cookies)

Name	Provider	Purpose	Expiry	Type
_ga	apikur.uk	Registers a unique ID that is used to generate statistical data on how the visitor uses the website.	2 years	HTTP Cookie
_gat	apikur.uk	Used by Google Analytics to throttle request rate	Session	HTTP Cookie
_gid	apikur.uk	Registers a unique ID that is used to generate statistical data on how the visitor uses the website.	Session	HTTP Cookie

Your consent to the use of cookies applies to www.apikur.uk.

You can view and change your cookie settings at any time.

We sometimes embed photos and video content from websites such as Flickr, Instagram, Twitter, Vimeo, and YouTube. Pages with this embedded content may present cookies from these websites.

Similarly, when you use one of the share buttons on this website, a cookie may be set by the service you have chosen to share content through. We do not control the dissemination of these cookies and we will not block cookies from those websites. You should check the relevant third party website for more information about these.

Do Not Track (DNT) browser setting

DNT is a feature offered by some browsers which, when enabled, sends a signal to websites to request that your browsing is not tracked, such as by third party advertising networks, social networks and analytics companies.

This website does not currently respond to DNT requests, however, you may opt-out of tracking on this website, including analytics, by following the instructions to opt-out of cookies above.

A uniform standard has not yet been adopted to determine how DNT requests should be interpreted and what actions should be taken by websites and third parties.

We will continue to review DNT and other new technologies and may adopt a DNT standard in the future.

Your rights

You have certain rights in relation to your personal data. We have summarised these rights below:

Right	Description
To be informed	A right to be informed about the personal data we hold about you.
Of access	A right to access the personal data we hold about you.
To rectification	A right to require us to rectify any inaccurate personal data we hold about you.
To erasure	A right to ask us to delete the personal data we hold about you. This right will only apply where (for example): we no longer need to use the personal data to achieve the purpose we collected it for; where you withdraw your consent if we are using your personal data based on your consent; or where you object to the way we process your data (see the right to object described below).
To restrict processing	In certain circumstances, a right to restrict our processing of the personal data we hold about you. This right will only apply where (for example): you dispute the accuracy of the personal data held by us; where you would have the right to ask us to delete the personal data but would prefer that our processing is restricted instead; or where we no longer need to use the personal data to achieve the purpose we collected it for, but you need the data for the purposes of establishing, exercising or defending legal claims.
To data portability	In certain circumstances, a right to receive the personal data you have given us, in a structured, commonly used and machine readable format. You also have the right to require us to transfer this personal data to another organisation, at your request.
To object	A right to object to our processing of the personal data we hold about you where our lawful basis is for the purpose of our legitimate interests, unless we are able to demonstrate, on balance, legitimate grounds for continuing to process the personal data which override your rights or which are for the establishment, exercise or defence of legal claims.
In relation to automated decision-making and profiling	A right for you not to be subject to a decision based solely on an automated process, including profiling, which produces legal effects concerning you or similarly significantly affect you.
To withdraw	A right to withdraw your consent, where we are relying on it to use your personal data (for example, to provide you with brochures and newsletters).
To complain	You have the right to make a complaint to our supervisory authority, which is the UK's Information Commissioner's Office.

Contacting us

If you have any questions specifically about this Privacy notice or our privacy practices please email us or write to us at:

Changes to this Privacy notice