PRIVACY NOTICE
This privacy notice aims to give you information on how ADBA and WBA as organisers of the World Biogas Expo, World Biogas Summit and AD and Biogas Industry Awards, collect and process your personal data when you sign up to become a delegate, sponsor, exhibitor or speaker.
ADBA and WBA, and their management agency We Are Orchard, are the data controllers and data processors of any personal data you supply as we process your event booking. We are committed to ensuring that your privacy is protected and assure you that any personal data given will be used in accordance with this privacy notice.
This privacy notice explains how we will look after your personal data when you sign up to our events and tells you about your privacy rights and how the law protects you.
Please also use the Glossary to understand the meaning of some of the terms used in this privacy notice.
1. IMPORTANT INFORMATION AND WHO WE ARE
Controllers
ADBA (ICO registration 18987787) and WBA (ICO registration 18836640) , and their managing agency We Are Orchard (ICO registration 18836018), are the controllers and responsible for your personal data (collectively referred to as “ADBA/WBA/WAO”, “we”, “us” or “our” in this privacy notice).
ADBA, WBA and We Are Orchard are companies registered in England and Wales and their registered office is at Sustainable Workspaces, Office CH5, 5th Floor, Riverside Building, County Hall, Westminster Bridge Road, London SE1EP7 United Kingdom. ADBA company number is 07015240 ; WBA company number is 10451565; We Are Orchard company number is 9169583 .
Contact details
If you have any questions about this privacy notice or our privacy practices, please contact the Data Protection Officer for all three companies at GDPR@weareorchard.com.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
Changes to the privacy notice and your duty to inform us of changes
We keep our privacy notice under regular review. This version was last updated on 13 January 2025.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us by emailing the person at ADBA or WBA responsible for that relationship (e.g. event producer, membership manager, sales officer…).
Third-party links
Our events websites might include links to third-party websites (e.g. sponsors, media partners and other event associates), plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our websites, we encourage you to read the privacy notice of every website you visit.
2. THE DATA WE COLLECT ABOUT YOU
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
- Identity Data includes first name, last name, business affiliation and job title.
- Contact Data includes billing address, delivery address, email address and telephone numbers.
- Financial Data includes bank account and payment card details.
- Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us (including other information relevant to your attendance at an event such as dietary and mobility requirements).
- Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website.
- Usage Data includes information about how you use our website, products, services and subscriptions.
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
3. HOW IS YOUR PERSONAL DATA COLLECTED?
We use different methods to collect data from and about you including through:
- Direct interactions. When you give us your Identity, Contact, Financial, Transaction, Marketing and Communications Data by filling in forms on our websites or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
- enter into a sponsorship agreement;
- enter into an exhibiting or speaking agreement;
- register to attend an event;
- request marketing to be sent to you;
- complete information request forms on our websites
- respond to a survey; or
- give us feedback or contact us
- Automated technologies or interactions. As you interact with our websites, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. Please see our cookie policy on our website.
- Technical Data from parties, such as analytics providers, such as Google based outside the UK.
4. HOW WE USE YOUR PERSONAL DATA
We will use your personal data in the following circumstances:
- Where we need to perform the contract we are about to enter or have entered with you.
- Where we need to comply with a legal obligation.
To find out more about the types of lawful basis that we will rely on to process your personal data please see section 9 below.
Purposes for which we will use your personal data
We have listed below all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
Based on the table below, the amount and types of personal data being processed will be different.
| Purpose | Type of data | Legal basis |
| To register you as a new customer | (a) Identity (b) Contact |
performance of a contract with you |
| To process and deliver your order including: (a) Manage payments, fees and charges (b) share information about your order (e.g. event programme updates) |
(a) Identity (b) Contact (c) Financial (d) Transaction (e) Marketing and communications |
(a) Performance of a contract with you (b) Necessary for our legitimate interests (e.g. debt recovery) |
| To manage our relationship with you: (a) Notifying you about changes to our terms or privacy notice (b) Dealing with your requests, complaints and queries (c) Asking you to leave a review or take a survey |
(a) Identity (b) Contact (c) Profile (d) Marketing and Communications |
(a) Performance of a contract with you (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests (to keep our records updated, manage our relationship with you and to collect customers feedback on our products and services. |
| To send you relevant marketing communications and make personalised suggestions and recommendations to you about goods or services that may be of interest to you | (a) Identity (b) Contact (c) Marketing and Communications |
Necessary for our legitimate interests (to carry out direct marketing, develop our products/services and grow our business) OR having obtained your prior consent to receiving direct marketing communications |
Marketing
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. We have established the following personal data control mechanisms:
Promotional offers from us
You will receive marketing communications from us if you have requested information from us or purchased services from us or joined us at an event (in-person or online) and you have not opted out of receiving that marketing.
Third-party marketing
We will provide an opportunity for you to opt-out before sending third party marketing communications to you via email. You have the right to change your marketing preferences at any time by contacting Hanan Berrouhou at hanan.berrouhou@adbioresources.org.
Opting out
You can ask us or third parties to stop sending you marketing messages at any time by contacting us at any time. All our marketing emails will contain an unsubscribe link which you can follow to opt out of further marketing (allowing for any short delay between your opt out and our marketing database being updated with your preferences).
Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a service purchase, service experience or other transactions.
Cookies
For more information about the cookies we use and how to change your cookie preferences, please see our cookies policy which can be found via a link at the bottom of this page.
Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us at GDPR@weareorchard.com
5. DISCLOSURES OF YOUR PERSONAL DATA
ADBA, WBA and We Are Orchard have controlled access to your information to enable us to provide you with services. We will not sell or rent your information to third parties. We will not share your information with third parties for them to market to you without your consent. However, we may pass your information to our third-party service providers, subcontractors and other associated organisations to provide services on our behalf (service providers acting as processors who provide, booking, processing, IT and system administration services). Please note when we use third parties, we disclose only the personal information that is necessary to deliver the service (such as email addresses), and we require them to keep your information secure and not to use it for their own direct marketing purposes.
We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
6. DATA SECURITY
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
7. DATA RETENTION
How long will you use my personal data for?
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
8. YOUR LEGAL RIGHTS
Under certain circumstances, you have rights under data protection laws in relation to your personal data.
You have the right to:
- Request access to your personal data (commonly known as a “subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
- Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
- Request erasure of your personal data in certain circumstances. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
- Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) as the legal basis for that particular use of your data (including carrying out profiling based on our legitimate interests). In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your right to object.
- You also have the absolute right to object any time to the processing of your personal data for direct marketing purposes (see the section above on Opting Out for details of how to object to receiving direct marketing communications).
- Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. This right is unlikely to be relevant in view of how we currently process your personal data.
- Withdraw consent at any time where we are relying on consent to process your personal data (see the table in section 4 for details of when we rely on your consent as the legal basis for using your data). However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
- Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in one of the following scenarios:
- If you want us to establish the data’s accuracy;
- Where our use of the data is unlawful, but you do not want us to erase it;
- Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
- You have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.
You can complain to the ICO at any time if you have any concerns about how we process your personal data or about our response to any rights request you make. The ICO details are Make a complaint | ICO or call 00 44 303 123 1113.
No fee usually required
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
What we may need from you
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Time limit to respond
We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made several requests. In this case, we will notify you and keep you updated.
9. GLOSSARY LAWFUL BASIS
Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us.
Performance of Contract (or preparation to perform a contract) means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering such a contract.
Comply with a legal obligation means processing your personal data where it is necessary for compliance with a legal obligation that we are subject to.
THIRD PARTIES
External Third Parties
Service providers acting as processors who provide, booking, processing, IT and system administration services.
Professional advisers acting as processors or joint controllers or independent controllers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.
HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers or independent controllers who require reporting of processing activities in certain circumstances.
