Last Modified: December 27, 2022
This section of the Privacy Notice applies if you are in the United Kingdom or a country that is a Member of the European Union or European Economic Area, and supplements the information in the Privacy Notice.
NYP Holdings, Inc., the owner and operator of nypost.com and pagesix.com, is the data controller for the processing of your personal data as defined under the GDPR.
LEGAL BASIS FOR DATA PROCESSING
In addition to the purposes for which we collect and process your personal data as set out in the Privacy Notice, we do so under the following legal bases:
To provide our Services to you, we process your personal data for certain purposes with your consent; for example, to select personalized ads. Please see the section of this notice titled THIRD PARTY ONLINE ADVERTISING below. Where you have given consent for processing activities, you have the right to withdraw your consent at any time.
We sometimes use your personal data on the grounds that there is a legitimate reason to do so. For example, we may use your data where it would help achieve our business objectives or to facilitate a benefit to you. We only rely on legitimate interests if the reason for using your information is fair and lawful. We will carry out a balancing test between our legitimate interests and your privacy rights where we want to rely on legitimate interest as a legal basis. Our legitimate interests in processing personal data include:
UK/EU/EEA DATA SUBJECT RIGHTS
As UK/EU/EEA data subjects, you have rights of access, correction or rectification, and deletion, as well as certain additional rights. Below is an overview of your rights, many of which are subject to exceptions under applicable law. You can exercise any of your rights at any point in time by sending an email to [email protected] or submitting a request through the following link: Submit a Request
The right to access and rectification or correction. You may have the right to access, correct and update your personal data at any time.
The right to deletion. Under certain circumstances, you may have the right to request that we delete your data. If you wish to delete the personal data we hold about you, please let us know and we will take reasonable steps to respond to your request in accordance with applicable legal requirements. If the personal data is no longer needed for any purposes that justify its retention and we are no required by law to retain it, we will do what we can to delete, destroy or permanently de-identify it. Certain data may be exempt from such requests under applicable law. We may need certain types of data so that we can provide our Services to you. If you ask us to delete it, you may no longer be able to access or use our Services.
The right to object to or restrict processing. Under certain circumstances, you have the right to object to or restrict our processing of your personal data. For example, where we process personal data based on our legitimate interests, you may object to this. We will need to carefully consider your request, as there may be circumstances which require us, or allow us, to continue processing your data.
The right to withdraw consent. If you have given your consent to anything we do with your personal data and we rely on your consent as a legal basis for processing your personal data, you have the right to withdraw your consent to the processing of your personal data at any time by contacting us at Manage Choices. This will not affect the lawfulness of the processing based on your consent before its withdrawal.
The right to lodge a complaint with a Supervisory Authority. You have the right to lodge a complaint directly with the relevant Supervisory Authority about how we process your personal data.
The right to data portability. With respect to the personal data you have provided to us, in addition to the general right of access described above, you may have, subject to certain exceptions, rights to (i) receive a copy of it in a structured, commonly used and machine-readable format, (ii) transmit the data to another data controller, and (iii) depending on the circumstances, have us perform that transmission.
RETENTION OF PERSONAL DATA
We will keep your personal data for as long as we need it to fulfill the purposes set out in our Privacy Notice, or while there is a legitimate reason for doing so, and as otherwise required or permitted by applicable law, such as in relation to our record retention obligations.
We review the personal data we hold and delete it securely, or in some cases anonymize it, when there is no longer a legal, business or consumer need for it to be retained.
INTERNATIONAL DATA TRANSFERS
As the Services are hosted in the United States, the personal data of our UK/EU/EEA users is hosted in the United States, and we may further transfer such personal data to countries that may not have data protection rules that require the same level of protection as in the EU/EEA/UK; however, we will make sure that there are appropriate mechanisms and controls in place to protect your data. This may include data transfer agreements, a copy of which you can obtain by contacting us at [email protected]. We may use these data transfer mechanisms – and not consent – as the legal basis for our own transfers of personal data (even when other aspects of our handling of personal data take place on the basis of consent).
THIRD PARTY ONLINE ADVERTISING
We enable certain third party advertising exchanges to place advertisements on our sites, as further described in our Cookie Notice. With your consent, we share data we collect about you by automated means with advertising exchanges so that they may use your IP address, a unique advertising ID, and/or other clickstream data to identify you across the internet. Please see our Cookie Notice for more information about managing cookies and other similar technologies using our consent management platform. If you wish to update your choices, please click here.
The European Digital Advertising Alliance (“EDAA”) has developed a guide to online behavioral advertising and has developed an opt-out page to manage online behavioral advertising preferences with EDAA member companies available at
www.YourOnlineChoices.eu. In addition, we participate in the IAB Europe Transparency & Consent Framework and comply with its specification and policies. We use a consent management platform with the identification number 28.
CONTACT US
If you have any data protection inquiries, you may contact our Data Protection Officer at:
or the New York Post Article 27 Representative at:
Data Protection Office
Legal & Compliance
News UK & Ireland Limited
1 London Bridge Street
London, SE1 9GF
United Kingdom
[email protected]
For all UK/EU/EEA Data Subject Rights requests, Submit a Request.
Return to Privacy Notice