Use of your Personal Data

This privacy notice lets you know what happens to any personal data that you give to us, or any that we may collect from or hold about you. We want to help you understand how we use your personal data, as well as we are required by law to inform you.

The AA Limited and our Data Protection Officer (DPO)

We are AA Limited. Our main address is Fanum House, Basing View, Basingstoke, Hampshire, RG21 4EA. This notice covers The AA Limited website. For The AA's consumer privacy notice, please visit Privacy notice | AA (theaa.com). The data controller for your information is The AA Limited. We have a Data Protection Officer who you can contact by using the contact details at the bottom of this notice.

1. What personal information do we hold about you?

To provide you analysts and investors with information about AA Limited, we collect several different types of information about you. Many of these we collect from you directly, but we also generate information about you whilst you visit our webpage.

Below we have set out for you the types of information we hold about you. In section 3 you find the information on how we use your information.

  • Name, contact details (e.g. email address),
  • Contact preferences and details of what you would like to be contacted about or mailing lists you have subscribed to; and
  • Web browser type, IP address, which pages you accessed on the site and when (for further information see Cookie Notice)
2. What do we use your information for? What is our basis for doing so?

The information we use is broadly used by us to provide you with information about our business. However, so you can understand this in more detail, we have included a more comprehensive list below. We have also arranged them according to the legal reason we are allowed to use the data, for example whether doing so is a contractual necessity or whether it is in our legitimate interests to use the data for that purpose.

  1. Contractual needs - To provide you with investor information we need to provide you with as part of any services you subscribe to.
  2. For our legitimate interests:
    1. To test the performance of our processes and systems;
    2. To improve the operation of our business - and that of our business partners – for example, by improving customer service and operational performance and efficiency;
    3. For management and auditing of our business operations - including accounting;
    4. To monitor and to keep records of our communications
    5. To facilitate the sale of one or more parts of our business;
    6. To share information with service partners as necessary for the purposes listed in this section (see above); and
    7. To enable other AA group companies to perform any of the above purposes.
  3. To comply with our legal obligations such as our financial services or regulatory obligations:
    1. To provide marketing information, announcements and related information;
    2. to provide regulatory updates.
  4. With your consent or explicit consent:
    1. For AA Limited email alerts which are not based on our legitimate interests.
3. When do we share your personal information with other organisations?

We engage a number of different organisations in order to provide you with investor information. For example, third party service providers to maintain our web page.

The categories of third parties we use are listed below. Generally, we will use these third parties for all of the reasons we have described in this notice.

  • Organisations and businesses who provide services to us under our authority such as service providers, IT companies, and suppliers of business support services;
  • Financial services and regulatory authorities;
  • Police and law enforcement agencies if we are required or need to support a criminal investigation;
4. Can you withdraw your consent?

Where we rely on your consent, you can withdraw it at any time by contacting us using the contact details in your investor documents or AA Limited website.

5. Is your personal information transferred outside the UK or the EEA?

We're based in the UK, but sometimes your personal information may be transferred outside the UK and European Economic Area, for example to service providers. If we do so, we'll make sure that suitable safeguards are in place where required, for example by using approved contractual agreements or other legal arrangements, unless certain exceptions apply.

6. What should you do if your personal data changes?

You should tell us so that we can update our records. The contact details for this purpose are The AA Limited documents we provided you or via your AA Limited website.

7. Do we carry out any monitoring involving processing of your personal information?

We may monitor communications with you, where permitted by law. We do this for quality control and staff training purposes, to comply with regulatory rules, to prevent or detect crime, to protect the security of our communications, data, and to enforce compliance with our internal policies.

8. Do we use automated decision making?

We do not perform any automated decision making.

9. For how long is your personal information retained by us?

Unless we explain otherwise to you, we'll hold your personal data based on the following criteria:

  • For as long as we provide investor information to you;
  • To comply with legal and regulatory requirements or guidance; and/or
  • For as long as we have reasonable business needs.
10. What are your rights under data protection laws?

Here is a list of the rights that all individuals have under data protection laws. They don't apply in all circumstances, so your request may not always be granted in part or in full. If you wish to use any of them, we'll explain at that time if you can engage the below rights or not.

  • The right to be informed about your processing of your personal information;
  • The right to have your personal information corrected if it is inaccurate and to have incomplete personal information completed;
  • The right to object to processing of your personal information;
  • The right to restrict processing of your personal information;
  • The right to have your personal information erased (the "right to be forgotten");
  • The right to request access to your personal information and to obtain information about how we process it; and
  • The right to move, copy or transfer your personal information ("data portability").

These rights are subject to certain exemptions to safeguard the public interest (e.g. the prevention or detection of crime) and our interests (e.g. the maintenance of legal privilege).

You have the right to complain to the Information Commissioner's Office which enforces data protection laws - https://ico.org.uk/. You can contact our DPO for more details on all the above.

11. You have a right to object

You have the right to object to certain purposes for processing, in particular to data processed for direct marketing purposes and to data processed for certain reasons based on our legitimate interests. You can contact us using the contact details in your investor documents or listed below to exercise these rights.

12. Are we going to market to you?

The AA Limited does not send any marketing communications.

13. Changes to this privacy notice

We may change this privacy notice from time to time to reflect changes in the law and/or our privacy practices. We encourage you to check this privacy notice for changes periodically – https://www.theaacorporate.com/site-services/privacy. If we make any major changes we will tell you about these.

14. Contact Us or our DPO

You can use the contact details in your investor documents or you can go to the Contact Us section of our website. Alternatively, you can write to AA Limited, Fanum House, Basing View, Basingstoke, Hampshire, RG21 4EA, marking it for the attention of the DPO or email [email protected].