2. Name and Address of the controller
Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:
We may use the information we collect from you when you enquire for our service, register, make a purchase, respond to a survey or marketing communication:
Legal basis for the processing
Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which you are party- for example, when processing operations are necessary for the supply of goods or services- the processing is based on Article 6(1) lit. b GDPR. The same applies to processing operations that are necessary for carrying out pre-contractual measures, for example in the case of enquiries concerning our products or services.
If our company is subject to a legal obligation by which processing of personal data is required, such as for the fulfilment of tax obligations, the processing is based on Art. 6(1) lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect your vital interests or the interests of another person. This would be the case, for example, if a visitor were injured in our company and their name, age, or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1) lit. d GDPR.
Finally, processing operations could be based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator.
It is considered that if you are a client of ours, then a legitimate interest could be assumed (Recital 47 Sentence 2 GDPR).
Existence of automated decision-making
As a responsible company, we do not use automatic decision-making or profiling.
Data protection legislation is there for both your and our protection, and with this you have a number of rights which we will outline below:
Under the GDPR your rights are as follows:
- the right to be informed;
- the right of access;
- the right to rectification;
- the right to erasure;
- the right to restrict processing;
- the right to data portability;
- the right to object; and
- the right not to be subject to automated decision-making including profiling.
You also have the right to complain to the ICO [www.ico.org.uk] if you feel there is a problem with the way we are handling your data.
We handle subject access requests in accordance with the GDPR.
Email marketing messages & subscription
Where used, such marketing messages may record a range of data such as; times, dates, I.P addresses, opens, clicks, forwards, geographic and demographic data. Such data, within its limitations will show the activity each subscriber made for that email campaign.
If at any time you would like to unsubscribe from receiving future emails, you can email us firstname.lastname@example.org and we will promptly remove you from ALL correspondence.