GDPR: DATA PRIVACY NOTICE FOR CLIENTS AND SUPPLIERS
C Webster & Sons Ltd. is committed to protecting and respecting your privacy.
The rules on processing of personal data are set out in the General Data Protection Regulation (the “GDPR”).
Data controller – A controller determines the purposes and means of processing personal data.
Data processor – A processor is responsible for processing personal data on behalf of a controller.
Data subject – Natural person
Categories of data: Personal data and special categories of personal data
Personal data – The GDPR applies to ‘personal data’ meaning any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier (as explained in Article 6 of GDPR). For example name, passport number, home address or private email address. Online identifiers include IP addresses and cookies.
Special categories personal data – The GDPR refers to sensitive personal data as ‘special categories of personal data’ (as explained in Article 9 of GDPR). The special categories specifically include genetic data, and biometric data where processed to uniquely identify an individual. Other examples include racial and ethnic origin, sexual orientation, health data, trade union membership, political opinions, religious or philosophical beliefs.
Processing – means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Third party – means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
- Who are we?
C Webster & Sons Ltd. is the data controller. This means we decide how your personal data is processed and for what purposes. Our contact details are:firstname.lastname@example.org For all data matters contact Michael Webster, C Webster & Sons Ltd, Units 8 & 9 Brownsburn Industrial Estate, AIRDRIE, ML6 9SE. Tel.01236760666 or email@example.com
- The purpose(s) of processing your personal data
We use your personal data for the following purposes:
Since we want our customers to feel safe, we also use the collected information to detect, investigate and prevent fraud and other illegal activities. We use your information to maintain our own accounts and records so that we can service your account. In addition, we use the information to provide you with special offers and information about products that might be of interest to you and so you can access and fully use our website.
- The categories of personal data concerned
With reference to the categories of personal data described in the definitions section, we process the following categories of your data:
When you sign up for an user account at the Website, we ask you for personal information, such as first and family name, address, country of residence, email address, telephone number. In addition, you are requested to choose a username and a password for your user account. When working with us you might also supply us with bank and credit card details
When you communicate with us, for example by sending e-mails, we retain such communication in order to process your enquiries, respond to your requests and to improve our services.
In addition, we collect information, such as your IP-address, browser type and version, operating system and platform, automatically whenever you interact with us. On the Website, we use so called “cookies” and we collect the before mentioned information whenever your web browser accesses the Website. Cookies are some kind of data which we transfer to your computer’s hard drive through your web browser in order to help us to recognize you when you access the Website, to remember your settings and to personalize the Website according to your needs. You may disable cookies in the settings of your web browser but please be aware that you may not use all of the services of the Website if cookies are disabled.
- What is our legal basis for processing your personal data?
- Personal data (article 6 of GDPR)
Our lawful basis for processing your general personal data:
|☐ Consent of the data subject;||See appendix for consent form|
|☐ Processing necessary for the performance of a contract with the data subject or to take steps to enter into a contract||not applicable|
|☐ Processing necessary for compliance with a legal obligation|| |
|☐ Processing necessary to protect the vital interests of a data subject or another person|
|☐ Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller|
|☐ Processing necessary for the purposes of the legitimate interests of the data controller or a third party, except where such interests are overridden by the interests or fundamental rights or freedoms of the data subject|| |
- Sharing your personal data
Protecting your personal information is really important to us and we want you to be certain that your personal information is in good hands. We share your information only as described below and with third parties that follow the applicable data protection laws and that ensure an adequate level of protection with respect to your personal information. We will share your personal information with our:sister company R V Astley, our delivery companies and our accountants who are legally obliged to comply with applicable data protection laws and your personal information will therefore be properly protected at all times.
Some of your information will be stored on a server provided by a third party, currently on a server of. We have chosen this third party provider based on our best knowledge and we might change the third party provider from time to time, especially if we are of the opinion that your personal information is no longer protected accordingly. Such third party provider is always endeavoring to provide for a high security standard. However, we cannot take responsibility for this third party provider’s actions
We will release personal information in case we are required by law, for enforcing our General Terms and Conditions and other agreements and in case of detection, investigation and prevention of fraud and other illegal activities.
In all other cases, we share your personal information with third parties only if we have your explicit consent. You will have the opportunity to choose not to share any personal information with any third party. If and when we transfer your personal information to a third party domiciled outside, we will ensure that your personal information is protected by adequate safeguards.
- How long do we keep your personal data?
We retain your personal information only for as long as we have a legitimate business purpose or for as long as we are required by law [legal claims/ warranties]. After this period [normally 3 years], we will delete all of your personal information
- Providing us with your personal data
You can contact us anytime and request that we inform you about all personal information that we have collected and stored about you. In addition, you may request that we correct, amend or delete such personal information. Please note, that if you request us to delete your personal information, we will no longer be able to provide you with our internet services.
- Your rights and your personal data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
- The right to request a copy of the personal data which we hold about you;
- The right to request that we correct any personal data if it is found to be inaccurate or out of date;
- The right to request your personal data is erased where it is no longer necessary to retain such data;
- [The right to withdraw your consent to the processing at any time, WHERE CONSENT WAS YOUR LAWFUL BASIS FOR PROCESSING THE DATA];
- The right to request that we provide you with your personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability), (where applicable i.e. where the processing is based on consent or is necessary for the performance of a contract with the data subject and where the data controller processes the data by automated means);
- The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
- The right to object to the processing of personal data, (where applicable i.e. where processing is based on legitimate interests (or the performance of a task in the public interest/exercise of official authority); direct marketing and processing for the purposes of scientific/historical research and statistics).
- Transfer of Data Abroad
we do not transfer personal data outside the eea.
- Automated Decision Making
[WE DO NOT USE ANY FORM OF AUTOMATED DECISION MAKING IN OUR BUSINESS.]
- Further processing
If we wish to use your personal data for a new purpose, not covered by this Data Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions.
- How to make a complaint
To exercise all relevant rights, queries or complaints please in the first instance contact Michael Webster on firstname.lastname@example.org or 01236760666
If this does not resolve your complaint to your satisfaction, you have the right to lodge a complaint with the Information Commissioners Office on 03031231113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, England.
Contact C Webster & Sons
Can’t find what you are looking for or have a non-urgent enquiry?
Please use this form to contact us, alternatively please call us on 01236 760585