Privacy Statement
This privacy statement sets out what you can expect from Cefas when we process your personal information.
What data do we collect?
The information that we collect from you includes:
· Name
· Organisation & Role
· Business/Delivery/Invoice Address
· Phone number(s)
· Email address(es)
· Any purchase orders/invoices
· Any documentation linked to your previous orders
Why are we processing your personal data?
Your personal data is used for the purpose of sales activities, linked to enquiries which you make, or have made with us. Your personal information is necessary for us to make contact pre-sale, and to support you during and after any order made with us.
We do not collect or process personal data which is not collected directly from you.
What is the legal basis for processing your personal data?
The General Data Protection Regulation (GDPR) Article 6 legal basis for processing your data is for one of the following purposes:
· LEGITIMATE INTERESTS
Data is collected and used in a way which you as a customer would expect, and where there is a compelling justification for the processing. For example, should you make an enquiry with us regarding our products or product-related services, we will record your contact details for the purpose of maintaining a channel of communication throughout your enquiry.
Your contact details are important in the issuing of formal quotations, as well as for email/telephone communications related to your enquiry.
Your contact details are also then used to follow-up on orders which Cefas Technology Limited deliver, checking on product performance against specification and customer expectations.
· LEGAL OBLIGATION
In the event that Cefas are audited, formal quotes may be requested as a means of proving sale price. If this is the case, quote documents are shared with auditors solely for the purpose of the audit, and your personal details are not used in any way by this third party.
Who will we share your personal data with?
Your personal data will not be shared outside of these organisations. Only staff directly involved with the sales, marketing, manufacturing, and development of products will have access to this information.
Will your data be processed in a country outside of the United Kingdom or European Economic Area (EEA)?
Your information will not be shared, transferred, or processed outside of the EEA.
Will your data be processed using automated decision making or profiling?
Your information will not be processed using automated decision making or profiling.
How long will we keep your data for?
We will retain your data for a period of five years, for the purpose of continued after-sale support, as well as to notify you of upcoming product developments/sales/price changes which are relevant to your initial enquiry and which we feel would be of interest to you.
What are the consequences if I do not supply the requested data?
If you do not supply the requested personal data, it is more than likely that we will not be able to provide the service you wish to use or are applying for.
What are my rights to my personal data?
Your rights and our commitments to your personal data are described on the ICO website.
CONTRACT
Where processing of your personal data is necessary for entry into or performance of a contract, you have the right to:
· Be Informed when we are processing your information
· To access and request a copy of the information we hold about you
· To correct inaccurate or complete incomplete personal data we hold about you
· Be forgotten, and request for us to erase your personal data
· To request that we restrict how widely we process your personal data
· To request we send your structured personal data to another controller
· To request human intervention where automated decision making or profiling
LEGAL OBLIGATION
Where processing of your personal data is necessary for us to comply with a legal obligation, you have the right to:
· Be Informed when we are processing your information
· To access and request a copy of the information we hold about you
· To correct inaccurate or complete incomplete personal data we hold about you
· To request that we restrict how widely we process your personal data
· To request human intervention where automated decision making or profiling
LEGITIMATE INTEREST
Where we are processing your data for a legitimate interest, you have the right to:
· Be Informed when we are processing your information
· To access and request a copy of the information we hold about you
· To correct inaccurate or complete incomplete personal data we hold about you
· Be forgotten, and request for us to erase your personal data
· To request that we restrict how widely we process your personal data
· To object to the processing of your personal data
· To request human intervention where automated decision making or profiling is being used
How to get in contact
For day-to-day use, please look to contact the team you are already communicating with. They are best placed to manage general enquiries or to update the accuracy of your data or provide you with information.
Complaints
If you are unhappy with the service you have received in relation to your request and wish to make a complaint, please contact us via info@cefastechnology.co.uk or alternatively write to us at the address below. We will then arrange for an internal review of your case.
Cefas
Pakefield Road
Lowestoft
Suffolk
NR33 OHT
If you are not content with the outcome of the internal review, you have the right to apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
0303 123 1113
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts. Should you wish to exercise that right full details are available on the Information Commissioner’s website.