The GDPR Regulations come into effect on the 25th May 2018. This applies to personal data processing carried out by organisations operating within the EU (European Union) and organisations outside of the EU that offer goods or services to individuals within the EU. The GDPR creates some new rights for individuals and strengthens some of the original rights that currently exist under the Data Protection Act 1998. This Policy explains what personal information we have, how we use it and how you can check and update your personal details.
Why does Quality Hydraulics collect your personal information?
The information we collect is only used to process your order, manage your account, fulfil a contractual obligation or contact you regarding your specific request.
What type of information do we hold?
- Contact telephone numbers
- E-mail address
Where do we get our information from?
Quality Hydraulics Limited collect information in the following ways:
- Write to us
- Telephone us
- E-mail us
- Complete and submit any “Contact Us” form from our website etc.
We may also collect information from publicly available sources if we need to conduct any checks. We never attempt to discover the identity of visitors to the company website.
How do we use the information?
In particular this means using your information in the following ways to:
- Respond to enquiries
- Provide Information
- Request Information
- Receive Orders
- Set up Contracts
- Complete works
- Raise Invoices
- Pay invoices
- Receive monies owing to the Company
How do we share information?
- To comply with legal & regulatory obligations
- Undertake legitimate business functions
Why do we retain Information?
We keep your information whilst you remain a customer for a period of time after that status ceases. The periods of time that the information will be retained will vary depending on the type and purpose. For example:
- Accounting Information is required to be maintained to meet governing responsibilities
How to check and update your data.
Requests should be made in writing and dated. We should respond to you within 40 days, but this may extend depending on the complexity of the information requested. We may also send out an email requesting you update your information online in order that we comply with the GDPR section to ensure the data we hold is up to date. This will request that you submit contact details and let us know which methods of contact you allow us to use when communicating with you.
As part of our process for marketing, we collect personal information in order to keep you informed of our products and information you have asked us to tell you about; to contact you if we need to provide additional information; to check that our records are correct and to confirm, occasionally, that you are happy and satisfied.
Visitors to our Website
We do not attempt to discover the identities of visitors to our website. The only personally identifiable data we collect is that submitted through completing our “contact us” form. That data is only retained for the purposes of dealing with the enquiry. Please note that our website and other digital platforms may contain links to third party websites / digital platforms which are provided for your convenience. We are only responsible for the privacy practices and security of our own digital platforms. We recommend that you check the privacy and security policies and procedures of each and every other website / digital platform that you visit.
We employ security measures to protect the personal information you provide to us, to prevent access by unauthorised persons and unlawful processing, accidental loss, destruction and damage. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do everything possible to protect your personal information, we cannot guarantee the security of any personal information during its transmission to us online. You accept the inherent security implications of using the internet and will not hold us responsible for any breach of security unless we are at fault. Any emails sent to Quality Hydraulics Limited, including attachments, may be monitored and blocked. It is the senders’ responsibility to ensure any emails that are sent to us are within the boundaries of the law.
The GDPR provides the following rights for individuals:
- The right to be informed
- The right to access
- The right to object
- The right to erasure
- The right to rectification
- The right to data portability
- Rights in relation to automated decision making and profiling
Right to be Informed
What information must be supplied?
The GDPR sets out the information that we should supply and when individuals should be informed. Much of the information Quality Hydraulics Limited should supply is consistent with our current obligations under the Data Protection Act, but there is some further information we are explicitly required to provide. The information we supply about the processing of personal data must be:
- Concise – Transparent – Intelligible and easily accessible;
- Written in clear and plain language and
- Free of Charge except for a reasonable administration fee.