This Privacy Notice sets out how GEVOREST MANUFACTURING LTD (the “Company”), as a data controller, processes data of persons, prospect clients requesting for a proposal for our products, issuing invoices and delivery of products. Where the data held are on individuals, this document also sets out the rights of those individuals in respect of that personal data. This Privacy Notice has been prepared in accordance with the provisions of the EU General Data Protection Regulation (“GDPR”).
Our Company strives to protect personal data and apply high standards of conduct when it comes to privacy issues. We ensure that we provide our employees and staff with the appropriate training in order to handle personal data promptly and in accordance with the laws. Furthermore, we endeavor to ensure that any parties with whom we co-operate apply the same high standards when it comes to data protection and privacy as we do.
What data do we hold?
The Company processes data in the context of mainly for preparing a proposal based on the requested services or issuing invoices. The categories of data we may collect and process, according to the particulars of each case, include: Contact details (including full name, email addresses and telephone, delivery address);
Purpose of the Collection
We collect your personal data mainly for the purposes of performance of contract, invoicing and delivery of products. We do not collect, and we do not use any personal data other than that specifically mentioned above without your explicit consent unless you ask us to do so. You do not have an obligation to provide us with your personal data, but if you don’t, we will not be able to provide you with our services. We don’t use automated decision-making processes or profiling while processing your personal data.
Why do we need them?
The Company ensures that the data collected and processed is relevant to one or more processing activities and that the Company does not collect or process more or less data than what is reasonably required for achieving the purpose of each processing activity. Furthermore, for each purpose of processing there is always at least one lawful basis to secure that the rights of individuals are safeguarded by all means. The purposes of processing and the lawful basis of each processing activity are the following: To carry out our obligations as a result of any contract entered into between you and us and to provide you with the information and services that you request from us. Any other purpose(s) which has been agreed by or notified to you. For further information on the use and storage of your data, please contact us at email@example.com
Sources and Recipients of data
The following is a list of potential recipients of data (in each case including respective employees, directors and officers): employees of the Company, any sub-contractors, agents or service providers of the Company, law enforcement agencies where considered necessary for the Company to fulfil legal obligations applicable to it, any registrar of a public register where the data is to be included in a public registry.
Rights of Data subjects
Any such data subject wishing to exercise any rights under applicable data protection laws (including the right to withdraw any consent to processing previously given; the right of access to data; or to have data corrected, updated, rectified or erased; or for access to data to be restricted or provided to any third party; or to object to any particular processing; or to lodge a complaint with the relevant supervisory authority; or the right o data portability) should send the request in the first instance to firstname.lastname@example.org
In response to such requests, the Company reserves the right to require the individual making the request to provide certain details about himself/herself so that the Company can validate that the individual is indeed the person whom the data refers to. The Company is required to respond to the request of the individual within 40 days and it will endeavour to do so wherever possible.
In any case in which a data subject chooses not to provide any personal data, or where any of the rights set out above are exercised to limit the processing of personal data, the Company may be unable to provide relevant services, or there may be restrictions on the services which can be provided.
Retention of data
The Company retains personal data in accordance with the Data Retention Policy. Any personal data provided to the Company is kept for as long as it is necessary to fulfil the purposes for which the data was collected. After the fulfilment of the purposes for which the personal data was collected, such data will be destroyed, unless destruction is prohibited for legal, regulatory or technical reasons.
Any requests for further information in relation to the continued processing of specific data and requests for destruction of data should be made to info@ gevorest.com. For more details relating to the retention and destruction processes of the Company, please contact email@example.com
This Privacy Notice was last updated on 18 May 2021.