The website of Handtmann Ltd contains information that enables a quick electronic contact to our business, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored.
If you contact us through the Website then will assume that you implicitly consent to us keeping your details on record for the purposes of communicating with you, but we will only do so if:
The communication relates to the original communication sent by you
We, at a later date consider that further communication might be in your interest
You are already registered with us as a customer or associate of our for which we have a lawful reason for communicating with you
If you are a client of ours then we may be contractually obliged to store information relating to our business dealings.
There is no transfer of this personal data to third parties other than to ensure the communication reaches our mail server(s).
We may from time to time use third-party services like content management systems (CMS) such as WordPress, which is run by Automattic Inc. or Microsoft’s Azure services. We may use this and other services to help deliver, monitor and report on the effectiveness of the site and help us improve it.
https://www.handtmann.co.uk/ contains links to other websites.
Contract – Where Handtmann Ltd need to process someone’s personal data to fulfil contractual obligations to you or because you have asked Handtmann Ltd to do something before entering into a contract (eg provide a quote), contract is used as a legal basis.
Legitimate interests – if processing is necessary for your interests, for example keeping customers appraised of new product lines relevant to their business, this is done using legitimate interests as a legal basis.
The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, in line with our internal retention policy.
We won’t share your information with any other organisations for marketing, market research or commercial purposes, and we don’t pass on your details to other websites.
Any other organisations who access your information in the course of providing services on our behalf will be governed by strict contractual restrictions to make sure that they protect your information and keep to data-protection and privacy laws which apply. We may use service providers to help us run these sites (or services available on the sites).
You have the right to be informed about the collection and use of their personal data. This is a key transparency requirement under the GDPR.
You have the right of access, commonly referred to as subject access, gives individuals the right to obtain a copy of their personal data as well as other supplementary information. It helps individuals to understand how and why you are using their data, and check you are doing it lawfully.
You have the right to have inaccurate personal data rectified. An individual may also be able to have incomplete personal data completed – although this will depend on the purposes for the processing. This may involve providing a supplementary statement to the incomplete data.
You have the right to have personal data erased. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances.
You have the right to restrict the processing of their personal data in certain circumstances. This means that an individual can limit the way that an organisation uses their data. This is an alternative to requesting the erasure of their data.
You have the right to data portability gives individuals the right to receive personal data they have provided to a controller in a structured, commonly used and machine-readable format. It also gives them the right to request that a controller transmits this data directly to another controller.
You have the right to object to the processing of your personal data. This effectively allows you to ask us to stop processing your personal data. The right to object only applies in certain circumstances. Whether it applies depends on our purposes for processing and our lawful basis for processing.
You have rights regarding automated individual decision-making; a decision made by automated means without any human involvement, and profiling.
As a responsible company, we do not use automatic decision-making or profiling.