We only share information with trusted third
parties if you have given us permission to do so when creating your account. We
do reserve the right to disclose pertinent information in certain circumstances
clearly stated in the Privacy Policy of our terms & conditions.
Compressed Air Systems UK operates a fraud
prevention policy and undertakes searches for the purpose of verifying your
identity & details. Agencies we use may check details you supply against
particulars on any database (public or otherwise) to which they have access.
They may also use your details in the future to assist other companies for
verification purposes. By submitting your order you agree to this.
Enquiries should be directed in the first
instance to:
Compressed Air Systems UK
15 Fortnum Close
Kitts Green
Birmingham
B33 0LG
Compressed Air Systems UK treat the privacy of your personal data with
great importance. This policy describes how we ensure that your use of this
website is protected by us and describes the data that we collect, how we use
it, and what your rights are in respect of the General Data Protection
Regulations (GDPR). It also includes clauses on our
use of telephone Call Logging and Closed-Circuit Television (CCTV) on our premises.
1. Who
Are We?
1.1. Compressed Air Systems UK are a UK based company, our offices at Compressed Air
Systems UK, 15 Fortnum Close, Kitts Green, Birmingham B33 0LG.
2. Definitions:
2.1. What
is GDPR?
2.1.1. GDPR is the abbreviation for
the General Data Protection Regulation. It is Directive
95/46/EC and relates to the collection, storage, processing and movement of
personal data.
2.2. What
is Personal Data?
2.2.1. Personal Data is any
information relating to an identifiable person who can be directly or
indirectly identified.
2.3. What
is Processing?
2.3.1. Processing can be one or
more of the following activities; collection, recording, organising,
structuring, storage, adaption, retrieval, consultation/use, disclosure by
transmission, dissemination or otherwise by making available, alignment or
combination, restriction, erasure or destruction.
2.4. What
Classification Group
2.4.1. Ceased; defined as
one that is either Ceased Trading, i.e. gone in to administration, retired or
has otherwise been terminated.
2.4.2. Dormant; defined where
the account has been inactive for more than 2 years.
2.5. What
is a Data Breach?
2.5.1. A data breach can be broadly defined as a security incident that
has affected the confidentiality, integrity or availability of personal data
i.e. when the data has been lost, destroyed, corrupted, disclosed or if the
data has been rendered unavailable by being accidentally lost or destroyed or
encrypted by ransomware.
2.6. What
is a Cookie?
A Cookie is a small piece of data which is sent from a website that you are
browsing and stored on your computer by the web browser while you are browsing.
Depending on what Cookies the web application finds on your computer, your
browsing experience may become customised, appearing to remember what products
you have viewed before or what searches you have previously performed. Further
information about cookies can be found at www.allaboutcookies.org
3. Data
Controller
3.1. The data is under the control of the Compressed
Air Systems UK Data Protection Officer (DPO). He/she can be
reached for the purposes of privacy and data security at enquiries@tanaircompressors.com or contacted
at the trading address above.
4. Cookies
and Analytics
4.1. Cookies
4.1.1. A cookie is a small file which asks permission to be placed on
your computer's hard drive. Once you agree, the file is added, and the cookie
helps analyse web traffic or lets you know when you visit a site.
4.1.2. Cookies allow web applications to respond to you as an
individual. The web application can tailor its operations to your needs, likes
and dislikes by gathering and remembering information about your preferences.
4.1.3. We use traffic log cookies to identify which pages are being
used. This helps us analyse data about web page traffic and improve our website
to tailor it to customer needs. We only use this information for statistical
analysis purposes and then the data is removed from the system.
4.1.4. Overall, cookies help us provide you with a better website, by
enabling us to monitor which pages you find useful and which you do not. A
cookie in no way gives us access to your computer or any information about you,
other than the data you choose to share with us. You can choose to accept or decline
cookies.
Most web browsers automatically accept cookies, but you can usually modify your
browser setting to decline cookies if you prefer. This may prevent you from
taking full advantage of the website.
5. Purpose
of processing data
5.1. Compressed Air Systems UK may hold your personal
data for the purposes of fulfilling their contractual obligations in respect
marketing, sales and delivery of products and services offered by Compressed
Air Systems UK.
5.2. Key data collected in respect of our account
Customer includes; Name, Address and Post Code together with your E-mail
Address and Contact Telephone Number(s). We also collect information about your
role in your business and keep other social information which may reasonably be
considered as relevant to the marketing, sales and delivery cycle.
5.3. Transactional data we collect may include; Name,
Address, Post Code, Email Address, Telephone number(s) and delivery
instructions to your regular and temporary delivery points.
5.4. We collect details of your payment methods,
including bank account, bank card or credit card details.
5.5. Other Key data collected includes information
relating to;
5.5.1. The way Compressed Air Systems UK should address you during
carrying out business.
5.5.2. Your job function and your working hours so we can ensure that
our sales team don't contact you out of hours.
5.6. If you have created a login for our website, we
will store your Name and Email address together with your encrypted password
and the maximum basket value you may process.
5.7. We have no provision for holding data belonging
to persons under the age of 18. If we learn that a person under the age of 18
has an account on our databases, it will be removed.
5.8. If you should contact our business via the
telephone you should be aware that calls are recorded for the purposes of
training and dispute resolution.
5.8.1. Call data includes; the telephone number making the call, the
recipient's number, the transfer number (if the call was transferred), the
date, the call duration and the voice file.
5.9. Compressed Air System UKs business premises are
protected by Closed Circuit Television (CCTV). If you should visit the premises
in person, your image may be captured on our security systems. We use this data
only in the event of security issue or to assist in queries relating to
deliveries/collection dispute resolution.
5.9.1. CCTV data includes, the date and time of feed, the location of
the recording device and the image file.
6. Legal
basis for processing
6.1. The legal basis for processing your Key Personal
data and Transactional data is one of the need to fulfil a contractual
obligation. We reasonably consider that if you are an employee, contracted
representative of the contracted customer or have a valid account on the B2B
Site, we may process data for the purposes of marketing, sales and delivery of our
products.
6.2. We process your data when it is in our legitimate
interests to do so. This will include:
6.2.1. processing your data for the purposes of managing your account
with us (our interest is in efficiently managing our customers)
6.2.2. collecting payments due to us;
6.2.3. for administration purposes (our interest is in efficiently
managing and administering our business);
6.2.4. sending you information about our products and developments in
our business (our interest is in growing and developing our business and
keeping customers informed of our latest products).
6.3. The processing of data associated with CCTV and
Call data logging is based on a legitimate interest to maintain the security of
the premises and to assist with dispute resolution and provide a training
feedback where necessary.
7. Recipients
of your personal data
7.1. Compressed Air Systems UK do not trade or exchange
data with third parties other than those that provide delivery mechanisms for
our services such as carriers, mailing fulfilment and value-added networks for
the EDI. Data is used for marketing products sold and distributed by Sealey
only.
7.2. Your data may be processed by third parties
(Processors) who provide services for our legitimate business interest such as
parcel carriers, EDI services and Credit Checking companies and Credit Card
Processors. Data may be shared and stored with our hosting service. It may also
be shared with our professional advisors. Your data may also be shared with
third parties providing us with administration and IT services.
7.3. Your data may be shared with our professional
advisers and service providers, including accountants, auditors, solicitors,
insurers and bankers.
7.4. We may release information relating to your
account to HMRC and other relevant authorities if we are required to do so by
law.
8. Storage
and Transfer of data
8.1. Your data is primarily held on servers hosted in
the UK under GDPR regulations. Compressed Air Systems UK have processing
agreements in place for the safe storage of this data.
8.2. Where data is held outside of our server
networks, we look for evidence of 3rd party
certification as proof of the security of the data and we will also endeavour
to obtain processing contracts.
8.3. Compressed Air Systems UK take reasonable
precautions to ensure the security of any data processed on our local
infrastructure including but not limited to;
8.3.1. Cyber Essential Plus level of accreditation across network and
processing facilities – with Roadmap to IASME accreditation.
8.3.2. Password protected access to storage of data and limited
accessibility of areas used for processing data.
8.3.3. Ongoing program of education and familiarity around our
responsibilities to protect our clients' data.
8.3.4. A safe-by-design approach to the creation of data bases and
systems that process our clients' data.
8.4. Where we have arrangements for the transfer of
data e.g. for mailing services, we have data processing agreements in place.
9. Retention
9.1. Data is stored according to our data retention
policies. To determine the appropriate retention period for personal data, we
consider the amount, nature, and sensitivity of the personal data, the
potential risk of harm from unauthorised use or disclosure of your personal
data, the purposes for which we process your personal data and whether we can
achieve those purposes through other means, and the applicable legal requirements.
9.2. For example;
9.2.1. Key data and other Key data may be held on for the duration of
the contractual obligation and for a period of seven years after the account
becomes Ceased and all monies are collected or two years after the account
becomes Dormant, whichever is first.
9.2.2. Transactional data; for a maximum of 8 years before it is removed
from our records.
9.2.3. Telephone Calls; for a maximum of 12 months before being deleted.
9.2.4. CCTV; for a maximum of 90 Days before being deleted.
10. How
we use and profile your data
10.1.We profile your Key data and Other key data to ensure that we keep
you up to date with the latest developments in our product ranges and
promotions. We may profile products your business may have purchased and make
automated associations with other products from within our program. We may
profile the request for promotional literature and associate possible interest
in products from other similar promotions. We may profile your purchasing
history (where available) and/or your geographical location to establish the
effectivity of product(s) or to lead Distributor promotions in your area.
10.2.We may profile Transactional data in the event of a dispute or
query and we may contact individuals identified by this data to affect the
completion of our contract/delivery. We may also profile this data to assess
our performance and service levels. We will never profile this data for direct
marketing purposes.
10.3.We may profile your data from our website to determine the details
around the orders you have placed with us and assess the value and content of
your unsent basket.
10.4. We may use transactional information from the Site to contact you
or your customer in the event of a dispute or query.
10.5.In the event of a Product Safety Recall we may process your
Personal Data to inform you of a safety issue. We will use whatever means is
appropriate to contact you in this case.
10.6.We do not actively profile telephone calls or CCTV Images unless we
consider the content may resolve a specific issue or incident. This data is not
routinely or automatically combined with any other personal data we hold about
you.
11. Your
Rights
11.1.The General Data Protection Regulations (GDPR) provide individuals
with rights over the data that we hold where you can be identified by that
data. More information can be viewed at the Information Commissioner's Office (ICO) at www.ico.org.uk . Broadly
these rights relate to the data that Compressed Air Systems UK hold as follows:
11.1.1. You can object to Compressed Air Systems UK
processing your data in certain circumstances, or ask us to restrict how we
process your data
11.1.2. You can request a correction to any of your
personal data
11.1.3. You can ask for erasure of your personal data
in certain circumstances
11.1.4. You can request a copy of all your personal
data held by Compressed Air Systems UK
11.1.5. Where we are relying on your consent to
process your data, you can withdraw your consent. However, we are still
entitled to process your data if we are not relying on your consent.
11.1.6. You may also request a portable data file of
your data You may exercise all of these rights by contacting either your Area
Sales Manager or contacting enquiries@tanaircompressors.com
11.1.7. Compressed Air Systems UK work hard to keep
our customers happy. If the experience of dealing with us does not meet your
expectations, please let us know so we may investigate and respond. You can
raise issues relating to data by mailing service@tanaircompressors.com or calling
our Call Centre team on 01217533330.
11.1.8. You may complain to the ICO at any time about
our use of your personal data, using the above website. However, we would like
to discuss any concerns with you, and would encourage you to contact us first.
12. Security
12.1.We apply appropriate technical, physical and organizational
measures that are reasonably designed to protect personal information against
accidental or unlawful destruction, loss, alteration, unauthorized disclosure
or access, and against other unlawful forms of processing. Access to personal
information is restricted to authorized recipients on a need-to-know basis. We
maintain an information security program that is proportionate to the risks
associated with the processing.
13. Linked
Websites
We may provide links to third parties' websites (Linked
sites) from our websites. Linked sites are not necessarily reviewed,
controlled or examined by us. Each Linked site may have its own terms of use
and privacy notice, and users must be familiar and comply with all such terms
when using linked sites. We are not responsible for the policies and practices
of any linked site, or any additional links contained in them. These links do
not imply our endorsement of the linked sites or any company or service and we
encourage users to read these linked sites' terms and notices prior to using
them.