For the purpose of the General Data Protection Regulation - GDPR, the data controller is Draeger Safety UK Ltd, Ullswater Close, Blyth Riverside Business Park, Blyth, Northumberland, NE24 4RG.
2.1 Information We Collect
When you place an order on our UK webshop, or use any online form on our website we may collect and process the following data about you:
Your name, your postal address, your e-mail address, your telephone number, your credit card number and expiry date and/or bank account details.
Other information which you provide, for example during registration, when you subscribe to one of our newsletters (e-newsletter or otherwise), when entering a prize draw, an online promotion, completing surveys or when you execute an agreement/complete a transaction.
Correspondence, if you should contact us.
Details of your visits to our website. The information obtained in this respect and how it is dealt with is set out below at paragraph 2.2.
2.2 Details of your visits to our websites
Each time you access a page within our website and each time a file is opened, the access data about this process are saved in a log file on our server.
Each record consists of:
the file name;
the date and time of the request;
the transferred data volume;
the access status (file transferred, file not found etc.); and - your IP address.
This data is used exclusively for the purpose of data security and optimisation of our website. The data will not be evaluated in any other way except for statistical purposes, but then only in anonymous form. No personal web browsing profiles or similar personal profiles are created or processed.
2.3 How we use your data
The information is used to enable us process your request and/or order and to carry out our obligations arising in respect of any contracts entered into between you and us. Only relevant and appropriate information is used by us and passed on to subcontractors (e.g. carriers) to provide you with the service you have requested and to communicate with you on any matter relating to the provision of the service in general.
The respective input and contact forms contain information about the purpose of the data being gathered. Such data is transmitted encrypted over the Internet. We will only use your data for promotional purposes if you have explicitly given your agreement. We do not link the information you provide to the access data referred to at paragraph 2.2 above.
We may also collect, use and aggregate information and statistics for the purposes of monitoring website usage and traffic in order to help us develop the website and our service to our customers. These statistics will never include information that can be used to identify any individual customers.
In addition we may use your information to provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes or to notify you about changes to our service.
We may disclose your information to a third party in the following circumstances:
Where we are under a duty to disclose or share your personal data in order to comply with any legal obligation;
to protect the rights, property, or safety of Draeger Safety UK Ltd, our customers, or others.
This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction and conducting Restricted Party Screening as detailed in paragraph 4.
Cookies are small text files which can be temporarily stored on your hard drive.
These files simplify your navigation on the website and have a technical function. Cookie information is only used to further improve the website for users. This includes information about the web browser used, the time spent with our offers and which websites you have visited.
We use both so-called "session cookies" which are only saved intermediately for the duration of your use of our website and "permanent cookies" which retain information on visitors who repeatedly access our website. The purpose of cookies is to provide you with the best possible user guidance. Our website can also be used without cookies. You can disable the storage of cookies in your browser, limit it to specific websites or adjust your browser to prompt you whenever a cookie is sent. However, please note that if you limit cookies, you have to expect a limited display of the relevant page or limited user guidance.
Cookies may also be used on linked pages without us being able to alert you beforehand. During login session cookies are required because we use the single sign-on concept which facilitates authentication and access control in different areas of our portal.
This includes the setup of a "session" between the client and server allowing you to move within the whole portal without having to log in to each area separately. This session is represented by a cookie storing a randomly generated number.
The cookie also stores the login information allocated to you (user name, access rights and session validity) for access control purposes. Instead of asking you for the renewed input of your login information, the cookie is sent to the server and accepted as proof of identity.
There is no linkage to personal data and the activities of a user cannot be traced.
Upon request, you can choose to have your user name saved permanently in a third cookie. During frequent use of the portal this simplifies your login, because your user name will already be completed in the login form and you only have to enter the password. This method poses risks to the user because your login data may be misused by third parties.
To ensure that your credit, debit or charge card is not being used without your consent, we will validate name, address and other personal information supplied by you during the order process against appropriate third party databases. By accepting the Terms you consent to such checks being made. In performing these checks personal information provided by you may be disclosed to a registered Credit Reference Agency which may keep a record of that information. This is done only to confirm your identity, a credit check is not performed and your credit rating will be unaffected.
In addition, your name, address and other personal information supplied by you during the registration process will be used to conduct Restricted Party Screening against government produced lists of official denied persons or illegal trans-shippers, blocked from import or export transactions, or sanctioned by a government for illegal acts. This will be completed using an appropriate third party business online tool, including search engine and database facility.
A record of this screening and its outcome will be retained in line with our Record Keeping Policy.
All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology (via Thawte Inc. - http://www.thawte.com/index.html) . Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
If we introduce new products or services, modify our methodology for using the Internet or if Internet and IT security technology develops further, the "data protection statement" may need to be updated. We therefore reserve the right to modify or amend this statement as may be required. We will publish the changes at this location [or if appropriate notify you by email.] You should therefore regularly open this website in order to inform yourself about the current status of the data protection statement.
All information contained on this website has been checked with greatest care. However, we cannot guarantee that the content of our own websites is always correct, complete or up-to-date.
Under GDPR, you have the right to access personal information that we hold about you. Any access request you make will be dealt with in accordance with GDPR. In addition, in accordance with relevant legal provisions, you have the right to request that personal data be corrected, blocked or deleted. Should you have such a request please email firstname.lastname@example.org .
If, at any time, you wish to have your information removed from our database, please send us an e-mail entitled "URGENT WEBSHOP – PLEASE REMOVE FROM
DATABASE" to email@example.com. We will then ensure that your information is removed at the earliest practicable moment.
If any of the information that you have provided to us changes (e.g. you change your e-mail address, your name or your payment details etc.), please let us know the correct details by sending an e-mail entitled "URGENT WEBSHOP - CHANGE OF DETAILS" to firstname.lastname@example.org or by writing to:
The Webshop Database Administrator Marketing Department
Draeger Safety UK Ltd.
Blyth Riverside Business Park
Date: May 25th, 2018
© Draeger Safety UK Ltd