Privacy Policy
ARO Welding Technologies Ltd
Updated at: 18/04/2023
| 1. | Overview |
| 1.1. | The Company takes the security and privacy of your data seriously. We gather and use information or ‘data’ about you as part of our business and to manage, develop and enhance our relationship with you. We intend to comply with our legal obligations under the Data Protection Act 2018 (the ‘2018 Act’) and the EU General Data Protection Regulation (‘GDPR’) in respect of data privacy and security. We have a duty to notify you of the information contained in this policy. |
| 1.2. | This general policy applies to all personal data we may hold. |
| 1.3. | The Company has measures in place to protect the security of your data as set out in this policy. |
| 1.4. | The Company will hold data for as long as is necessary for the purposes for which it was collected, or until a subject access request (see section 7) is received to delete it. |
| 1.5. | This policy explains how the Company will hold and process your information and explains your rights in respect of the data we hold. |
| 2. | Data Protection Principles |
| 2.1. | Personal data must be processed in accordance with six ‘Data Protection Principles.’ It must: be processed fairly, lawfully and transparently; We are accountable for these principles and must be able to show that we are compliant. |
| 3. | How we define personal data |
| 3.1. | ‘Personal data’ means information which relates to a living person who can be identified from that data (a ‘data subject’) on its own, or when taken together with other information which is likely to come into our possession. |
| 3.2. | This policy applies to all personal data whether it is stored electronically, on paper or on other materials. |
| 3.3. | If you visit our web site it is standard procedure for our web servers to store your internet service provider details, the web site from which you are visiting, details as to which of our sites you are visiting and the date and duration of your visit. |
| 3.4. | Personal data we hold will have come into our possession in the ordinary course of business. |
| 3.5. | The personal data we hold may include some or all of the following information categories: name; |
| 3.6. | Note. Our employee data is more extensive but a separate policy applies. |
| 3.7. | We do not hold any information which is considered under GDPR as Special Category Data. |
| 3.8. | You may also be invited to access videos via our web site. This facility is provided by You Tube and details of their policies can be found at https://policies.google.com/privacy?hl=en |
| 4. | How we define processing |
| 4.1. | ‘Processing’ means any operation which is performed on personal data such as: collection, recording, organisation, structuring or storage; This includes processing personal data which forms part of a filing system and any automated processing. |
| 5. | How will we process your personal data? |
| 5.1. | The Company will process your personal data in accordance with our obligations under the 2018 Act. |
| 5.2. | We will protect your data by implementing technical and organisational safety measures in order to avoid accidental or deliberate manipulation, loss, damage or access by unauthorised persons. Our processing includes data encryption, pass-wording and secure storage of back-up media. |
| 5.3. | We may use personal data : whilst performing contractual obligations (sale and purchase contracts including quotations);or We will not use your personal data for any other unrelated purpose without telling you about it and the legal basis that we intend to rely on for processing it. |
| 6. | Sharing your personal data |
| 6.1. | Sometimes we might share your personal data with group companies or our contractors and agents to carry out our obligations under our contract with you or for our legitimate interests. |
| 6.2. | We require those companies to keep your personal data confidential and secure and to protect it in accordance with the law and our policies. They are only permitted to process your data for the lawful purpose for which it has been shared and in accordance with our instructions. |
| 6.3. | We do not make personal data available to third parties other than as set out in clauses 6.1 and 6.6 of this policy. |
| 6.4. | We do not send your personal data outside the European Economic Area. If this changes you will be notified of this and the protections which are in place to protect the security of your data will be explained. |
| 6.5. | Our specific GDPR Employee Policy sets out some of the measure used to protect employee data. |
| 6.6 | Google reCAPTCHA This service (e.g. for contact forms, and newsletter registrations) is used for purposes of identification and to prevent the services provided from being misused by machines. “Captchas” are generated and verified on application servers from Langley Holdings PLC. No data is transmitted to third parties in the process.Data processed:IP address Click path Time spent on the site Website visitor behavior Browser language User input Javascript objects Browser plug-ins The legal basis for the use of reCAPTCHA is Art. 6 para. 1 p. 1 lit. a GDPR. |
| 6.7 | Meta Pixel (formerly Facebook Pixel)Our website uses pixels from Facebook/Meta to measure the conversion of visitor actions. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The data collected is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. The data is additionally processed by Facebook for its own purposes in accordance with the Facebook Data Use Policy. The use of this service is based on your consent according to Art. 6 para. 1 lit. a DSGVO and §25 para. 1 TTDSG. The consent can be revoked at any time. https://de-de.facebook.com/about/privacy/) https://www.facebook.com/legal/controller_addendum. |
| 6.8. | If third party organisations have access to personal data we ensure that they have adequate policies in place to protect the data in accordance with the GDPR requirements and principles. |
| 7. | Subject access requests |
| 7.1. | Persons who would like to know what personal information we hold may make a Subject Access Request (SAR) in relation to their own personal data. The contact person is set out in clause 8.2 below. We are required to respond within one month unless the request is complex or numerous in which case the period in which we must respond can be extended by a further two months. |
| 7.2. | There is normally no fee for making a subject access request. |
| 8. | Your data subject rights |
| 8.1. | You have the right to information about what personal data we process, how and on what basis as set out in this policy. |
| 8.2. | Matters arising under clauses 7.1 and 8.3 to 8.8 should be referred in writing to privacy@arotechnologies.com |
| 8.3. | You have the right to access your own personal data by way of a subject access request (see section 7 above.). |
| 8.4. | You can request that we correct any inaccuracies in your personal data. |
| 8.5. | You have the right to request that we erase your personal data where we were not entitled under the law to process it. |
| 8.6. | While you are requesting that your personal data is corrected or erased or are contesting the lawfulness of our processing, you can apply for its use to be restricted while the application is made. |
| 8.7. | You have the right to object to data processing where we are relying on a legitimate interest to do so and you think that your rights and interests outweigh our own and you wish us to stop. |
| 8.8. | You have the right to object if we process your personal data for the purposes of direct marketing. You will be given the opportunity to unsubscribe from future direct email campaigns but we may retain your personal data where for legitimate business reasons we consider it appropriate to do so. |
| 8.9. | You have the right to be notified of a data security breach concerning your personal data. |
| 8.10. | You have the right to lodge a complaint with our data protection officer (see 8.2) or our data protection supervisory authority. Full contact details including a helpline number can be found on the Information Commissioner’s Office website (www.ico.org.uk). This website has further information on your rights and our obligations. |
1. Facebook: https://www.facebook.com/about/privacy/update
2. Twitter: https://twitter.com/en/privacy#update
3. LinkedIn: https://www.linkedin.com/legal/privacy-policy
4. Youtube/Google: https://policies.google.com/privacy?hl=en
5. dotmailer: https://www.dotmailer.com/terms/privacy-policy/
9. Newsletters/News/Promotions
We may use your email address to send you newsletters, promotional offers, and other updates related to our products and services, as well as those of our subsidiaries, based on your consent or our legitimate interest to keep you informed. If you prefer not to receive these communications, you can opt out at any time by clicking the ‘unsubscribe’ link in any email you receive from us or our subsidiaries. Your request will be processed promptly in accordance with applicable data protection laws, including the GDPR, and you will no longer receive such communications unless you re-subscribe
