This privacy notice is to help you understand how we collect and process your personal data through your use of our site https://www.grafukshop.co.uk, including any information you may provide through our site when you fill in any online form. We also process data on behalf of our customers as required for the purpose of processing quotations and orders.
Graf UK Limited, registered in England no. 8473746, is the data controller and we are responsible for your personal data (referred to as “we”, “us” or “our” in this privacy notice). Our full details are:
Phone: +44 (0) 1608 661500
We are committed to protecting your privacy and will ensure that any processing of data is secure and only used for the stated purpose and handled in accordance with the General Data Protection Regulations of May 2018. By providing us with your data, you warrant to us that you are over 18 years of age.
It is very important that the information we hold about you is accurate and up to date. Please let us know if at any time your personal information changes by emailing us at firstname.lastname@example.org. If at any time you are unsure how we are handling or storing information about you then please contact us either at the address above or email us at email@example.com.
The following policy covers what, how and why we use data in points 2 to 5 and further information specifically relating to online activities and social media websites are also detailed in points 10 to 14.
2. What data do we collect about you?
Information is collected under the basis of both legitimate interest and lawful obligations. We only collect personal information such as first name, last name, title, billing address, delivery address, email address and telephone numbers. We also collect drawings and/or details specifically related to your personal property. We may also collect financial information such as your bank account and payment card details although payment card details are destroyed each time after use. We may also collect information about employment history, education and qualifications if you send a CV to us for a job application. If you contact us we may keep a record of that information that is relevant for our stated purposes.
When you access our website, the website provider automatically collects and stores information that your browser automatically transmits to us in “server log files”. These are:
Browser type and browser version
Operating system used
Host name of the accessing computer
Time of the server request
This data will not be combined with data from other sources
3. How do we collect your personal data?
You may provide data by filling in forms on our website or by communicating with us by post, phone, in person and by email. Other data is collected automatically by our IT systems when you visit our website. This data is primarily technical data such as the browser and operating system you are using or when you accessed the page. This data is collected automatically as soon as you enter our website. We may also collect your data if you visit our premises for health and safety and security reasons. Other methods under which data is collected include social media sites and external third-parties acting as data processors.
4. How we use your personal data
We will only use your personal data when legally permitted and do so only for the following purposes in line with legitimate interests:
Dealing with your enquiries.
Fulfilling any contractural obligations wihen you order from us.
Keeping in contact with you to share relevant information.
Communicating in relation to job applications and employment
Part of the data is collected to ensure the propoer functioning of our website
To enable business improvement through statistical analysis
Addtionally, we will use your personal data for the following purposes in line with legal obligations.
Meeting health and safety regulations and for security purposes.
Keeping accurate financial and accounting purposes.
Meeting our legal requirements for keeping accurate records as governed by legislation. For example, keeping accounting records for a period of at least 6 years from the end of the last company financial year they relate to.
5. Legal basis for processing your personal data
Graf UK Ltd has concluded that the collection of personal data is necessary for its legitimate interest and legal obligations as a commercial business.
6. Disclosures of your personal data
We never pass on your personal data to any third parties outside Graf UK Ltd other than contracted parities operating under our instruction. Such contracted parties may include haulage companies, installers, suppliers, accountants, insurance companies, companies within the GRAF Group and others operating on our behalf.
7. Data security
8. Data retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
9. Your rights
You have the following right regarding your personal data
To be informed.
To request access to your personal data that we have collected about you.
To request us to recitfy your data if the data is no longer accurate or up-to-date.
To request us to block the processing of your data if that data is no longer accurate or up-to-date.
To object to our processing of your personal data under the lawful basis of legitimate interest.
To request erasure of your personal data under the lawful basis of legitimate interest.
You can see more about the rights at: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
If you wish to exercise any of the rights set out above, please email us at firstname.lastname@example.org. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We try to respond to all legitimate requests within one month. Occasionally it may take us longer than this if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Should you wish to raise a complaint about any way that we handle or process your personal data with the Information Commissioner’s Office in the UK they can be contacted at https://ico.org.uk/concerns/
10. Third party links
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
12. Social media
Facebook plugins (Like and Share buttons)
Our website includes plugins for the social network Facebook, Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. The Facebook plugins can be recognized by the Facebook logo or the Like button on our site. For an overview of Facebook plugins, see https://developers.facebook.com/docs/plugins/.
If you do not want Facebook to associate your visit to our site with your Facebook account, please log out of your Facebook account.
If you access our Facebook page from your own Facebook account, Facebook automatically collects data about your visit to our page. This data cannot be used to personally identify each individual that visits our page. We use this information under legitimate interests basis to monitor traffic in general on our page. If however, you like our page, like or comment on a post or send us a message on our page the system will automatically store information related to your identity in our Facebook log. We don’t use this information, unless there is a comment or a message that needs actioning.
Your privacy preferences with Twitter can be modified in your account settings at https://twitter.com/account/settings.
If you access our Twitter page from your own Twitter account, Twitter automatically collects data about your visit to our page. This data cannot be used to personally identify each individual that visits our page. We use this information under legitimate interests basis to monitor traffic in general on our page. If however, you follow our page, like or retweet a tweet or send us a message on our page the system will automatically store information related to your identity in our Twitter log. We don’t use this information, unless there is a comment or a message that needs actioning.
Our website includes plugins for the social network LinkedIn, LinkedIn, Sunnyvale, California, USA. The LinkedIn plugins can be recognised by the LinkedIn logo at the bottom of our site.
If you access our LinkedIn page from your own LinkedIn account, LinkedIn automatically collects data about your visit to our page. This data cannot be used to personally identify each individual that visits our page. We use this information under legitimate interests basis to monitor traffic in general on our page. If however, you like our page, like or comment on a post or send us a message on our page the system will automatically store information related to your identity in our LinkedIn log. We don’t use this information, unless there is a comment or a message that needs actioning.
13. Google Analytics
This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objecting to the collection of data
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.
Outsourced data processing
We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic data collection by Google Analytics
This website uses Google Analytics’ demographic features. This allows reports to be generated containing statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This collected data cannot be attributed to any specific individual person. You can disable this feature at any time by adjusting the ads settings in your Google account or you can forbid the collection of your data by Google Analytics as described in the section “Refusal of data collection”. We do have the option to run the demographic reports, however, we do not run them at the moment.
Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising program from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”).
As part of Google AdWords, we use so-called conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is set. Cookies are small text files that your internet browser stores on your computer. These cookies expire after 30 days and are not used for personal identification of the user. Should the user visit certain pages of the website and the cookie has not yet expired, Google and the website can tell that the user clicked on the ad and proceeded to that page.
Each Google AdWords advertiser has a different cookie. Thus, cookies cannot be tracked using the website of an AdWords advertiser. The information obtained using the conversion cookie is used to create conversion statistics for the AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, advertisers do not obtain any information that can be used to personally identify users. If you do not want to participate in tracking, you can opt-out of this by easily disabling the Google Conversion Tracking cookie by changing your browser settings. In doing so, you will not be included in the conversion tracking statistics.
Conversion cookies are stored. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising. For now we don’t use Google Adwords but we do use conversion tracking on our website to optimize both our website.
14. Plugins and tools
Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited.
If you’re logged in to your YouTube account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used to help make our website appealing. This constitutes a justified interest.
Further information about handling user data, can be found in the data protection declaration of YouTube under https://policies.google.com/privacy?hl=en-GBgl=uk .
Google Web Fonts
For uniform representation of fonts, this page uses web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
For this purpose your browser has to establish a direct connection to Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google Web fonts is done in the interest of a uniform and attractive presentation of our website. This constitutes a justified interest.
If your browser does not support web fonts, a standard font is used by your computer.
This site uses the Google Maps map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website. This constitutes a justified interest.
Further information about handling user data, can be found in the data protection declaration of Google at https://policies.google.com/privacy?hl=en-GBgl=uk.