This policy sets out Warwick Test Supplies Ltd (WTS) policy regarding personal data which we may collect as a result of the use of our website. We take data protection seriously and want to assure users that where data is collected it is processed, stored and used securely and transparently.
The use of our website is possible without any indication of personal data; however, if you wish to use any of our services via our website, such as the shop or sign up to our newsletter, processing of personal data will become necessary.
The processing of personal data, such as the name, address, e-mail address, or telephone number will always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to WTS.
By means of this policy WTS are informing you, the data subject and user of our website, of the nature, scope, and purpose of the personal data we collect, use and process and of the rights to which a user is entitled concerning that data.
The Data Controller
Warwick Test Supplies Ltd (WTS) is the data controller of any personal information that a user gives to us. Our full details are:
Warwick Test Supplies Ltd
Ascot II, Wallops Wood
Tel: +44 (0) 844 69 333 80
We have implemented technical and organisational measures to ensure protection of personal data processed through our website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection is not guaranteed. For this reason, users are free to transfer personal data to WTS via alternative means, e.g. by telephone or post.
What Data Do We Collect and What Do We Do With it?
Our website collects anonymous general data when viewed. This data is stored in server log files and kept separate from any personal data we hold. We do not draw any personal conclusions about a user from this data. This data is needed to deliver and optimise our content correctly and to provide authorities with information necessary for criminal prosecution in case of a cyber-attack. The following data may be collected;
- The browser types, operating systems and versions used;
- The website from which you reached our website (so-called referrers);
- The date, time, Internet Protocol address (IP address) and Internet service provider of the system accessing the site;
- Any other similar data that may be used in the event of attacks on our information technology systems.
Ordering on our website
When placing an order on our website a user will include personal data. Which personal data is transmitted to WTS is determined by the respective form inputs used during the order process. The data entered by a user is collected and stored exclusively for internal use by us for the purposes of fulfilling an order. We may transfer some of your data to one or more data processors (e.g. a parcel service) that will also use the data for internal purposes but which is attributable to WTS.
When placing an order, the users IP address, date and time are also stored. The collection of this data is necessary to prevent the misuse of our services and to make it possible to investigate committed offences. This data is not passed on to third parties unless there is a statutory obligation for us to do so such as a criminal investigation.
When paying for an order on our website a user will have a choice of paying by credit/debit card, PayPal, proforma invoice or on account for authorised users. Credit/debit and PayPal payment processing is conducted by third-party providers. By selecting these payment options, the user agrees to the transfer of personal data required for payment processing, identity checking, credit worthiness and fraud prevention. The data transferred is usually the users name, address, email address, IP address, telephone numbers and payment card details. Third party payment providers will, if necessary, pass on personal data to affiliates and service providers or subcontractors to the extent that this is necessary to fulfil contractual obligations or for data to be processed in the order. WTS has no control over how third-party providers handle a user’s personal data. Users are therefore encouraged to read the providers privacy policies before using their services.
Once the transaction has been authorised by the third-party provider we are informed that payment has been successful and will complete the order. We do not collect or store a user’s personal payment card data.
By registering on our website, the user’s IP address, date and time are also stored to prevent the misuse of our services. This data is also not passed on to third parties unless there is a statutory obligation to do so. A user’s registration, with the voluntary indication of personal data, is intended to enable us to offer them content or services that we may only offer to registered users. Registered users are free to change the personal data supplied during the registration at any time, or to have them completely deleted from our data stock.
Subscription to our newsletters
Our website gives users the opportunity to subscribe to our newsletter. Our newsletter informs our customers and business partners about our offers and news that we think will be of interest. The input form used for subscription determines what personal data is transmitted.
Our newsletter may only be received by users if the user has a valid e-mail address and has subscribed successfully. On subscription a confirmation e-mail will be sent to the e-mail address registered by user, for legal reasons, in the double opt-in procedure. This confirmation e-mail is used to prove whether the owner of the e-mail address as the data subject is authorised to receive the newsletter.
During the subscription process, we also store the IP address, date and time. This is necessary in order to understand the (possible) misuse of the e-mail address of a user at a later date, and serves as legal protection.
We only use users’ subscription data to send our newsletter or to send updates regarding this service. We will not transfer this data to any third parties.
Our newsletter may contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such e-mails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, WTS may see if and when an e-mail was opened by a user, and which links in the e-mail were clicked. Such personal data collected in the tracking pixels contained in the newsletters are stored and analysed by WTS in order to optimise the distribution and content of future newsletters to the interests of the data subject.
The subscription to our newsletter may be terminated by the user at any time by either clicking the link found at the end of the newsletter or to contact us in a different way. On termination we will consider the user’s consent to store information also to be revoked and will remove them from our data stock.
Contact us via the website
Our website provides a contact us email address and a form feature that enables a user to make quick electronic communication with us. If a user makes use of these features the personal data transmitted on a voluntary basis by the user is automatically stored and used for the purpose of processing or contacting the user. There is no transfer of this personal data to third parties.
How long do we keep your data?
WTS will process and store the personal data of a user only for the period necessary to achieve the purpose of storage, or as far as this is granted by laws or regulations. For example; Personal data obtained via order processing must be kept for a period of 6 years to comply with UK tax laws. If the storage purpose is not applicable, or if a storage period expires, the stored personal data is routinely erased in accordance with legal requirements.
Website analytics and marketing services
Our website uses analytics and marketing services from a number of service providers shown below. To achieve this our site may gather some anonymous information such as browser type, language, approximate location, time and date of visit and IP address. This website traffic data is transmitted to the providers servers which may be located anywhere in the world. We use reports provided by these services to help us understand our website traffic and page usage.
Our website uses Albacross lead generation analytics. We obtain your consent to the processing of personal data on the behalf of Albacross Nordic AB (“Albacross”). Information collected from cookies set in your device that qualify as personal data will be processed by Albacross, a company offering lead identification and ad targeting services with offices in Stockholm and Krakow. The purpose for the processing of the personal data is that it enables Albacross to improve a service rendered to us and our website (e.g “Lead Generation” service), by adding data to their database about companies. The data that is collected and used by Albacross to achieve this purpose is information about the IP-address from which you visited our website, and technical information that enables Albacross to tell apart different visitors from the same IP-address. Albacross stores the domain from form input in order to correlate the IP-address with your employer. Further information about Albacross processing of personal information, may be obtained from https://albacross.com/privacy-policy/. You may at any time withdraw your consent to this processing. Such withdrawal may be made either by contacting us, or by contacting Albacross directly.
Albacross Nordic AB
Companyreg. no 556942-7338
111 35 Stockholm, Sweden
www.albacross.com - firstname.lastname@example.org
Facebook (visitor action pixel)
Facebook Inc Facebook Ireland Ltd.
1 Hacker Way, 4 Grand Canal Square
Menlo Park, Grand Canal Harbour
CA 94025, Dublin 2
Google marketing services
Twitter conversion tracking
Our website uses the Conversion Tracking Service of Twitter Inc. (1355 Market Street #900, San Francisco, California 94103, “Twitter”). Twitter stores a cookie on the user’s computer to enable an analysis of the use of our online products and services. Twitter Conversion Tracking tracks the actions of users after they have viewed ads or interacted with ads on Twitter. Twitter’s Conversion Tracking allows you to assign conversions such as link clicks, retweets or “like” data. If you wish to object to tracking, you can do so using the Digital Advertising Alliance tool at www.optout.aboutads.info. Twitter is also certified under the Privacy Shield Agreement and thus guarantees its compliance with European data protection legislation: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
Links to other websites
Social media sites
Our website also has links to our pages on social network sites such as Facebook, LinkedIn, Google+ and Twitter. A social network is a social meeting place on the Internet, an online community, which usually allows users to communicate with each other and interact in a virtual space. A social network may serve as a platform for the exchange of opinions and experiences, or enable the Internet community to provide personal or business-related information.
With each view of a page of our website that has a link to the social network sites integrated, the Internet browser on the user’s computer automatically downloads a display of the corresponding button of the site. During the course of this technical procedure, the social network site is made aware of what specific sub-page of our website was visited by the user. More detailed information about each social network site and their plugins is shown at:
- Facebook - https://developers.facebook.com/docs/plugins/
- LinkedIn - https://developer.linkedin.com/plugins
- Google+ - https://developers.google.com/+/
- Twitter - https://about.twitter.com/de/resources/buttons
If the user is also logged in to the social network site when visiting one of our pages with an integrated link then the social network site detects every call-up and specific sub-page to our website made by the user for the entire duration of their stay on our site. This information is collected through the social network component and associated with the respective social network account of the user. If the data subject clicks on one of the social network buttons integrated on our website, then the social network site assigns this information to the personal account of the user and stores the personal data.
If such a transmission of information to social network sites is not desirable for the user, then they may prevent this by logging off from their social network accounts before a call-up to our website is made.
You remain in complete control of your personal data and can request to see:
- What personal data we hold on you;
- What we do with your personal information;
- Whom it may have been transferred to.
You may also object or withdraw consent to store or use your personal data at any time (right to be forgotten) or request to have it transferred to another data controller.
If you feel that personal data that we hold about you is incorrect we shall correct it or erase it, at your request, as long as there is no statutory storage obligation placed upon us.
To learn more about these rights please see the Information Commissioner's Office (ICO) website https://ico.org.uk/.
Please address any such requests to the WTS Data Protection Officer through our contacts page. If you are dissatisfied with our response you can complain to the Information Commissioner's Office:
Information Commissioner's Office
Telephone: 0303 123 1113
Legal basis for the processing
GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6(1) lit. b GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services. Is our company subject to a legal obligation by which processing of personal data is required, such as for the fulfilment of tax obligations, the processing is based on Art. 6(1) lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1) lit. d GDPR. Finally, processing operations could be based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which are not covered by any of the above mentioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
Amended - Jul 2020