SUMMARY WEBSITE DATA PROTECTION NOTICE

Revision date: 01.07.2022

WashTec (UK) Ltd at 14a Oak Industrial Park, Chelmsford Road, Great Dunmow Essex, CM6 1XN (“WashTec” or “we” or “our”) and each of its affiliates and subsidiaries (collectively the “WashTec Group”) take data protection seriously. This Data Protection Notice provides users of the website www.washtec-uk.com and www.auwa.de/en, and all other WashTec websites referring to this Data Protection Notice (collectively, “websites”) with information on how we, as controller within the meaning of the General Data Protection Regulation (“GDPR”) and the ePrivacy Regulation (“ePrivacy Regulation”), collect and process personal data and other data concerning users in connection with their use of the website.

Please note that other websites of the WashTec Group may be subject to different data protection notices.

Categories of personal data and purposes of processing 

When you use our website, create a customer account or order products through our website, we process the following metadata: Browser type and version, operating system, interface, referrer URL, pages viewed, date, time, IP address and, if applicable, the following personal data: Your name and other identification information, your payment information, order information, and requests for marketing materials. We process the personal data for the following purposes: Provision of access to our website, quality improvement, managing your user account, answering your queries, provision of marketing materials, provision of requested products and services, fulfilment of contractual obligations and exercise of claims in law. For further information, please see heading 1 of the Full Website Data Protection Notice.

Basis of processing and legal consequences

One of the central requirements of data protection law is that all processing of personal data must have a lawful purpose. We primarily make use of the following lawful purposes: The processing is necessary (i) for performance of a contract, (ii) for compliance with a legal obligation, (iii) in order to protect the vital interests of you or a third party, (iv) for the purpose of legitimate interests pursued by us or by a third party, except where those interests are overridden by your interests or fundamental rights and freedoms. For further information, please see heading 2 of the Full Website Data Protection Notice.

Categories of recipients and international transfers

We transfer your personal data to other WashTec Group companies, processors, other companies in relation to transactions and, in accordance with applicable law, public authorities, courts, outside consultants and similar third parties; some such recipients are domiciled outside of the EU. For further information, please see heading 3 of the Full Website Data Protection Notice.

Storage periods

Your personal data will be erased as soon as it is no longer needed for the purposes for which it was originally collected, or as required by applicable law. For further information, please see heading 4 of the Full Website Data Protection Notice.

Your rights

Under applicable law, you have certain rights in relation to the processing of your personal data, in each case in accordance with the applicable statutory provisions, such as the right of access to your data and the right to rectification, erasure and portability. Please direct your questions to sales[at]washtec-uk.com. For further information, please see heading 5 of the Full Website Data Protection Notice.

Cookies and other tracking technologies

Our website uses cookies and other tracking technologies. For further information, please see heading 6 of the Full Website Data Protection Notice.

Questions and contact information

If you have any questions about this Data Protection Notice or if you wish to exercise your rights as a data subject, please contact us at: Sales Department, WashTec (UK) Ltd, 14a Oak Industrial Park, Chelmsford Road, Great Dunmow, Essex, CM6 1XN, sales[at]washtec-uk.com.

The WashTec Data Controller can be contacted at:

Hugo Bernal
hbernal[at]washtec.com
WashTec (UK) Ltd
14a Oak Industrial Park
Chelmsford Road
Great Dunmow
Essex
CM6 1XN

Revision of this Data Protection Notice

Both the summary and the Full Website Data Protection Notice are subject to revision. We will notify you of revisions by appropriate means.

FULL WEBSITE DATA PROTECTION NOTICE

1.      Categories of personal data and purposes of processing: What personal data do we process and why?

1.1    Metadata

You can use the website without providing personal data about yourself. In such cases, we collect only the following metadata, which results from the use of the website: Browser type and version, operating system and interface, referring website (referral URL), pages viewed, the date and time you access our website, and your Internet Protocol (IP) address.

Your IP address is used to provide you with access to our website. Once your IP address is no longer needed for this purpose, we truncate it by removing the last octet of the address. The metadata, including the truncated IP address, is used to improve the quality of the website and the services offered through it by analysing use patterns.

1.2    User account

When you create a user account on our website, you are asked to provide the following personal data about yourself: Name, gender (Mr. or Ms.), postal address, email address, phone number, selected password for your user account, payment information, billing and delivery address, and (optional) requests for marketing materials. We process such personal data to manage your user account, to answer your questions, to provide requested products or services, to provide marketing materials to the extent permitted by law, to analyse your interests for marketing purposes, to improve our website in line with use patterns and for technical management or for other purposes that you have consented to.

1.3    Orders for products

When you order a product on our website, we collect and process the following personal data about you: Name, gender (Mr. or Ms.), postal address, email address, phone number, payment information, billing and delivery address, product type and quantity, purchase price, order date, order status, returns, enquiries to customer service and (optional) requests for marketing materials. We process such personal data to fulfil contractual obligations and process your orders, provide customer service, comply with legal obligations, defend, establish and exercise claims in law, provide marketing materials to the extent permitted by law, and analyse your interests for marketing purposes.

1.4    Newsletter

When you state that you wish to receive our newsletter, we collect and process the following personal data about you: Email address and (optional) whether you wish to receive marketing emails or postal mailings. We process such personal data to send out the newsletter and other marketing materials to the extent permitted by law and to analyse your interests for marketing purposes.

2.    Basis of processing and legal consequences: What is the legal basis for the processing of your personal data and what happens if you do not wish to provide personal data?

The legal basis for the collection, processing and use of personal data by the company is as follows:

• You have given consent to the processing of your data for one or more specific purposes;
• The processing is necessary for the performance of a contract to which you are party or, at your request, to take steps prior to entering into a contract;
• The processing is necessary for compliance with a legal obligation to which we are subject;
• The processing is necessary in order to protect your vital interests or those of another natural person;
• The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in WashTec;
• The processing is necessary for the purpose of legitimate interests pursued by us or by a third party, except where those interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data. These legitimate interests are the fulfilment of the processing purposes specified under heading 1, in particular so that we can process your orders, fulfil contractual obligations and inform you about product innovations;
• Other applicable legal bases for data processing, notably under provisions stipulated in the law of Member States or

The provision of your personal data is required by law or contract. The provision of your personal data is necessary in order to enter into a contract with us or for the receipt of services/products you have requested. The provision of your personal data is voluntary.

Not providing personal data can be to your detriment; for example, you will not be able to receive certain products and services. However, not providing personal data does not lead to any legal consequences.

3.    Categories of recipients and international transfers: Who do we share your personal data with and where are they located?

We may transfer your personal data to third parties for the above-described purposes as follows:

• Within the WashTec Group: We and any company in the WashTec Group may receive your personal information for the purposes described above. Internal departments within WashTec may receive your personal data commensurate with the categories of personal data and purposes for which the personal data was collected. For example, our IT department may have access to your account information, and our sales department may have access to your account information or data relating to product orders. In addition, further departments within WashTec may have access to personal data about you on a need-to-know basis, for example the legal department, the finance department or the internal audit department.
• To processors: Specific third parties, which may or may not be affiliated companies, may receive your personal data in order to process it on instruction (“processors”) if this is necessary for the processing purposes described above; examples include website, customer service, marketing and IT support service providers, as well as other service providers who support us in maintaining our business relationship with you. Processors are contractually obliged to implement suitable technical and organisational measures to secure the personal data and to process the personal data only as instructed.
• Other recipients: In accordance with applicable data protection law, we may transfer personal data to law enforcement agencies, government and judicial authorities, lawyers, outside consultants or business partners. In the event of corporate acquisitions and mergers, personal data may be transferred to third parties involved in the acquisition or merger. We will not share your personal data with third parties for advertising, marketing or other purposes without your consent.

Access to your personal data is restricted to persons who have a need to know in order to perform their work.

International transfers: The personal data we collect and receive from you may be transferred to and processed by recipients located inside or outside the European Economic Area (“EEA”). Some of the recipients outside the EEA are EU-U.S. Privacy Shield certified and others are in countries subject to current adequacy decisions (notably Andorra, Argentina, Canada (for non-public entities subject to the Canadian Personal Information Protection and Electronic Documents Act), Switzerland, Faroe Islands, Guernsey, Israel, Isle of Man, Jersey and New Zealand, please select the countries that apply). In all transfers, a level of data protection is ensured that is recognised and adequate from a European data protection perspective. Other recipients may be located in countries that do not ensure an adequate level of data protection from a European data protection perspective. We will take all necessary precautions to ensure that all security measures necessary under data protection law are taken when transferring to countries outside the EEA. With regard to transfers to countries that do not ensure an adequate level of data protection, we will take appropriate security precautions in transfers, such as standard data protection clauses issued by the European Commission or a supervisory authority, approved codes of conduct together with binding and enforceable commitments by the recipient or approved certification mechanisms together with binding and enforceable commitments by the recipient. You may contact us as specified under heading 7 below and request a copy of such appropriate security precautions.

4.    Storage periods: How long do we store your personal data?

Your personal data will be stored for as long as is necessary to provide you with the services and products you request. When your contractual relationship with us comes to an end or your account is deleted, or when you terminate your relationship with us in any other way, we will remove your personal data from our systems and records and/or properly anonymise it so that you can no longer be identified from it (unless we have to retain your data to comply with legal or regulatory obligations to which WashTec is subject, such as for tax reasons).

We may retain your contact details and information about the interest you have expressed in our products and services for a longer period if you have consented to WashTec sending you marketing materials. We may also be required under applicable law to retain certain personal data for a period of ten years after the relevant tax year. We may retain your personal data after termination of our contractual relationship if your personal data is necessary for compliance with other applicable laws or if we require your personal information, exclusively on a need-to-know basis, in order to establish, exercise or defend a claim in law. As far as is possible, we will restrict the processing of your personal data to such limited purposes after termination of our contractual relationship.

5.    Your rights: What are your rights and how can you assert them?

Right to revoke consent: If you have given your consent to the collection, processing and use of your personal data (in particular to receiving direct marketing communications via email, text message or telephone), you can revoke that consent at any time with effect for the future. Revoking consent does not affect the lawfulness of processing performed prior to revocation. If you wish to revoke your consent, please contact us as specified under heading 7 below. You can object to the use of your personal data for marketing purposes without incurring any costs other than basic telecommunication charges.

Additional data protection rights: In accordance with applicable data protection laws, you may have the right (i) of access to your personal data, (ii) to rectification of your personal data, (iii) to erasure of your personal data, (iv) to restrict the processing of your personal data (v) to data portability; and/or (vi) to object to the processing of your personal data (including to the creation of a profile).

Please note that these rights may be restricted under applicable local data protection law. Below you will find more information about your rights under the GDPR:

• Right of access to your personal data: You have the right to obtain information from us as to whether your personal data is processed, and, if it is, the right of access to that personal data. Your right of access includes – among other things – the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipient to whom the personal data has been or will be disclosed. This is not an absolute right, however, and the interests of other persons may limit your right of access. You have the right to receive a free copy of the processed personal data. For any further copies you request, we may charge a reasonable fee based on administrative costs.
• Right to rectification:  You have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
• Right to erasure (right to be forgotten): You have the right to obtain from us the erasure of your personal data.
• Right to restriction of processing: You have the right to obtain from us the restriction of processing of your personal data. In this event, the data concerned will be marked and may only be processed by us for specific purposes.
• Right to data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit that data to another entity without hindrance from us.
• Right to object:

You have the right to object, on grounds relating to your particular situation, at any time to our processing of personal data concerning you and we may be obliged no longer to process your personal data. There may be such a right to object in particular if we collect and process your personal data for direct marketing purposes or to create a user profile in order to obtain a better picture of your interest in our products and services.

If you have a right to object and you exercise that right, your personal data will no longer be processed by us for such purposes. You may exercise this right by contacting us as specified under heading 7.

There may not be such a right to object if the processing of your personal data is necessary in order to take steps prior to entering into a contract or to perform an existing contract with you.

If you no longer wish to receive direct marketing material via email, text message/MMS, fax or telephone, you must revoke your consent as described above.

To exercise your rights, please contact us as specified under heading 7. You also have the right to lodge a complaint with the competent data protection supervisory authority.
 

6.     Cookies and other tracking technologies

This website uses cookies and other tracking technologies. When you visit our website, open our emails, or view our services online, we or an authorised third party may send a cookie. Cookies are small text files that are placed on your device. When a website is accessed, a cookie placed on your device sends information to the party that put it there. Cookies are very common and are used on many websites. A cookie typically contains the name of the domain that sent it, its lifetime, and a value (typically a unique number). A more detailed explanation of what cookies are and how they work can be found at www.allaboutcookies.org.

The overview below lists the cookies we use on our website.

• Google Analytics _gat and _ga: This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses ‘cookies’, which are text files placed on visitors’ computers, to help the website operators analyse how visitors use the site. The information generated by the cookie about the visitors’ use of the website will generally be transmitted to and stored by Google on servers in the United States. On this website, IP anonymisation has been activated. The IP addresses of Google users from European Union member states, or from other states contracting to the Agreement on the European Economic Area, will be shortened. Only in exceptional cases will a complete IP address be transferred to a Google server in the United States and shortened there. On behalf of the website operator, Google will use this information for the purpose of evaluating the website for its users, in order to compile reports on website activity, and to provide other services relating to website activity and internet usage for website operators. Google will not associate the IP address transferred in the context of Google Analytics with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that in this case you may not be able to use the full functionality of this website. Furthermore, users can prevent the collection of data about their use of the website (including their IP address) generated by the cookie, and the processing of data by Google, by downloading and installing the browser plug-in through the following link: The current link is: https://tools.google.com/dlpage/gaoptout?hl=en
  
  If you do not wish to use the browser plugin or if you use a device that the plugin cannot be installed on (such as a mobile device), please click the following link to create an opt-out cookie that will prevent future data collection by Google Analytics on this website (note that the opt-out cookie only works in this browser and only for this domain; if you delete cookies in this browser, you will need to click here again): Disable Google Analytics
  
  Further information about Google Analytics:
  Visit developers.google.com for information on how Google Analytics uses cookies: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage.
  Visit the Google Analytics privacy page provided by Google: https://www.google.com/analytics/learn/privacy.html
   
• EquityStory: This cookie is only used on subpages that are technically operated by our third party provider EQS. It is used to define a session for our server.
• julia: This cookie is only used on subpages that are technically operated by our third party provider EQS. It is used to identify you on the website. In particular, it show if you have visited the website before. This enables us not just to count how many page views there have been on multiple pages, but also how many visitors have viewed the website. This cookie is also used to collect additional information such as details on your browser, the size of the browser window, and the device that you use to visit the website (such as mobile device or desktop computer).
• romeo: This cookie is only used on subpages that are technically operated by our third party provider EQS. It is used to track views of other pages belonging to our third-party provider EQS Group AG.

• Google reCAPTCHA: We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. This service is provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). reCAPTCHA is used to check whether the data entered on our website (such as on a contact form) has been entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, how long the visitor has been on the website, or mouse movements made by the user).The use of Google reCAPTCHA may also involve the transmission of personal data to the servers of Google LLC. in the USA.The reCAPTCHA analyses take place completely in the background. Website visitors are not advised that such an analysis is taking place. Data processing is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in protecting its site from abusive automated crawling and spam.

  For more information about Google reCAPTCHA and Google’s privacy policy, please visit the following links: https://www.google.com/intl/de/policies/privacy/

• Analysis by wiredminds:

  Our website uses a counting pixel technology provided by wiredminds GmbH (www.wiredminds.de) to analyze visitor behavior. If necessary, data is collected, processed and stored, from which user profiles are created under a pseudonym. Wherever possible and reasonable, these usage profiles are completely anonymized. Cookies can be used for this purpose. Cookies are small text files that are stored in the visitor's Internet browser and serve to recognize the Internet browser. The collected data, which may also contain personal data, will be transmitted to wiredminds or collected directly by wiredminds. wiredminds may use information that is left by visiting the websites to create anonymized usage profiles. The data obtained without explicit consent of the affected person will not be used to personally identify the visitor of this website and will not be merged with personal data of the bearer of the pseudonym. Whenever IP addresses are recorded, their immediate anonymization takes place by deleting the last number block.

  Permission for data collection, processing and storage can be revoked at any time with effect for the future under the following link.

  Exclude from tracking

Cookie Settings





7.     Questions and contact information

If you have any questions about this Data Protection Notice or if you wish to exercise your rights as specified under heading 5, please contact us at: Sales Department, WashTec (UK) Ltd, 14a Oak Industrial Park, Chelmsford Road, Great Dunmow, Essex, CM6 1XN, sales[at]washtec-uk.com.

The WashTec Data Controller can be contacted at:

Craig McKay
cmckay[at]washtec-uk.com
WashTec (UK) Ltd
14a Oak Industrial Park
Chelmsford Road
Great Dunmow
Essex
CM6 1XN

 

8.     Revision of this Data Protection Notice

We may revise this Data Protection Notice from time to time in response to changes in legal, regulatory or operational requirements. We will notify you of such changes, including when they will come into effect by updating the ‘Revision date’ at the top of this Notice or as otherwise required by law.

SUMMARY DATA PROTECTION NOTICE

Version date: 18.05.2018

WashTec (UK) Ltd at 14a Oak Industrial Park, Chelmsford Road, Great Dunmow Essex, CM6 1XN (“WashTec” or “we” or “our”) provide this Supplier/Business Partner Data Protection Notice (“Data Protection Notice”) in order to explain our policy as controller regarding the collection, processing and use of the personal data of our current and future suppliers, shareholders, customers and other business partners (collectively “business partners”) and of employees of our business partners.

Scope

This summary of the Data Protection Notice applies to you if you are a current or former business partner of WashTec or if you are an employee of a current or former business partner of WashTec.

Categories of personal data and purposes of processing

If you are a business partner of WashTec or an employee of a business partner of WashTec, we may collect the following categories of personal data: Name, business contact details, employer name, title/function, services offered and provided, contract data, content of communications, payment information, billing information and business relationship history. For further information, please see heading 2 of the Full Supplier/Business Partner Data Protection Notice.

Purposes, legal basis and consequences of processing

Business partner data is collected, processed and used to perform the contract with the business partner (including the performance of contractual obligations, invoice processing, communication, and regulatory compliance and due diligence measures) and for marketing and customer relationship management activities, security measures and anti-fraud measures. For further information, please see heading 3 of the Full Supplier/Business Partner Data Protection Notice.

Categories of recipients and international transfers

We transfer your personal data to other WashTec Group companies, processors, companies that we acquire and, in accordance with applicable law, public authorities, courts, outside consultants and similar third parties; some such recipients are domiciled outside of the EU. For further information, please see heading 4 of the Full Supplier/Business Partner Data Protection Notice.

Storage periods

Your personal data will be erased as soon as it is no longer needed for the purposes for which it was originally collected, or as required by applicable law. For further information, please see heading 5 of the Full Supplier/Business Partner Data Protection Notice.

Your rights

Under applicable law, you have certain rights in relation to the processing of your personal data, in each case in accordance with the applicable statutory provisions, such as the right of access to your data and the right to rectification, erasure and portability. Please direct your questions to bcook@washtec-uk.com for further information, please see heading 6 of the Full Supplier/Business Partner Data Protection Notice.

Questions and contact information

If you have any questions about this Data Protection Notice or if you wish to exercise your rights as a data subject, please contact us at: HR Department, WashTec (UK) Ltd, 14a Oak Industrial Park, Chelmsford Road, Great Dunmow, Essex, CM6 1XN.

 The WashTec Data Controller can be contacted at:

Craig McKay
cmckay[at]washtec-uk.com
WashTec (UK) Ltd
14a Oak Industrial Park
Chelmsford Road
Great Dunmow
Essex
CM6 1XN

FULL DATA PROTECTION NOTICE

1.    Scope

This Notice applies to you if you are a current or former business partner of WashTec (such as a consult or business owner) or if you are an employee of a business partner of WashTec who is in contact with WashTec on behalf of that business partner.

2.    Categories of personal data

WashTec collects, processes and uses the following categories of personal data from you or from authorised third parties (such as your supervisor, public authorities or public resources) (collectively, “business partner data”):

• Business partner personal data: Name, business contact details, goods or services offered or provided, contract data, content of communications (such as emails or business letters), payment information, billing information and business relationship history;
• Business partner employee personal data: Name, business contact details, employer name, title/function and content of communications (such as emails or business letters).

3.   Purposes, legal basis and consequences of processing

Business partner data is collected, processed and used for the purposes of performing the contract with the business partner (including the performance of contractual obligations, invoice processing, communication, and regulatory compliance and due diligence measures) and for marketing and customer relationship management (“CRM”) activities, security activities and anti-fraud activities (collectively “processing purposes”).

The legal basis for the collection, processing and use of personal data by the company is as follows:

• Performance of the contract with the business partner;
• Legitimate interest of WashTec, other WashTec Group companies or other third parties (such as public authorities or courts) where the legitimate interest concerns the following: company-wide information exchange, marketing and CRM activities, anti-fraud, combating misuse of IT systems or anti-money laundering, deployment of a whistleblowing system, physical security, IT and network security, internal investigations or potential mergers and acquisitions;
• Consent;
• Compliance with legal obligations;
• Protection of your vital interests or those of another person;
• Performance of a task carried out in the public interest or in the exercise of official authority vested in WashTec and

The provision of business partner data is voluntary and serves the purpose of entering into and/or performing the contract with the business partner. Failure to provide business partner data may cause the corresponding administrative and administrative processes with respect to the business partner to be delayed or prevented from proceeding.

4.    Categories of recipients and international transfers

WashTec may disclose your business partner data to third parties for the following purposes:

• Within the WashTec Group: WashTec and any WashTec Group company may receive your personal data for processing purposes, in particular to conduct periodic reviews in order to ensure compliance with applicable laws and internal policies, and to respond to or meet requests and statutory requirements.
• Within specific acquiring or acquired companies: If WashTec’s business should be sold or transferred in whole or part or if WashTec should acquire another entity and integrate it into WashTec’s business (or if a similar transaction should be planned), your personal data may be transferred to the other company prior to the transaction (for example as part of due diligence) or after the transaction, in accordance with the applicable legal provisions, including the law applicable to the other company.
• To processors: Specific third parties, irrespective of whether or not they are affiliates, may receive your personal data in order to process it on instruction (“processors”) if this is necessary for the processing purposes, in particular in order to provide IT and other administrative support (such as service providers providing vendor support or IT hosting and maintenance support), for compliance with applicable law and for other activities. Processors are contractually obliged to implement suitable technical and organisational measures to secure the personal data and to process the personal data only as instructed.

Access to your personal data is restricted to persons who have a need to know in order to perform their work. WashTec may disclose your personal data to public authorities, courts, outside consultants and similar third parties where required or permitted by law.

International transfers The personal data we collect and receive from you may be transferred to and processed by recipients located inside or outside the European Economic Area (“EEA”). Some of the recipients outside the EEA are EU-U.S. Privacy Shield certified and others are in countries subject to current adequacy decisions (notably Andorra, Argentina, Canada (for non-public entities subject to the Canadian Personal Information Protection and Electronic Documents Act), Switzerland, Faroe Islands, Guernsey, Israel, Isle of Man, Jersey and New Zealand). In all transfers, a level of data protection is ensured that is recognised and adequate from a European data protection perspective. Other recipients may be located in countries that do not ensure an adequate level of data protection from a European data protection perspective. We will take all necessary precautions to ensure that all security measures necessary under data protection law are taken when transferring to countries outside the EEA. With regard to transfers to countries that do not ensure an adequate level of data protection, we will take appropriate security precautions in transfers, such as standard data protection clauses issued by the European Commission or a supervisory authority, approved codes of conduct together with binding and enforceable commitments by the recipient or approved certification mechanisms together with binding and enforceable commitments by the recipient. You may contact us as specified in Section 7 below and request a copy of such appropriate security precautions.

5.    Storage periods

WashTec and/or our service providers store your personal data in accordance with the applicable data protection laws to the extent necessary for performance of our obligations and only for the period of time necessary for fulfilment of the purposes for which the data were collected. If WashTec should no longer need your personal data, we will remove it from our records and/or take steps to properly anonymise it so that you can no longer be identified from it (unless we have to retain your data to comply with legal or regulatory obligations to which WashTec is subject).

Personal data in contracts, communications and business letters may be subject to statutory retention requirements requiring retention for up to ten years. All other business partner data is normally erased five years after termination of the business relationship between you and WashTec.

6.    Your rights

Right to revoke your consent: If you have given your consent to the collection, processing and use of your personal data (in particular to receiving direct marketing communications via email, text message/MMS, fax or telephone), you can revoke that consent at any time with effect for the future. Revoking consent does not affect the lawfulness of processing performed prior to revocation. If you wish to revoke your consent, please contact us as specified in Section 7 below. You can also object to the use of your personal data for direct marketing purposes without incurring any costs other than basic telecommunication charges.

Additional data protection rights: In accordance with applicable data protection laws, you may have the right (i) of access to your personal data, (ii) to rectification of your personal data, (iii) to erasure of your personal data, (iv) to restrict the processing of your personal data (v) to data portability; and/or (vi) to object to the processing of your personal data.

Please note that these rights may be restricted under applicable local data protection law. Below you will find more information about your rights under the GDPR:

• Right of access to your personal data: You have the right to obtain information from us as to whether your personal data is processed, and, if it is, to access to that personal data. Your right of access includes – among other things – the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipient to whom the personal data has been or will be disclosed. This is not an absolute right, however, and the interests of other persons may limit your right of access. You have the right to receive a free copy of the processed personal data. For any further copies you request, we may charge a reasonable fee based on administrative costs.
• Right to rectification: You have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
• Right to erasure (right to be forgotten): You have the right to obtain from us the erasure of your personal data.
• Right to restriction of processing: You have the right to obtain from us the restriction of processing of your personal data. In this event, the data concerned will be marked and may only be processed by us for specific purposes.
• Right to data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit that data to another entity without hindrance from us.
• Right to object:

You have the right to object, on grounds relating to your particular situation, at any time to our processing of personal data concerning you and we may be obliged no longer to process your personal data. There may be such a right to object in particular if we use your personal data to create a user profile in order to obtain a better picture of your interest in our products and services.

If you have a right to object and you exercise that right, your personal data will no longer be processed by us for such purposes. You may exercise this right by contacting us as specified in Section 7.

There may not be such a right to object if the processing of your personal data is necessary in order to take steps prior to entering into a contract or to perform an existing contract with you.

If you no longer wish to receive direct marketing material via email, text message/MMS, fax or telephone, you must revoke your consent as described above.

To exercise your rights, please contact us as specified in Section 7. You also have the right to lodge a complaint with the competent data protection supervisory authority.

7.    Questions and contact information

If you have any questions about this Notice or if you wish to exercise your rights in accordance with Section 6, please contact us at: HR Department, WashTec (UK) Ltd, 14a Oak Industrial Park, Chelmsford Road, Great Dunmow, Essex, CM6 1XN.

The WashTec Data Controller can be contacted at:

Craig McKay
cmckay[at]washtec-uk.com
WashTec (UK) Ltd
14a Oak Industrial Park
Chelmsford Road
Great Dunmow
Essex
CM6 1XN

WashTec auf Facebook

Data privacy notice for the WashTec Facebook page

This data privacy notice (status 2018, November 20) applies to the information offering from WashTec AG and each of its affiliates and subsidiaries (collectively the “WashTec Group” or “WashTec”) available for access on Facebook at www.facebook.com/WashTec/ (“WashTec Facebook page”).The WashTec Facebook page is operated by WashTec on the technical platform of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2 (“Facebook”).This notice is intended to inform you about the processing of data on the WashTec Facebook page by WashTec and advise you of information published by Facebook relating to the processing of personal data by Facebook.

Processing of data by WashTec

If you are registered with Facebook, you can have a message sent to us via the “Message” function. Such messages are invisible to other Facebook users. We process the personal data contained in a message sent by you to WashTec exclusively in order to respond to your inquiry. The legal basis for such processing is Art. 6 I f) of the General Data Protection Regulation (GDPR). Insofar as you wish to enter into a contractual relationship with WashTec with your inquiry, the legal basis for such processing is Art. 6 I b) GDPR.
The message will be deleted if your inquiry has been answered, and no other grounds exist to entitle or oblige us to keep the said message. The WashTec Data Protection Notice will otherwise apply. There you will find details including information about your rights in relation to the processing of your personal data, plus options for contacting us on questions relating to data protection.
We are not cognizant of the manner in which messages sent to WashTec are analyzed, interpreted or otherwise processed by Facebook. In this regard, we refer you to the information in the section “Processing of data by Facebook”.
WashTec utilizes the statistical information relating to the use of the WashTec Facebook page that Facebook makes available via the “Facebook Insights” function.  When you visit the WashTec Facebook page, certain data relating to your visit – which may include personal data – will be transferred to, and processed by, Facebook, including for providing the “Facebook Insights” function. On account of this, WashTec and Facebook may be regarded as “joint controllers” in respect of this data and the terms of use agreed between WashTec and Facebook have been complemented by a so-called joint controller agreement in order to comply with data privacy law. This joint controller agreement is available at https://www.facebook.com/legal/terms/page_controller_addendum. Further details on Facebook Insights can be found in the section “Processing of data by Facebook”.
Over and above the processing of personal data as set out in this section, WashTec exercises no influence on the processing of personal data in connection with your use of the WashTec Facebook page. We would like point out that you make use of the WashTec Facebook page and its function on your own responsibility. This applies in particular to the use of interactive functions (e.g. comment, share, rate). You can find further information below in the section “Processing of data by Facebook”.

Processing of data by Facebook

When you visit the WashTec Facebook page, Facebook records details including your IP address and further information, which is directed to Facebook via cookies on your terminal device. Among other purposes, this information is used to supply WashTec, as the operator of the WashTec Facebook page, with statistical information about the reach of the WashTec Facebook page. Facebook provides further details on this via the following link: https://de-de.facebook.com/help/pages/insights. Facebook’s Cookie policy may be found at: https://www.facebook.com/policies/cookies/.
The data relating to you that is gathered in this connection is processed by Facebook and under certain circumstances supplied to countries outside the European Union. Facebook sets out what information it obtains and how this is used in its “Data Policy”. The “Data Policy” can be accessed via the following link: https://www.facebook.com/privacy/explanation.

The official WashTec Facebook page can be reached at http://www.facebook.com/WashTec/.
 

WashTec on Instagram 

The WashTec Website Data Protection Notice applies to the official WashTec Instagram page.

WashTec on LinkedIn

The WashTec Website Data Protection Notice applies to the official WashTec LindkedIn page .

The LinkedIn privacy policy is available here.

 

WashTec on Youtube

The WashTec Website Data Protection Notice applies to the official WashTec Youtube page.
 

WashTec on Twitter

This is the official WashTec Twitter channel:  @WashTec_AG

The official Twitter channels of the Communications team of WashTec  Group (WashTec AG and each of its affiliates and subsidiaries - collectively the “WashTec Group” or “WashTec”) will keep you informed on relevant topics of general interest concerning WashTec. Any content or opinions provided by Twitter users other than @WashTec_AG are solely the responsibility of each individual author and do not necessarily reflect the opinion of WashTec. WashTec cannot be held responsible for any third party content. As links may be included in tweets, please be aware that WashTec is not responsible for content on any website not operated by WashTec. Additionally, WashTec cannot be held responsible or liable for the accuracy and completeness of all information provided on the Twitter channel of WashTec. Use this information at your own risk.

Note: On Twitter we are a guest of an external media platform with its own data privacy rules and terms of service. WashTec has no influence on the rules set by the platform:
 

Twitter terms of service
Twitter privacy policy
 
Responsible for the content of the Twitter channel @WashTec_AG according to Paragraph 55, Section 2 of the German Interstate Broadcasting Agreement (Rundfunkstaatsvertrag) is:
 
Thomas Brenner
WashTec AG
Argonstraße 7
86153 Augsburg, Germany
Commercial register no. at Augsburg local court: HRB 81.
 
Corporate Information

WashTec on Xing

The WashTec Website Data Protection Notice applies to the official WashTec Xing page.
 

1. Description of the processing activity

The data protection information is provided by you in connection with the uploading of images via the WashTec photo upload facility on the WashTec AG website.

2. Name and contact details of the responsible person

WashTec AG, Argonstraße 7, 86153 Augsburg, Germany

Phone: +49 (0)821 5584 0; e-mail: washtec@washtec.de

3. Contact details of the company data protection officers

WashTec AG

Data protection officer

Argonstraße 7, 86153 Augsburg, Germany

Phone. +49 (0)821 5584 1111, e-mail: datenschutzbeauftragter@washtec.de

4. Purposes and legal bases of the processing 

Your data will be collected within the scope of a marketing project for the purpose of contacting you (e.g. in case of queries). Your data will be processed on the basis of Art. 6 (1) lit. f.

5. Categories of personal data processed

The following categories of personal data are processed:

- Surname, first name

- e-mail address

- If applicable, vehicle registration number, if shown on the picture (made unrecognisable), 

- If applicable, pictures of natural persons (will be deleted) 

as well as comparable data. These are only used for internal administration. 

6. Source of the data

Your data has been collected directly from you by the person responsible. 

7. Recipients or categories of recipients of the personal data

The recipient of the data is the person responsible or a company associated with this person who has been entrusted with the processing of the images. A disclosure to third parties does not occur. If vehicle registration numbers are visible on the pictures, they will be retouched.

8. Transfer of personal data to a third country

Not envisaged.

9. Duration of storage of personal data

The personal data will be deleted as soon as they are no longer required for the aforementioned purpose, at the latest after 6 months. 

10. Data subjects rights

According to the EU General Data Protection Regulation (GDPR), you have the following rights: 

If your personal data are processed, you have the right to obtain information about the data stored about you (Art. 15 GDPR). 

If incorrect personal data are processed, you have the right to rectification (Art. 16 GDPR).

If the legal requirements are met, you can request the deletion or restriction of the processing and lodge an objection against the processing (Art. 17, 18 and 21 GDPR).

If you have consented to data processing or if there is a data processing agreement and data processing is carried out using automated procedures, you may be entitled to data transferability (Art. 20 GDPR). 

If you make use of the rights mentioned above, the responsible person will check whether the legal requirements for this are met. 

To exercise your rights, please contact the data protection officer. If you have any complaints regarding data protection, you can contact the responsible supervisory authority: Bayerisches Landesamt für Datenschutzaufsicht (Data Protection Authority of Bavaria), Promenade 27, 91522 Ansbach, Germany.

1. Processing activity

This data protection information is provided in connection with the contact form on the WashTec AG website, in addition to the data protection declaration for the use of our website.

2. Name and contact details of controller

WashTec AG, Argonstrasse 7, 86153 Augsburg, Germany
Phone: +49 (0)821 5584 0; email: washtec@washtec.de

3. Contact details of company Data Protection Officer:

WashTec AG
Data Protection Officer
Argonstrasse 7, 86153 Augsburg, Germany.
Phone +49 (0)821 5584 1111; email: datenschutzbeauftragter@washtec.de

4. Purpose and legal basis of processing

Your data is collected in the context of your contact enquiry for the purpose of answering your specific enquiry and, if necessary, for the purpose of acquiring, questioning and informing interested parties. The legal basis for processing your data is Article 6(1)(f) GDPR.

5. Categories of personal data processed

The following categories of personal data are processed:

• Salutation, surname, first name
• Address with street, house number, postcode and city
• Email address

and similar data. The data is only used for internal purposes.

6. Source of data

The controller has collected your data directly from you.

7. Recipients or categories of recipients of personal data

The recipient of the data is the controller or an affiliated company entrusted with processing the data.

8. Transfer of personal data to any third country

Not intended.

9. Duration of storage of personal data

The personal data will be deleted at the latest after six months if no longer needed for the above purpose.

10. Your rights as data subject

You have the following rights under the EU General Data Protection Regulation:
If your personal data is processed, you have the right of access to personal data concerning you that is stored (Article 15 GDPR).

If inaccurate personal data is processed, you have the right to rectification (Article 16 GDPR).
If the legal requirements are met, you have the right to obtain deletion or restriction of processing or to object to the processing (Articles 17, 18 and 21 GDPR).

If you have consented to data processing or processing is based on a contract and data processing is carried out by automated means, you may be entitled to data portability (Article 20 GDPR).
If you make use of the above rights, the controller will verify that the legal requirements for doing so are met.

To exercise your rights, please contact the Data Protection Officer. If you have any complaints regarding data protection, you can contact the competent supervisory authority: Bayerisches Landesamt für Datenschutzaufsicht (Bavarian Data Protection Authority), Promenade 27, 91522 Ansbach, Germany.

1. Processing activity

This Data Protection Notice applies in connection with the customer satisfaction survey on the performance of services for wash systems by WashTec Cleaning Technology GmbH and its subsidiaries. Participation in the customer satisfaction survey is voluntary. This Data Protection Notice applies in addition to the Supplier/Business Partner Data Protection Notice.

2. Name and contact details of controller

WashTec Cleaning Technology GmbH, Argonstraße 7, 86153 Augsburg, Germany
Phone: +49 (0)821 5584 0; email: washtec[at]washtec.de

3. Contact details of company Data Protection Officer:

WashTec Cleaning Technology GmbH
Data Protection Officer
Argonstrasse 7, 86153 Augsburg, Germany.
Phone: +49 (0)821 5584 1111; email: datenschutzbeauftragter[at]washtec.de

4. Purpose and legal basis of processing

Your data is processed to assign, send out and evaluate the survey and to clarify matters in the event of any reported problems. Participation in the customer satisfaction survey is voluntary and the legal basis for processing your data is therefore Article 6(1)(f) GDPR.

5. Categories of personal data processed

The following categories of personal data are processed:

• Customer master data such as form of address, surname and first name
• Business contact details, including email address
• Other data of a similar nature.

6. Source of data

The controller has collected your data directly from you.

7. Recipients or categories of recipients of personal data

The recipient of the data is the controller or an affiliated company entrusted with evaluating the survey.

8. Transfer of personal data to any third country

Not intended.

9. Duration of storage of personal data

The personal data will be deleted at the latest after two years if no longer needed for the above purpose.

10. Your rights as data subject

You have the following rights under the EU General Data Protection Regulation:
If your personal data is processed, you have the right of access to personal data concerning you that is stored (Article 15 GDPR).
If inaccurate personal data is processed, you have the right to rectification (Article 16 GDPR).
If the legal requirements are met, you have the right to obtain deletion or restriction of processing or to object to the processing (Articles 17, 18 and 21 GDPR).
If you consented to data processing or processing were to be based on a contract and data processing were to be carried out by automated means, you may have a right to data portability (Article 20 GDPR).
If you make use of the above rights, the controller will verify that the legal requirements for doing so are met.

To exercise your rights, please contact the Data Protection Officer. If you have any complaints regarding data protection, you can contact the competent supervisory authority: Bayerisches Landesamt für Datenschutzaufsicht (Bavarian Data Protection Authority), Promenade 27, 91522 Ansbach, Germany.