Privacy Policy

1. Introduction

This privacy notice is to help you understand how we collect and process your personal data through your use of our site https://www.grafuk.co.uk, including any information you may provide through our site when you fill in any online form. We also process data on behalf of our customers as required for the purpose of processing quotations and orders.

Graf UK Limited, registered in England no. 8473746, is the data controller and we are responsible for your personal data (referred to as “we”, “us” or “our” in this privacy notice). Our full details are:

Regen House 

Beaumont Road 

Banbury 

OX16 1RH 

Phone: +44 (0) 1608 661500

Email: info@grafuk.co.uk

We are committed to protecting your privacy and will ensure that any processing of data is secure and only used for the stated purpose and handled in accordance with the General Data Protection Regulations of May 2018. By providing us with your data, you warrant to us that you are over 18 years of age.

It is very important that the information we hold about you is accurate and up to date. Please let us know if at any time your personal information changes by emailing us at info@grafuk.co.uk. If at any time you are unsure how we are handling or storing information about you then please contact us either at the address above or email us at info@grafuk.co.uk.

The following policy covers what, how and why we use data in points 2 to 5 and further information specifically relating to online activities and social media websites are also detailed in points 10 to 14.

2. What data do we collect about you?

Information is collected under the basis of both legitimate interest and lawful obligations. We only collect personal information such as first name, last name, title, billing address, delivery address, email address and telephone numbers. We also collect drawings and/or details specifically related to your personal property. We may also collect financial information such as your bank account and payment card details although payment card details are destroyed each time after use. We may also collect information about employment history, education and qualifications if you send a CV to us for a job application. If you contact us we may keep a record of that information that is relevant for our stated purposes.

When you access our website, the website provider automatically collects and stores information that your browser automatically transmits to us in “server log files”. These are:

Browser type and browser version

Operating system used

Referrer URL

Host name of the accessing computer

Time of the server request

IP address

This data will not be combined with data from other sources

3. How do we collect your personal data?

You may provide data by filling in forms on our website or by communicating with us by post, phone, in person and by email. Other data is collected automatically by our IT systems when you visit our website. This data is primarily technical data such as the browser and operating system you are using or when you accessed the page. This data is collected automatically as soon as you enter our website. We may also collect your data if you visit our premises for health and safety and security reasons. Other methods under which data is collected include social media sites and external third-parties acting as data processors.

4. How we use your personal data

We will only use your personal data when legally permitted and do so only for the following purposes in line with legitimate interests:

Dealing with your enquiries.

Fulfilling any contractural obligations wihen you order from us.

Keeping in contact with you to share relevant information.

Communicating in relation to job applications and employment

Part of the data is collected to ensure the propoer functioning of our website

To enable business improvement through statistical analysis

Addtionally, we will use your personal data for the following purposes in line with legal obligations.

Meeting health and safety regulations and for security purposes.

Keeping accurate financial and accounting purposes.

Meeting our legal requirements for keeping accurate records as governed by legislation. For example, keeping accounting records for a period of at least 6 years from the end of the last company financial year they relate to.

5. Legal basis for processing your personal data

Graf UK Ltd has concluded that the collection of personal data is necessary for its legitimate interest and legal obligations as a commercial business.

6. Disclosures of your personal data

We never pass on your personal data to any third parties outside Graf UK Ltd other than contracted parities operating under our instruction. Such contracted parties may include haulage companies, installers, suppliers, accountants, insurance companies, companies within the GRAF Group and others operating on our behalf.

7. Data security

We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, contractors and other third parties who have a business need to know such data. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. If you use this website, various pieces of personal data will be collected. Personal information is any data with which you could be personally identified. Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches.

8. Data retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

9. Your rights

You have the following right regarding your personal data

To be informed.

To request access to your personal data that we have collected about you.

To request us to recitfy your data if the data is no longer accurate or up-to-date.

To request us to block the processing of your data if that data is no longer accurate or up-to-date.

To object to our processing of your personal data under the lawful basis of legitimate interest.

To request erasure of your personal data under the lawful basis of legitimate interest.

You can see more about the rights at: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

If you wish to exercise any of the rights set out above, please email us at info@grafuk.co.uk. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We try to respond to all legitimate requests within one month. Occasionally it may take us longer than this if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Should you wish to raise a complaint about any way that we handle or process your personal data with the Information Commissioner’s Office in the UK they can be contacted at https://ico.org.uk/concerns/

10. Third party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

11. Cookies

Some of our web pages use cookies. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called “session cookies.” They are automatically deleted after your visit. Other cookies remain in your device’s memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site. You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website. To disable the cookies in your browser please follow this link, https://www.wikihow.com/Disable-Cookies. Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use (such as the shopping cart) are stored. The website operator has a legitimate interest in the storage of cookies to ensure an optimized service provided free of technical errors. If other cookies (such as those used to analyse your surfing behaviour) are also stored, they will be treated separately in this privacy policy. See Google analytics section.

12. Social media

Facebook plugins (Like and Share buttons)

Our website includes plugins for the social network Facebook, Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. The Facebook plugins can be recognized by the Facebook logo or the Like button on our site. For an overview of Facebook plugins, see https://developers.facebook.com/docs/plugins/.

When you visit our site, a direct connection between your browser and the Facebook server is established via the plugin. This enables Facebook to receive information that you have visited our site from your IP address. If you click on the Facebook “Like button” while you are logged into your Facebook account, you can link the content of our site to your Facebook profile. This allows Facebook to associate visits to our site with your user account. Please note that, as the operator of this site, we have no knowledge of the content of the data transmitted to Facebook or of how Facebook uses these data. For more information, please see Facebook’s privacy policy at https://www.facebook.com/about/privacy/update.

If you do not want Facebook to associate your visit to our site with your Facebook account, please log out of your Facebook account.

If you access our Facebook page from your own Facebook account, Facebook automatically collects data about your visit to our page. This data cannot be used to personally identify each individual that visits our page. We use this information under legitimate interests basis to monitor traffic in general on our page. If however, you like our page, like or comment on a post or send us a message on our page the system will automatically store information related to your identity in our Facebook log. We don’t use this information, unless there is a comment or a message that needs actioning.

Twitter plugin

Functions of the Twitter service have been integrated into our website and app. These features are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. When you use Twitter and the “Retweet” function, the websites you visit are connected to your Twitter account and made known to other users. In doing so, data will also be transferred to Twitter. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it will be used by Twitter. For more information on Twitter’s privacy policy, please go to https://twitter.com/privacy.

Your privacy preferences with Twitter can be modified in your account settings at https://twitter.com/account/settings.

If you access our Twitter page from your own Twitter account, Twitter automatically collects data about your visit to our page. This data cannot be used to personally identify each individual that visits our page. We use this information under legitimate interests basis to monitor traffic in general on our page. If however, you follow our page, like or retweet a tweet or send us a message on our page the system will automatically store information related to your identity in our Twitter log. We don’t use this information, unless there is a comment or a message that needs actioning.

LinkedIn plugin

Our website includes plugins for the social network LinkedIn, LinkedIn, Sunnyvale, California, USA. The LinkedIn plugins can be recognised by the LinkedIn logo at the bottom of our site.

When you visit our site, a direct connection between your browser and the LinkedIn server is established via the plugin. This enables LinkedIn to receive information that you have visited our site from your IP address. If you click on the LinkedIn button while you are logged into your LinkedIn account, you can link the content of our site to your LinkedIn profile. This allows LinkedIn to associate visits to our site with your user account. Please note that, as the operator of this site, we have no knowledge of the content of the data transmitted to LinkedIn or of how LinkedIn uses these data. For more information, please see LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy.

If you access our LinkedIn page from your own LinkedIn account, LinkedIn automatically collects data about your visit to our page. This data cannot be used to personally identify each individual that visits our page. We use this information under legitimate interests basis to monitor traffic in general on our page. If however, you like our page, like or comment on a post or send us a message on our page the system will automatically store information related to your identity in our LinkedIn log. We don’t use this information, unless there is a comment or a message that needs actioning.

13. Google Analytics

Google Analytics

This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.

IP anonymization

We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

Browser plugin

You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objecting to the collection of data

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.

For more information about how Google Analytics handles user data, see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Outsourced data processing

We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic data collection by Google Analytics

This website uses Google Analytics’ demographic features. This allows reports to be generated containing statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This collected data cannot be attributed to any specific individual person. You can disable this feature at any time by adjusting the ads settings in your Google account or you can forbid the collection of your data by Google Analytics as described in the section “Refusal of data collection”. We do have the option to run the demographic reports, however, we do not run them at the moment.

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”).

As part of Google AdWords, we use so-called conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is set. Cookies are small text files that your internet browser stores on your computer. These cookies expire after 30 days and are not used for personal identification of the user. Should the user visit certain pages of the website and the cookie has not yet expired, Google and the website can tell that the user clicked on the ad and proceeded to that page.

Each Google AdWords advertiser has a different cookie. Thus, cookies cannot be tracked using the website of an AdWords advertiser. The information obtained using the conversion cookie is used to create conversion statistics for the AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, advertisers do not obtain any information that can be used to personally identify users. If you do not want to participate in tracking, you can opt-out of this by easily disabling the Google Conversion Tracking cookie by changing your browser settings. In doing so, you will not be included in the conversion tracking statistics.

Conversion cookies are stored. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising. For now we don’t use Google Adwords but we do use conversion tracking on our website to optimize both our website.

For more information about Google AdWords and Google Conversion Tracking, see the Google Privacy Policy: https://policies.google.com/privacy?hl=en-GBgl=uk/ .

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website. To disable the cookies in your browser please follow this link, https://www.wikihow.com/Disable-Cookies.

14. Plugins and tools

YouTube

Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited.

If you’re logged in to your YouTube account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used to help make our website appealing. This constitutes a justified interest.

Further information about handling user data, can be found in the data protection declaration of YouTube under https://policies.google.com/privacy?hl=en-GBgl=uk .

Google Web Fonts

For uniform representation of fonts, this page uses web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

For this purpose your browser has to establish a direct connection to Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google Web fonts is done in the interest of a uniform and attractive presentation of our website. This constitutes a justified interest.

If your browser does not support web fonts, a standard font is used by your computer.

Further information about handling user data, can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy at https://www.google.com/policies/privacy/.

Google Maps

This site uses the Google Maps map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website. This constitutes a justified interest.

Further information about handling user data, can be found in the data protection declaration of Google at https://policies.google.com/privacy?hl=en-GBgl=uk.

15. Amendments

This Privacy Policy was reviewed in April 2020 and is subject to further amendments from time to time.

logo