This privacy notice is to help you understand how we collect and process your personal data through your use of our site, http://www.grafuk.co.uk, including any information you may provide through our site when you fill out any online form. We also process data on behalf of our customers as required for the purpose of processing quotations and orders.
Graf UK Limited, registered in England no. 8473746, is the data controller, and we are responsible for your personal data (referred to as “we”, “us”, or “our” in this privacy notice). Our full details are:
Phone: +44 (0) 1608 661500
We are committed to protecting your privacy and will ensure that any processing of data is secure, only used for the stated purpose, and handled in accordance with the General Data Protection Regulations of May 2018. By providing us with your data, you warrant to us that you are over 18 years of age.
It is very important that the information we have about you is accurate and up-to-date. Please let us know if at any time your personal information changes by emailing us at email@example.com. If at any time you are unsure how we are handling or storing information about you, then please contact us either at the address above or email us at firstname.lastname@example.org.
The following policy covers what, how, and why we use data in points 2 to 5, and further information specifically relating to online activities and social media websites is also detailed in points 10 to 14.
2. What data do we collect about you?
Information is collected on the basis of both legitimate interests and lawful obligations. We only collect personal information such as first name, last name, title, billing address, delivery address, email address, and telephone numbers. We also collect drawings and/or details specifically related to your personal property. We may also collect financial information such as your bank account and payment card details, although payment card details are destroyed each time after use. We may also collect information about your employment history, education, and qualifications if you send a CV to us for a job application. If you contact us, we may keep a record of that information that is relevant for our stated purposes.
When you access our website, the website provider automatically collects and stores information that your browser automatically transmits to us in “server log files”. These are:
Browser type and browser version
Operating system used
Host name of the accessing computer
Time of the server request
This data will not be combined with data from other sources.
3. How do we collect your personal data?
You may provide data by filling out forms on our website or by communicating with us by post, phone, in person, or by email. Other data is collected automatically by our IT systems when you visit our website. This data is primarily technical, such as the browser and operating system you are using or when you accessed the page. This data is collected automatically as soon as you enter our website. We may also collect your data if you visit our premises for health, safety, and security reasons. Other methods by which data is collected include social media sites and external third parties acting as data processors.
4. How do we use your personal data?
We will only use your personal data when legally permitted, and we will do so only for the following purposes in line with legitimate interests:
Dealing with your enquiries.
Fulfilling any contractual obligations when you order from us.
Keeping in contact with you to share relevant information.
Communicating in relation to job applications and employment
Part of the data is collected to ensure the proper functioning of our website.
To enable business improvement through statistical analysis
Additionally, we will use your personal data for the following purposes in line with legal obligations:
Meeting health and safety regulations and for security purposes.
Keeping accurate financial and accounting purposes.
Meeting our legal requirements for keeping accurate records as governed by legislation, for example, keeping accounting records for a period of at least 6 years from the end of the last company financial year they relate to.
5. Legal basis for processing your personal data
Graf UK Ltd has concluded that the collection of personal data is necessary for its legitimate interests and legal obligations as a commercial business.
6. Disclosures of your personal data
We never pass on your personal data to any third parties outside Graf UK Ltd other than contracted parties operating under our instruction. Such contracted parties may include haulage companies, installers, suppliers, accountants, insurance companies, companies within the GRAF Group, and others operating on our behalf.
7. Data security
8. Data retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.
9. Your rights
You have the following rights regarding your personal data:
To be informed.
To request access to your personal data that we have collected about you.
Request that we rectify your data if it is no longer accurate or up-to-date.
To request that we block the processing of your data if that data is no longer accurate or up-to-date.
To object to our processing of your personal data under the lawful basis of legitimate interest.
To request the erasure of your personal data under the lawful basis of legitimate interest.
You can see more about the rights at: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.
If you wish to exercise any of the rights set out above, please email us at email@example.com. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We try to respond to all legitimate requests within one month. Occasionally, it may take us longer than this if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Should you wish to raise a complaint about any way that we handle or process your personal data with the Information Commissioner’s Office in the UK, they can be contacted at https://ico.org.uk/concerns/.
10. Third-party links
This website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
12. Social media
Facebook plugins (like and share buttons)
Our website includes plugins for the social network Facebook, Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. The Facebook plugins can be recognised by the Facebook logo or the Like button on our site. For an overview of Facebook plugins, see https://developers.facebook.com/docs/plugins/.
If you do not want Facebook to associate your visit to our site with your Facebook account, please log out of your Facebook account.
If you access our Facebook page from your own Facebook account, Facebook automatically collects data about your visit to our page. This data cannot be used to personally identify each individual that visits our page. We use this information on a legitimate interest basis to monitor traffic in general on our page. If, however, you like our page, like or comment on a post, or send us a message on our page, the system will automatically store information related to your identity in our Facebook log. We don’t use this information, unless there is a comment or a message that needs action.
Your privacy preferences with Twitter can be modified in your account settings at https://twitter.com/account/settings.
If you access our Twitter page from your own Twitter account, Twitter automatically collects data about your visit to our page. This data cannot be used to personally identify each individual that visits our page. We use this information on a legitimate interest basis to monitor traffic in general on our page. If, however, you follow our page, like or retweet a tweet, or send us a message on our page, the system will automatically store information related to your identity in our Twitter log. We don’t use this information unless there is a comment or a message that needs action.
Our website includes plugins for the social network LinkedIn, LinkedIn, Sunnyvale, California, USA. The LinkedIn plugins can be recognised by the LinkedIn logo at the bottom of our site.
If you access our LinkedIn page from your own LinkedIn account, LinkedIn automatically collects data about your visit to our page. This data cannot be used to personally identify everyone that visits our page. We use this information on a legitimate interest basis to monitor traffic in general on our page. If, however, you like our page, like or comment on a post, or send us a message on our page, the system will automatically store information related to your identity in our LinkedIn log. We don’t use this information unless there is a comment or a message that needs action.
13. Google Analytics
This website uses Google Analytics, a web analytics service. The company that runs it is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored. The website operator has a legitimate interest in analysing user behaviour to optimise both its website and its advertising.
We have activated the IP anonymization feature on this website. Prior to transmission to the United States, Google will shorten your IP address within the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
You can prevent these cookies from being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objecting to the collection of data
You can prevent the collection of your data by Google Analytics by clicking on the following link: An opt-out cookie will be set to prevent your data from being collected on future visits to this site. Disable Google Analytics.
Outsourced data processing
We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic data collection by Google Analytics
This website uses Google Analytics’ demographic features. This allows reports to be generated containing statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This collected data cannot be attributed to any specific individual. You can disable this feature at any time by adjusting the ad settings in your Google account, or you can forbid the collection of your data by Google Analytics as described in the section “Refusal of Data Collection.” We do have the option to run the demographic reports; however, we do not run them at the moment.
Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising programme from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”).
As part of Google AdWords, we use so-called conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is set. Cookies are small text files that your internet browser stores on your computer. These cookies expire after 30 days and are not used for personal identification by the user. If the user visits certain pages of the website and the cookie has not yet expired, Google and the website can tell that the user clicked on the ad and proceeded to that page.
Each Google AdWords advertiser has a different cookie. Thus, cookies cannot be tracked using the website of an AdWords advertiser. The information obtained using the conversion cookie is used to create conversion statistics for the AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, advertisers do not obtain any information that can be used to personally identify users. If you do not want to participate in tracking, you can opt out of this by easily disabling the Google Conversion Tracking cookie by changing your browser settings. In doing so, you will not be included in the conversion tracking statistics.
Conversion cookies are stored. The website operator has a legitimate interest in analysing user behaviour to optimise both its website and its advertising. For now, we don’t use Google Adwords, but we do use conversion tracking on our website to optimise both.
14. Plugins and tools
Google runs YouTube, which provides plugins for our website. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here, the YouTube server is informed about which of our pages you have visited.
If you’re logged in to your YouTube account, YouTube allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used to help make our website appealing. This constitutes a justified interest.
Further information about handling user data can be found in the data protection declaration of YouTube under https://policies.google.com/privacy?hl=en-GBgl=uk.
Google Web Fonts
For a uniform representation of fonts, this page uses web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
For this purpose, your browser has to establish a direct connection to Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google Web fonts is done in the interest of a uniform and attractive presentation of our website. This constitutes a justified interest.
If your browser does not support web fonts, your computer will use a standard font.
This site uses the Google Maps map service via an API. The company that runs it is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website. This constitutes a justified interest.
Further information about handling user data can be found in the data protection declaration of Google at https://policies.google.com/privacy?hl=en-GBgl=uk.