This notice explains what data we process, why, how it is legal and your rights.
About Us and This Notice
This Privacy Notice applies to personal data collected through our website www.rollouki.com.
This Privacy Notice is provided by Finning (UK) Ltd ('we' or 'us'). We are a 'controller' for the purposes of the General Data Protection Regulation (EU) 2016/679 ("Data Protection Laws").
We take your privacy very seriously. We ask that you read this Privacy Notice carefully as it contains important information about our processing and your rights.
How to contact us
If you have any questions about this Privacy Notice, how we handle your personal data, or want to exercise any of your rights, please contact:
Changes to the Privacy Notice
We may change this Privacy Notice from time to time. You should check this Privacy Notice occasionally to ensure you are aware of the most recent version that will apply each time you access this website.
Current version: v0.1 April 2019
What Personal Data Do We Collect and Why?
Personal data provided by you
1. monitor our website usage to improve its content, layout and performance;
2. improve our services and products;
Information you submit
We process personal information about you (such as your name, address, email address and telephone number and anything else that you provide to us) when you contact us by filling in an enquiry form or a complaint form in order to respond to the enquiry or complaint you are making.
We also collect personal information when you contact us, send us feedback or complete surveys which we use to improve our services and products in the future.
If you sign up to receive marketing emails, we will use your name and email address to send you the material you have requested.
You can unsubscribe at any time by contacting us at the details set out above or clicking the unsubscribe link in the emails that you receive.
Sensitive personal data provided by you
We do not collect any sensitive personal data about you.
Personal information about other individuals
If you give us information on behalf of someone else, you confirm that the other person has appointed you to act on their behalf and has agreed that you can.
How Is Processing Your Personal Data Lawful?
We are allowed to process your personal data on the basis that it is in our legitimate interests to:
Please be aware that you have the right to object to the processing of your data of any of the legitimate interests identified.
Who Will Have Access to Your Personal Data?
Like any business, we use service providers to support the operation our website, such as website hosting (Amazon Web Services), enquiry functionality (Perficient Inc) and website user feedback collection (IPSOS). Some of these service providers will process your data as part of the services they offer to us. We take steps to ensure that our service providers treat your data in accordance with the law, only use it in accordance with our contract with them and keep it secure.
Your personal data may be shared across the Finning Group of companies – for example your personal data may be processed by a Finning Group company situated in the country from which you are accessing our website or the country in which you are purchasing our products and services, if different. Finning may store and process your personal data in Canada, Argentina, Bolivia, Chile and Republic of Ireland being the countries where Finning operates. Each Finning Group company storing or processing your personal data strives to implement appropriate technical and organisational measures in order to protect your personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorised disclosure or access and any other unlawful forms of processing.
Transfers of your information out of the EEA
We may transfer your personal data to Canada, Chile, Argentina, Bolivia and USA, all of which are located outside the European Economic Area:
Any transfer of your data will be carried out in accordance with the Data Protection Laws to safeguard your privacy rights and give you remedies in the unlikely event of a security breach or to any other similar approved mechanisms.
How we keep your data secure
We strive to implement appropriate technical and organisational measures in order to protect your personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorised disclosure or access and any other unlawful forms of processing. We aim to ensure that the level of security and the measures adopted to protect your personal data are appropriate for the risks presented by the nature and use of your personal data. We follow recognised industry practices for protecting our IT environment and physical facilities.
When Will We Delete Your Data?
The table below provides details about how long we will process your data.
DATA WE PROCESS
HOW LONG THIS WILL BE HELD FOR
Information from enquiry forms
Until the enquiry has been completed and no further responses are received for a reasonable period. If you are an existing customer, the enquiry may be added to other information that we hold about you as a customer.
For a period of up to 6 years after resolution of the complaint. If you are an existing customer, the complaint and its resolution may be added to other information that we hold about you as a customer.
Subscription / marketing requests
Until you tell us that you no longer wish to receive the subscription or marketing material.
As a data subject, you have the following legal rights:
If you would like to exercise your rights, please contact us at the details set out above.
We will respond to any rights that you exercise within a month of receiving your request, unless the request is particularly complex, in which case we will respond within three months.
Please note that exceptions apply to some of these rights which we will apply in accordance with the law.
Complaints to the regulator
If you do not think that we have processed your data in accordance with this Privacy Notice, you should let us know as soon as possible. You also have the right to complain to the Information Commissioner's Office. Information about how to do this is available on his website at www.ico.org.uk.