Our website address is: www.plantparts4u.co.uk
Thank you for your interest in our website. Data protection is a high priority for the management of Plantparts4u. The use of our Internet pages of Plantparts4u is possible without submitting any personal data. If a visitor uses services via our website, such as purchases or contacting us, processing of personal data is necessary. If the processing of personal data is necessary and there isn’t statutory basis for such processing, we obtain consent from visitors. Because of this we continue to have trusted relationships with our customers.
Processing of data, such as name, address, e-mail address, or telephone number is in line with General Data Protection Regulation. (GDPR). This will always be in accordance with the country-specific data protection regulations applicable to Plantparts4u. This policy informs of the nature, scope, and purpose of the personal data we collect, use and process. Visitors are informed, by this data protection policy, of the rights which they are entitled.
Plantparts4u has technical and organisational measures to ensure the protection of personal data processed through this website. However, Internet-based data transmissions have security gaps, so absolute protection can not be guaranteed. Every visitor is free to transfer personal data via alternative means, e.g. by telephone, email etc as preferred.
The data protection declaration of Plantparts4u is based on terms used by the European legislator for the adoption of GDPR. Our data protection declaration is legible and understandable for the general public, as well as our customers and business partners. To ensure this, we would like to first explain the terminology used.
In this data protection declaration, we use, inter alia, the following terms:
Personal data means any information relating to an identified or identifiable natural person (“visitor”). An identifiable person is one who is identifiable, directly or indirectly, in particular by reference to an identifier. These are name, identification number, location data, on-line identifier or factors specific to the physical identity of that person.
A visitor is an identified or identifiable natural person, whose personal data is processed by the controller.
Processing is any operation or set of operations which is performed on personal data or on sets of personal data.
Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future.
Profiling means processing personal data to evaluate certain aspects relating to a person. In particular to analyse or predict aspects concerning that person’s personal preferences, interests, reliability, behaviour, location or movements.
Pseudonymisation is processing data so that it can not be attributed without additional information.
Controller is the person, alone or jointly with others, determines the purposes and means of the processing of personal data.
Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination is allowed to be provided for by Union or Member State law.
Processor is a natural or legal person, public authority, agency or body which processes personal data for the controller.
The recipient is a natural or legal person, public authority, agency or body who personal data is disclosed. Public authorities who receive personal data in accordance with Union or Member State law are not regarded as recipients. The processing of data by public authorities is in compliance with applicable GDPR rules according to the purposes of processing.
Third party is a natural or legal person, public authority, agency or body other than the visitor, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
Consent of the visitor is any freely given, specific, informed and unambiguous indication of the visitor’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:
A Newton Plant LTD – trading as Plantparts4u
9 Hazel Grove
Longridge, Preston, PR3 3HG
Phone: +44 (0)1772 284622
The website of Plantparts4u collects general data and information when a visitor or automated system visits the website. This general data and information are stored in the server log files.
Collected information may be;
the browser types and versions used,
the operating system used by the accessing system,
the website from which an accessing system reaches our website (so-called referrers),
the date and time of access to the Internet site,
an Internet protocol address (IP address),
the Internet service provider of the accessing system, and
When using these general data and information, Plantparts4u does not draw any conclusions about the visitor. The information collected we use to;
(1) deliver the content of our website correctly,
(2) optimize the content of our website as well as its advertisement,
(3) ensure the long-term viability of our information technology systems and website technology, and
(4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack.
Plantparts4u analyzes data and information statistically, with the aim of increasing the data protection and data security of our enterprise. We aim to ensure an optimal level of protection for the personal data we process. We store all of the anonymous data of the server log files separately from all personal data.
The controller will process and store personal data of visitors for the period necessary to achieve the purpose of storage.
When the data is no longer needed, or the storage period expires, the personal data is blocked and erased in accordance with legal requirements.
Each visitor has the right to confirm whether or not personal data concerning them are being processed. If a visitor wishes to avail this confirmation, he or she may, at any time, contact email@example.com.
Visitors have the right to obtain information about their personal data stored at any time. Furthermore, the European directives and regulations grant the visitor access to the following information:
the purposes of the processing;
the categories of personal data concerned;
the categories of recipients the data has been or will be disclosed, in particular in third countries or international organisations.
the period for which data will be stored, or, if not the criteria used to determine that period.
the existence of the right to lodge a complaint with a supervisory authority;
where the personal data are not collected from the visitor, any available information as to their source;
the existence of decision-making, referred to in Article 22(1)(4) of the GDPR and, information about the method and the consequences of processing for the visitor.
the visitor can obtain information as to whether data are transferred to anyone else. Where this happens, the visitor will be informed of the appropriate safeguards relating to the transfer.
If a visitor wishes to get this right of access, he or she may, at any time, contact sales@Plantparts4u.co.uk.
Each visitor has the right to rectify inaccurate personal data concerning him or her. The visitor shall have the right to have incomplete data completed by providing a supplementary statement.
If a visitor wishes to exercise this right to rectification, he or she may, at any time, contact sales@Plantparts4u.co.uk.
Each visitor has the right to the erasure of personal data concerning them without delay. The controller will obligated to delete personal data without delay where one of the following grounds applies;
as long as the processing is not necessary:
the personal data is not needed in relation to the purposes for which they were collected or otherwise processed.
the visitor withdraws consent to which the processing is based according to point (a) of Article 6(1) of the GDPR, or point (a) of Article 9(2) of the GDPR and;
the visitor objects to processing pursuant to Article 21(1) of GDPR and there are no grounds for the processing, or objects to the processing pursuant to Article 21(2) of GDPR.
Personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.
If one of the above reasons applies, and this results in a visitor wishing to request the deletion of personal data stored by Plantparts4u, they can, at any time, contact sales@Plantparts4u.co.uk.
After requesting this an employee of Plantparts4u will ensure that the request is complied with immediately.
Where the controller has made personal data public and is obliged pursuant to Article 17(1) to delete the personal data, the controller will, inform other controllers that the visitor has requested deletion of any links to, or copy or replication of, those personal data, as far as processing is not required. An employee of Plantparts4u will arrange the necessary measures.
Each visitor has the right granted by the European legislator to obtain restriction of processing where one of the following applies;
the accuracy of the personal data has been reported as false by the visitor.
the processing is unlawful and the visitor opposes the erasure of the personal data and requests instead the restriction of their use instead.
the controller does not need the personal data for the purposes of the processing, but they are required by the visitor for the establishment, exercise or defence of legal claims.
the visitor has objected to processing pursuant to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override those of the visitor.
if one of the aforementioned conditions is met, and a visitor requests the restriction of the processing of personal data stored by Plantparts4u, he or she should contact sales@Plantparts4u.co.uk. An employee of Plantparts4u will arrange the restriction of the processing.
Each visitor has the right to receive personal data concerning them, which was provided to a controller, in a machine-readable format.
They shall have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided. As long as the processing is based on consent pursuant to point (a) of Article 6(1) of the GDPR or point (a) of Article 9(2) of the GDPR, or on a contract pursuant to point (b) of Article 6(1) of the GDPR. The processing is carried out by automated means, as long as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising his or her right to data portability pursuant to Article 20(1) of the GDPR, the visitor shall have the right to have personal data transmitted directly from one controller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others.
In order to assert the right to data portability, the visitor may at any time contact sales@Plantparts4u.co.uk.
Each visitor has the right granted by the European legislator to object, on grounds relating to his or her particular situation, at any time, to processing of personal data concerning him or her, which is based on point (e) or (f) of Article 6(1) of the GDPR. This also applies to profiling based on these provisions.
Plantparts4u shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the visitor, or for the establishment, exercise or defence of legal claims.
If Plantparts4u processes personal data for direct marketing purposes, the visitor shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This applies to profiling to the extent that it is related to such direct marketing. Following the visitor objecting to Plantparts4u processing the date for direct marketing purposes, Plantparts4u will no longer process the personal data for these purposes.
To exercise the right to object, the visitor may contact any employee of Plantparts4u. In addition, the visitor is free in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to use his or her right to object by automated means using technical specifications.
Each visitor has the right granted by the European legislator not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her, or similarly significantly affects him or her, as long as the decision (1) is not is necessary for entering into, or the performance of, a contract between the visitor and a data controller, or (2) is not authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the visitor’s rights and freedoms and legitimate interests, or (3) is not based on the visitor’s explicit consent.
If the decision;
is necessary for entering into, or the performance of, a contract between the visitor and a data controller, or
it is based on the visitor’s explicit consent, Plantparts4u shall implement suitable measures to safeguard the visitor’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.
If the visitor wishes to exercise the rights concerning automated individual decision-making, he or she may, at any time, contact sales@Plantparts4u.co.uk.
Each visitor shall have the right granted by the European legislator to withdraw his or her consent to processing of his or her personal data at any time. Following this request all data will be deleted.
If the visitor wishes to exercise the right to withdraw the consent, he or she may, at any time, contact sales@Plantparts4u.co.uk.
Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the visitor is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6(1) lit. b GDPR.
The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services. Plantparts4u is subject to a legal obligation to process personal data for the fulfilment of tax obligations, the processing is based on Art. 6(1) lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the visitor or of another natural person.
This is the case, for example, if a visitor is injured in Plantparts4u and his name, age, health insurance data or other vital information will be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1) lit. d GDPR.
Finally, processing operations could be based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which are not covered by any of the above mentioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by Plantparts4u or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the visitor which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator.
Where the processing of personal data is based on Article 6(1) lit. f GDPR our legitimate interest is to carry out our business in favour of the well-being of all our employees and/or shareholders.
The criteria used to determine the period of storage of personal data is the respective statutory retention period. After that period the data is deleted.
The provision of personal data is partly required by law (e.g. tax regulations). Sometimes it is necessary to conclude a contract that the visitor provides us with personal data, which is subsequently processed by us.
The visitor is, for example, obliged to provide us with personal data when Plantparts4u signs a contract with him or her. The non-provision of the personal data would have the consequence that the contract with the visitor could not be concluded. Before personal data is provided by the visitor, the visitor must contact sales@Plantparts4u.co.uk. Plantparts4u clarifies to the visitor whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and the consequences of non-provision of the personal data.
As a responsible company, we do not use automatic decision-making or profiling.