Home > Data protection

Data protection

 

Data privacy statement in accordance with GDPR


I.        Name and address of controller

WestWood Liquid Technologies Limited
Unit 12 Albany Park
Cabot Lane,
Poole BH17 7BX
Dorset
United Kingdom

Phone: +44 800 808 5480
E-mail: info@westwood-uk.com
Website: www.westwood-uk.com
 
is the controller as defined by the EU General Data Protection Regulation (GDPR) and other national data protection legislation.


II.       Name and address of data protection agent

EU-CON BeraterForum GmbH
Mr Markus Weuthen
Waldfeuchter Str. 266
52525 Heinsberg, Germany
Phone: +49 2452-993321
E-mail: datenschutz@westwood.de

 
III.      General information about data processing

1. Extent of personal data processing
We only collect and use the personal data of users of our website in so far as this is required to provide a functional website, together with our contents and services.

We only collect and use the personal data of our users if we have obtained their consent to do this. An exception to this principle applies in cases where statutory provisions permit the processing of such data or where actual circumstances make it impossible to obtain prior consent.


2. Legal basis for the processing of personal data
The lawfulness of processing personal data is essentially based on the following:

  • Art. 6 clause 1 point (a) GDPR if consent has been obtained from the data subject.
  • Art. 6 clause 1 point (b) GDPR where processing is necessary for the performance of a contract to which the data subject is party. This also includes processing necessary to carry out precontractual measures.
  • Art. 6 clause 1 point (c) GDPR applies to processing that is necessary for compliance with a legal obligation.
  • Art. 6 clause 1 point (d) GDPR applies to processing that is necessary to protect the vital interests of the data subject or of another natural person.
  • Art. 6 clause 1 (f) GDPR applies if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party and if such interests or fundamental rights and freedoms of the data subject do not override the first-mentioned interests.

 

3. Data deletion and storage period
The personal data of users are erased or barred as soon as the purpose of storage no longer applies. Further storage of such data is only possible if provided for by the European or national legislature in EU directives, laws or other regulations to which the controller is subject. The data are also barred or erased if the storage period stipulated by one of the mentioned norms expires, unless it is necessary to continue storing the data for the conclusion or performance of a contract.


IV.          Use of our website, general information

1. Description and extent of data processing
Each time our website is visited, our system automatically collects data and information from the user's computer system. The following information is collected: 

(1)    Information about the browser type and the version used

(2)    The user's operating system

(3)    The user's IP address

(4)    Date and time of access

(5)    Websites from which the user's system reaches our website

(6)    Websites that are accessed by the user's system via our website

The log files contain IP addresses and other data allowing these to be traced back to the user. This could be the case, for instance, if the link to the website from which the user accesses our website, or the link to the website to which the user switches, contains personal data.

The data described are stored in the log files of our system. Such data are not stored together with other personal data relating to the user.

 
2. Purpose and legal basis for data processing
The temporary storage of the IP address by our system is necessary to make it possible for the website to be delivered to the user's computer. This requires the user's IP address to be stored for the duration of the session.

The data are stored in log files to ensure that the website can function properly. Furthermore, the data help us to improve our website and to safeguard the security of our IT systems. The data are not analysed for marketing purposes in this context.

The lawfulness of the temporary storage of data and log files is based on art. 6 clause 1 point (f) GDPR.

The collection of your personal data is essential for the availability of our website and the storage of data in log files is essential for operation of the website. Consequently the user does not have the opportunity to object.
 
3. Duration of storage
Your data are deleted as soon as they are no longer required to achieve the purpose for which they were collected. If your data are collected to ensure availability of our website, the data will be erased at the end of the session.

If your data are stored in log files, the data will be erased after seven days at the latest. Further storage is possible, but in this case the IP addresses of users will be erased or anonymised. As a result the data can no longer be traced back to the accessing client.


V.        General information about the use of cookies
We use cookies on our website. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When you visit a website, a cookie may be stored on your operating system. This contains a characteristic character string that allows the browser to be uniquely identified when the website is reopened.
We use cookies to make our homepage more user-friendly. Some elements of our website require that the browser can be identified even after a page change.
The legal basis for the processing of personal data using cookies results from Art. 6 para. 1 lit. f DSGVO. The purpose of using the technically necessary cookies is to simplify the use of our website.
Cookies are stored on the user's computer and transmitted to our site. As a user, you therefore have control over the use of cookies. You can restrict or deactivate the transmission of cookies by making changes to the settings of your Internet browser. Stored cookies can also be deleted there. Please note that if you deactivate cookies, you may no longer be able to use all the functions of our website.

 
VI.     Your rights / rights of the data subject
Under the EU General Data Protection Regulation you, as data subject, have the following rights:

1. Right to information
You have the right to be informed by us, the controller, about whether we process personal data concerning you as an individual.
In addition you could demand information about the following:

(1)          the purpose of data processing;

(2)          the categories of processed personal data;

(3)          the recipients or categories of recipients to whom personal data concerning you was disclosed or is still being disclosed;

(4)          the planned period for which personal data concerning you is stored or, if no specific information about this is possible, the criteria for determining the storage period;

(5)          insisting on a right to have personal data concerning you rectified or erased, a right to restrict processing by the controller or a right to object to such processing;

(6)          the existence of a right to complain to a supervisory authority;

(7)          all available information about the origin of data if the personal data were not collected from the data subject;

(8)          the existence of automated decision-making, including profiling, in accordance with
art. 22 clauses 1 and 4 GDPR and - at least in these cases - clear information about the logic involved as well as the scope and intended implications of such processing for the data subject.

Finally you also have the right to information about whether your personal data are transferred to a third country or to an international organisation. In such a case you can demand information about appropriate safeguards in accordance with art. 46 GDPR in connection with the transfer.
To exercise your right to be informed you can email info@westwood-uk.com

send a letter to:

WestWood Liquid Technologies Limited
Unit 12 Albany Park
Cabot Lane,
Poole BH17 7BX
Dorset


 
2. Right to rectification
If the personal data processed by us and concerning you should be incorrect or incomplete, you have the right to demand that we rectify and/or complete the data. The data will be rectified without delay.
 
3. Right to restriction
The right to restriction of processing personal data concerning you may be exercised in the following cases:

(1)          the correctness of personal data is disputed for a period that makes it possible for the controller to check the correctness of the personal data;

(2)          the processing is unlawful and erasure of the personal data is refused - instead, restriction of the utilisation of personal data is demanded;

(3)          the controller no longer needs the personal data for the purposes of processing, although the data subject needs the data for the establishment, exercise or defence of legal claims, or

(4)          the data subject has objected to processing in accordance with art. 21 clause 1 GDPR and it has yet been determined whether the legitimate reasons of the controller override those of the data subject.

If processing of the personal data concerning you has been restricted, such data - with the exception of storage - may only be processed with your consent or for the establishment, exercise or defence of defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

If a restriction applies to processing in accordance with the principles outlined above, we will notify you before the restriction is lifted.
 
4. Right to erasure
In one of the reasons listed below applies, you can demand immediate erasure of the personal data concerning you. The controller is required to erase the data without delay. The reasons are as follows:

(1)          The personal data concerning you are no longer required for the purposes for which they were collected or processed in any other way.

(2)          Processing is subject to consent in accordance with art. 6 clause 1 point (a) or art. 9 clause 2 point (a) GDPR and you are withdrawing consent. A further prerequisite is that there is no other legal basis for processing.

(3)          You object to processing (art. 21 clause 1 GDPR) and there are no overriding legitimate grounds for processing. A further option is that you object to processing under art. 21 clause 2 GDPR.

(4)          The personal data concerning you are being processed unlawfully.

(5)          Erasure of the personal data concerning you is required to fulfil a legal obligation and Union law or the law of the Member States to which the controller is subject.

(6)                         The personal data concerning you were collected with reference to services offered by the information society as set out in art. 8 clause 1 GDPR.

If we have made public the personal data concerning you and if, under art. 17 clause 1 GDPR we are required to erase the data, we will take suitable measures, including measures of a technical nature, taking the available technology and implementation costs into account, to notify those responsible for data processing and who process the personal data, that you, as the individual concerned, have demanded the erasure of all links to these personal data or of copies of these personal data.

Please note that the right to erasure does not apply if processing is necessary

(1)          to exercise the right to freedom of expression and information;

(2)          to meet a legal obligation necessitating processing under the law of the Union or the Member States to which the controller is subject, or to carry out a task that is in the public interest or in the exercise of official authority vested in the controller;

(3)          for reasons of public interest relating to public health as set out in art. 9 clause 2 points (h) and (i) as well as art. 9 clause 3 GDPR;

(4)          for archiving purposes in the public interest, for scientific or historical research purposes or statistical purposes in accordance with art. 89 clause 1 GDPR, in so far as the right mentioned in clause 1 is reasonably likely to render impossible or seriously impair the realisation of the purposes of such processing, or

(5)          for the establishment, exercise of defence of legal claims.


5. Right of notification
If you have exercised your right to rectification, erasure or restriction of processing, we are required to notify all recipients to whom the personal data concerning you have been disclosed of such rectification or erasure of data or restriction of processing, unless this proves to be impossible or associated with unreasonable expense. Furthermore, you have the right to be informed about these recipients.
 
6. Right to data portability
Under GDPR you also have the right to obtain the personal information provided and concerning you in a structured, commonly used and machine-readable format. In addition, you have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where

  • the processing is based on consent pursuant to art. 6 clause 1 point (a) GDPR or art. 9 clause 2 point (a) GDPR or on a contract pursuant to art. 6 clause 1 point (b) GDPR and
  • the processing is carried out by automated means.

Finally, in exercising your right to data portability you have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible and providing that this does not adversely affect the freedoms and rights of others.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
 
7. Right to withdraw your declaration of consent in accordance with data protection regulations
You have the right to withdraw your declaration of consent in accordance with data protection regulations at any time. Please note that withdrawing your consent will not affect the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.

 
8. Right to object
Furthermore, you have the right derived from your particular circumstances, to object to the processing of the personal data concerning you at any time, in accordance with art. 6 clause 1 point (e) or (f) GDPR. The right to object also applies to profiling based on these regulations.

The controller will no longer process the personal data concerning you unless the controller can establish compelling reasons meriting protection with regard to processing, where such reasons override your interests, rights and freedoms, or where such processing serves the establishment, exercise or defence of legal rights.

If the personal data concerning you are processed for direct marketing purposes, you have the right at any time to object to the processing of the personal data concerning you for the purpose of such marketing. This also applies to profiling, in so far as this is connected with such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

Furthermore you have the option, in connection with using the services of the information society (directive 2002/58/EC notwithstanding), to exercise your right to object by automated means using technical specifications..

9. Automated individual decision-making, including profiling
Under the EU GDPR you also have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly has a significant adverse effect on you. However, this does not apply if the decision

 (1)          is necessary for entering into or performance of a contract between you and the controller,

(2)          is permissible under the laws of the Union or of the Member States to which the controller is subject, and these laws contain appropriate measures to safeguard your rights and freedoms as well as your justified interests or

(3)          has been taken with your express consent.

 If the processing is carried out within the scope of the cases outlines in sections (1) and (3) above, the controller will take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests. This includes at least the right to obtain human intervention on the part of the controller, to express your own point of view and to contest the decision.

The decision referred to in (1) - (3) must not be based on the special categories of personal data referred to in art. 9 clause 1 GDPR unless art. 9 clause 2 point (a) or (g) applies and if suitable measures to protect your rights and freedoms as well as your legitimate interests are in place.
 
10. Right to lodge a complaint with a supervisory authority
Finally, if you believe that the processing of the personal data concerning you is in breach of the GDPR, you have the right to lodge a complaint with a supervisory authority, especially, but not limited to, in the Member State where you are resident, where you have your place of work or where the suspected breach has occurred.

 
VII.      Newsletter

1. General information
You can subscribe to a free newsletter on our website. The newsletter provides you with information about our current interesting offers. The advertised goods and services and listed in the declaration of consent. The data you enter in the input mask when you register are transmitted to us.

Based on the consent obtained from you within the scope of the registration process, we collect the following data: Surname, first name, email address.

There is no transfer of your data in connection with the data processing for sending out newsletters. The data are used exclusively for sending out the newsletter.
 
2. Double opt-in and logging
Newsletter registration is subject to a double opt-in procedure. Once you have registered with us, you will receive an email asking you to confirm your registration. This confirmation is required to ensure that no one can register using another person's email address.

Newsletter registrations are logged so that we can prove compliance with legal requirements. This includes storing the date and time of registration and confirmation, as well as the IP address.
 
3. Legal basis
The legal basis for the processing of data when the user's consent has been obtained is art. 6 clause 1 point (a) GDPR. We collect the user's email address to send out the newsletter.
 
4. Erasure, revocation and objection
Your data are deleted as soon as they are no longer required to achieve the purpose for which they were collected. Consequently your email address will be stored for as long as your subscription to the newsletter is active. You can unsubscribe from the newsletter at any time by withdrawing consent. Every newsletter contains a link for this purpose.

Also please note that you can object to the future processing of your personal data at any time in accordance with art. 21 GDPR. You can object in particular to processing for the purposes of direct marketing.
 
5. Direct marketing service provider
Our newsletters are sent out by "MailChimp", a newsletter mailing platform operated by the US-based Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

The email addresses of our newsletter recipients, as well as their further data described in this document, are stored on MailChimp's servers in the USA. MailChimp uses this information to send out and evaluate the newsletter on our behalf. Furthermore, MailChimp, according to information provided by the company, may use such data to optimise or improve its own service, e.g. for the technical optimisation of dispatch and presentation of the newsletters or for commercial purposes, to determine the countries where the recipients are located. However, MailChimp does not use the data of our newsletter recipients to write to them directly on its own behalf or to transmit the data to third parties.

We have confidence in MailChimp's reliability as well as the company's IT and data security. MailChimp is certified under the "Privacy Shield", a US-EU data protection agreement, and is thereby committed to comply with EU data protection requirements.  In addition we have concluded a data processing agreement with MailChimp. This is a contract under which MailChimp undertakes to protect the data of our users, to process the data on our behalf in accordance with its data protection policy and in particular not to transmit the data to third parties. MailChimp's data protection policy can be viewed here: https://mailchimp.com/

 
VIII.     Electronic contacting

If you want to contact us, you will find a contact form on our website. You can use this form to contact us electronically. The data entered in the input mask will be sent to us and stored by us. These data are:

(1)    Name*

(2)    Company name and function, if applicable

(3)    Address

(4)    Country

(5)    Telephone number

(6)    Email address*

*Mandatory fields

You also have the option of contacting us using the email address provided. In this case the user's personal data transferred with the email will be stored.

Your data will not be forwarded to third parties in this context, and the data will be used exclusively to process your communication.

The legal basis for the processing of data when the user's consent has been obtained is art. 6 clause 1 point (a) GDPR. The legal basis for the processing of data transferred with the transmission of an email is art. 6 clause 1 point (f) GDPR. If the aim of the email communication is the conclusion of a contract, the additional legal basis for the processing of data is art. 6 clause 1 point (b) GDPR.

In this context the personal data are processed solely for the purpose of dealing with the communication. If you contact us by email, this is also associated with the necessary justified interest in processing the data.

If additional personal data are to be processed during the mailing process, their purpose is only to prevent misuse of the contact form and to safeguard the security of our IT systems.

Your data are deleted as soon as they are no longer required to achieve the purpose for which they were collected. As regards the personal data obtained from the contact form's input mask and those sent to us by email this applies when the relevant conversation with you has ended. The conversation is deemed to have ended when it can be deduced that the matter under discussion has been finalised.

You can withdraw consent for the processing of your personal data at any time. Even if you have contacted us by email, you can object to the storage of your personal data at any time. However, please note that in that event the conversation cannot be continued.

The email with the newsletter includes the option of unsubscribing. To this end a link is included at the end of the newsletter and you have the option of giving your reason for unsubscribing.

All personal data stored when you contacted us will be deleted in this event.


IX.       Web analytics

1. Use of Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses cookies, i.e. text files, that are stored on your computer to facilitate an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. If you activate IP anonymisation on this website, Google first shortens your IP address within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports about website activities and to provide further services for the website operator with regard to website and internet use.

The IP address transmitted by your browser for the purpose of Google Analytics will not be combined with other data collected by Google.

You can use the appropriate setting in your browser software to prevent cookies from being saved; however, we would like to point out that in such an event you may not be able to make full use of all the functions of this website.  In addition you can prevent the data generated by the cookie and relating to your use of the website (including your IP address) from being collected by Google and you can prevent such data from being processed by Google by using the following link to download and install the relevant browser plug-in: http://tools.google.com/dlpage/gaoptout?hl=en.

This website uses Google Analytics with the extension "_anonymizeIp()".
As a consequence, IP addresses are shortened before they are further processed, thereby excluding the possibility that they can be traced back to an individual. In so far as the data collected about you take on a personal reference, this is immediately barred and the personal data are therefore erased without delay.

We use Google Analytics so that we can analyse and regularly improve the use of our website. The statistics obtained in this way help us to improve our offering and make it more interesting for you as user. For the exceptional cases where personal data are transmitted to the USA, Google has undertaken to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
 
Information about the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of service: http://www.google.com/analytics/terms/gb.html, Overview of data privacy and security: https://support.google.com/analytics/answer/6004245?hl=en, as well as the privacy policy: https://policies.google.com/privacy?hl=en.

 
X.        Social media

 1. Embedding of YouTube videos
We have embedded YouTube videos in the "Multimedia" section of our website. These are stored at http://www.YouTube.com and can be viewed directly from our website..

When you visit the website, YouTube receives the information that you have accessed the appropriate subpage on our website. This is done irrespective of whether YouTube makes a user account available via which you are logged in, or whether no such user account exists. If you are logged into Google, your data will be related directly to your account. If you do not want YouTube to relate your profile to your account, you must log out before you click on the button. YouTube stores your data as usage profiles and only uses them for the purposes of marketing, market research and/or the customisation of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you will need to contact YouTube to exercise this right.

For further information about the purpose and scope of data collection and processing by YouTube please refer to the relevant data privacy statement. This also contains more information about your rights and the settings available to protect your privacy: https://policies.google.com/privacy?hl=en . Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
 
2. Embedding of Google Maps
In the "Contact" section of our website we make use of the Google Maps offering. This allows us to display interactive maps directly on our website, thereby providing a convenient way for you to use the map function.

When you visit the website, Google receives the information that you have accessed the appropriate subpage on our website. In addition the data mentioned in section IV of this statement are transmitted to Goggle. This is done irrespective of whether Google makes a user account available via which you are logged in, or whether no such user account exists. If you are logged into Google, your data will be related directly to your account. If you do not want Google to relate your profile to your account, you must log out before you click on the button. Google stores your data as usage profiles and only uses them for the purposes of marketing, market research and/or the customisation of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you will need to contact Google to exercise this right.

For further information about the purpose and scope of data collection and processing by the plug-in provider please refer to the provider's data privacy statement.
This also contains more information about your rights and the settings available to protect your privacy: https://policies.google.com/privacy?hl=en.
Google also processes your personal data in the USA and has undertaken to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .
 

XI.       Online marketing 

1. DoubleClick by Google
The website www.westwood-uk.com utilises the online marketing tool DoubleClick by Google. DoubleClick uses cookies to insert ads with user relevance, to improve campaign performance reports or to avoid repeatedly showing the same ads to a user. A cookie ID allows Google to record which ads are inserted in which browser, which enables Google to prevent these being shown multiple times. Furthermore, with the aid of cookie IDs, DoubleClick can register conversions relating to marketing enquiries. This is the case, for instance, when a user views a DoubleClick ad and later views the website of the marketing company with the same browser and then makes a purchase through that website. According to Google, DoubleClick cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically sets up a direct connection with the Google server. We do not have influence on the extent and further utilisation of the data gathered by Google with the aid of this tool and can therefore only provide you with the information that applies to the best of our knowledge: Having DoubleClick embedded means that Google receives the information that you have accessed the relevant section of our website or have clicked on one of our ads. If you are registered with a Google service, Google can relate this visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider can discover and store your IP address.

 

There are various ways in which you can prevent participation in this tracking process:

a) by applying the appropriate browser settings - in particular the suppression of third-party cookies will result in ads from third-party suppliers no longer being displayed;

b) by deactivating cookies for conversion tracking - if you set your browser to block cookies from the domain "www.googleadservices.com" domain, https://adssettings.google.com/", although this setting is deleted when you delete your cookies;
 
c) by deactivating interest-specific ads from suppliers who subscribe to the self-regulating campaign "About Ads" - using the link http://www.aboutads.info/choices, although this setting is deleted when you delete your cookies;
 
d) by permanent deactivation in your browsers, i.e. Firefox, Internet Explorer or Google Chrome, via the link http://www.google.com/settings/ads/plugin . Please note that by doing so, you may not be able to use some of the functions of this offering to their full extent.

For further information about DoubleClick by Google please go to https://www.doubleclickbygoogle.com/  & https://support.google.com/adsense/; for general information about data protection at Google please go to: https://policies.google.com/privacy?hl=en. Alternatively you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google has undertaken to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.