At iFit Auto Ltd, we strive to protect your privacy and rights. We have set forth this statement to explain the information we collect from you, how we use that information, and your legal rights regarding that information.
The processing of personal data is governed by the General Data Protection Regulation 2016/679 (the GDPR). This legislation will replace current data privacy law, giving more rights to you as an individual and more obligations to organisations holding your personal data.
One of the rights is a right to be informed, which means we have to give you even more information than we do now about the way in which we use, share and store your personal information.
This means that we will be publishing a new privacy notice so you can access this information, along with information about the increased rights you have in relation to the information we hold on you and the legal basis on which we are using it.
This new privacy notice comes into effect and will be published on our website on 25 May 2018.
Who are we?
iFit Auto Ltd, registered under company number SC728954 with VAT registration number as 452 6613 94 at Clyde Offices, 2nd Floor, Suite 2/3, 48 West George Street, Glasgow, G2 1BP trading from Unit 12, Greenhill Business Park, 82 Greenhill Road, Paisley, PA3 1RQ. This means we decide how your personal data is processed and for what purposes.
Jay at firstname.lastname@example.org
Please read the policy carefully to understand our views and practices regarding your personal data and how we will treat it.
Information we may collect from you
We may collect and process the data about you:
Information that you provide by completing our ‘contact us’ forms on our site. This includes information provided at the time of requesting information on our goods or services. We may also ask you for information when you provide feedback to us about our site.
If you contact us, we may keep a record of that correspondence.
Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data and the resources that you access.
What information do we collect and how do we use it?
When you choose to contact us through a contact form/web forms, we collect your name, email address, and telephone number. This information is used to contact you if we need to respond to your question.
We may use your personal information in the prevention and detection of fraud.
Any personal information transmitted over the internet via our website is secured using SSL encrypted.
However transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
How we use your personal data
We may use information held about you in the following ways;
To ensure that content from our site is presented in the most effective manner for you and for your computer.
To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
To carry out our obligations arising from any contracts entered into between you and us.
To allow you to participate in interactive features of our service, when you choose to do so.
To notify you about changes to our service to you.
Disclosure of your personal data
We will not share your information with any other organisation unless you have given us your expressed written consent to do so or as part of the buying procedure for which you will have been made well aware.
Who has access to my information?
The information you provide is controlled by iFit Auto Ltd - ("Data Controller") Jay.
How do we protect your information?
We take all reasonable steps to ensure your personal information is stored safely on our servers. Only employees of iFit Auto Ltd who handle the technical management of our website can access your information. In accordance with UK Data Protection legislation we follow strict security procedures in the storage and disclosure of information you provide to prevent unauthorised access. Our procedures mean we may occasionally request proof of identity before disclosing information to you. We cannot however guarantee the security of any data you disclose to us online.
Do we disclose your information to third parties?
We do not sell, trade or rent your personal information to third parties. If we choose to do so in the future, you will be notified by email of our intentions, and have the right to be removed prior to the disclosure.
Your consent and rights
Please note the information you provide will not be transferred out of the UK.
Under UK Data Protection legislation you have a right to see the personal information that we keep about you, upon receipt of written request (by email) to the address email@example.com
What are cookies and why do we use them?
Cookies are small text files placed on your device when you visit a website or application. Your web browser (such as Google Chrome, Internet Explorer or Mozilla Firefox) then sends these cookies back to the website on each subsequent visit so that they can remember things like preferences.
Cookies are very useful and do lots of different jobs. For example, they enable you to move between our web pages efficiently, they remember your preferences when you visit us again and generally improve your experience when browsing with us. They can also help to ensure that adverts you see online are more relevant to you and your interests.
Cookies last for different lengths of time depending on the job they do.
There are session cookies and persistent cookies:
Session cookies only last for your online session and disappear from your device when you close your browser
Persistent cookies stay on your device after the browser has been closed and last for the period of time specified in the cookie
You may delete any cookies already on your computer. You may also disable the cookies we use but doing so may mean you are unable to access all the facilities our site offers. Please refer to your browser’s help files for appropriate instructions.
Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
One of the cookies we use is essential for parts of the site to operate and has already been set (see ‘Essential site cookie’ below). You may delete and block all cookies from this site, but parts of the site may not work.
Essential site cookie
This cookie is essential for the site to operate and is set upon your arrival to the site. This cookie is deleted when you close your browser. Visit the Microsoft website
These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where vistors have come to the site from and the pages they visited. Click here for an overview of privacy at Google
ICO site cookie acceptance
Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit http://www.allaboutcookies.org/.
To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.
Legal basis for the processing
Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6(1) lit. b GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services. Our company is subject to a legal obligation by which processing of personal data is required, such as for the fulfilment of tax obligations, the processing is based on Art. 6(1) lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1) lit. d GDPR. Finally, processing operations could be based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which are not covered by any of the above-mentioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 GDPR).
The legitimate interests pursued by the controller or by a third party
Where the processing of personal data is based on Article 6(1) lit. f GDPR our legitimate interest is to carry out our business in favour of the well-being of all our employees and the shareholders.
Period for which the personal data will be stored
The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfilment of the contract or the initiation of a contract.
Provision of personal data as statutory or contractual requirement; Requirement necessary to enter into a contract; Obligation of the data subject to provide the personal data; possible consequences of failure to provide such data
We clarify that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual provisions (e.g. information on the contractual partner). Sometimes it may be necessary to conclude a contract that the data subject provides us with personal data, which must subsequently be processed by us. The data subject is, for example, obliged to provide us with personal data when our company signs a contract with him or her. The non-provision of the personal data would have the consequence that the contract with the data subject could not be concluded. Before personal data is provided by the data subject, the data subject must contact any employee.
The employee clarifies to the data subject whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and the consequences of non-provision of the personal data.
Existence of automated decision-making
As a responsible company, we do not use automatic decision-making or profiling.
Please email your questions and comments to firstname.lastname@example.org or call us on 07946 157119.
Third Party Links