The protection of your personal rights is of great importance to Painted Group Limited. For this reason, we follow the principle of limiting all data processing to essential information and the necessary extent.
We process the personal data we collect about you in strict accordance with the UK`s Data Protection ACT 2018 (DPA) and the General Data Protection Regulation (GDPR) both collectively the “GDPR”). This Privacy Policy should be read in line with our Cookie Policy. If you have questions or comments, please contact us.
Responsibility for processing
The responsible party within the meaning of the GDPR is:
Painted Group Limited
London, UK
Web: https://painted.co.uk/
Email: [email protected]
Phone: 02089442817
Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) (a) GDPR serves as the legal basis for the processing of personal data.
If processing of personal data is necessary for compliance with a legal obligation to which we are subject to, Art. 6 (1) (c) GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) (d) GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of us or a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) lit. f GDPR serves as the legal basis for the processing. This does not apply if we are acting in a sovereign capacity in the corresponding processing.
Data collection when using our website
When you access our website, information is automatically sent to the server of our website by the browser used on your end device and temporarily stored in a so-called log file. We have no influence on this. The following information is collected without your intervention and stored until it is automatically deleted: the IP address of the requesting internet-capable device, the date and time of access, the name and URL of the file accessed, the website from which the access was made (referrer URL), the browser you are using and, if applicable, the operating system and user interface of your internet-connected computer as well as the name of your access provider, an individual process ID, status code (information on the course of the data retrieval, e.g. whether it was successful) as well as the response time of the server and the amount of data transferred in bytes.
The legal basis for the processing of the IP address is Article 6 (1) f) GDPR. Our legitimate interest follows from the purposes of data collection listed below. We are not able to draw any direct conclusions about your identity from the collected data.
The IP address of your terminal device and the other data listed above are used by us for the following purposes: Ensuring a smooth connection, Ensuring a comfortable use of our website, evaluation of system security and stability.
The server log files can also be checked retrospectively if there are concrete indications of illegal use of our website. The data is stored for a period of 6 months and then automatically deleted. Furthermore, we use so-called cookies and social media plug-ins for our website. The exact procedures involved, whether tracking may occur due to the use of the website and how your data is used for this purpose are explained in more detail below
Security
We use technical and organisational security measures to ensure that your personal data is protected at all times against loss, falsification and unauthorised access by third parties. All security measures are continuously adapted to technical progress. If you are requested to enter personal data within the offer, the data transmission via the Internet is encrypted using SSL and thus protected against unauthorised access.
Quote requests
Personal data (name, phone number, email addresses) are collected and processed in accordance with Art. 6 para. 1 b) GDPR in order to process quotes or individual enquiries. Beyond this, we do not pass on your personal data unless an authority may exceptionally demand the data, e.g., for criminal prosecution or to avert danger. After your request has been fully processed, your data will be blocked and deleted after expiry of the retention obligations under tax and commercial law.
Contact form
When you contact us via the contact form on our website, the data you provide (e-mail address and name) will be processed by us in accordance with Art. 6 (1) f) GDPR in order to answer your questions. We delete the data accrued in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations.
Cookies
Cookies are small text files that are stored locally in the cache of the site visitor’s Internet browser. Insofar as we require your consent for the use of cookies in accordance with Art. 6 Para. 1 a) GDPR, we will only use these cookies if you have given us your prior consent. In the following, we inform you about the data processing involved and how you can give your consent. You can revoke consent given when visiting our website with effect for the future at any time via the Consent Manager tool we use.
The use of cookies is necessary to enable the use of our website. These cookies enable, for example, page navigation. The cookies required for the use of the website cannot be deactivated. However, you have the option of preventing cookies from being stored on your computer by making the appropriate settings in your browser. We would like to point out that the website may not function properly without these cookies. You can learn more about the cookies we use in our Cookie Policy. For more general information on cookies, please visit www.allaboutcookies.org.
Web analysis
For the purpose of demand-oriented design and continuous optimisation of our website, we use Google Analytics, a web analysis service of Google Inc. (“Google”). Web analytics is the collection, compilation and analysis of data about the behaviour of visitors to websites. Among other things, a web analytics service collects data on which website a visitor came to a website from (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage of the website was accessed or how often and for how long a subpage was viewed. A web analysis is mainly used for optimising a website and for cost-benefit analysis of internet advertising.
The operating company of the Google Analytics component is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The use is based on Art. 6 (1) (f) GDPR. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website, such as
- Browser type / version,
- operating system used,
- Referrer URL (the previously visited page),
- host name of the accessing computer (IP address), time of the server inquiry
are transmitted to servers and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services associated with the use of the website and the internet for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf.
Under no circumstances will the IP address be associated with other data relating to the user. We use the add-on “_gat._anonymiseIp” for web analysis via Google Analytics. By means of this addition, the IP address of the Internet connection is shortened and anonymised by Google if access to our website takes place from a member state of the European Union or from another state party to the Agreement on the European Economic Area.
The user may refuse the use of cookies by selecting the appropriate settings on the browser, however, please note that if you do this you may not be able to use the full functionality of this website.
The legal basis for the processing of users’ personal data is Art. 6 (1) (f) GDPR. The processing of the users’ personal data enables us to analyse the surfing behaviour of our users. By evaluating the data obtained, we are able to compile information on the use of the individual components of our web site. This helps us to continuously improve our web site and its user-friendliness. These purposes are also our legitimate interest in processing the data in accordance with Art. 6 (1) (f) GDPR. By anonymising the IP address, the interest of users in the protection of their personal data is adequately taken into account.
Data transfer to a third country
To the extent that personal data is transferred to a country that is outside the United Kingdom (third country) in accordance with this privacy policy, this will be done, to the extent possible, on the basis of adequacy decisions of the Information Commissioner`s Office (ICO) www.ico.org.uk or using standard data protection clauses. When using standard data protection clauses, we aim to implement additional measures to protect your data where necessary.
Your rights
If we process your data to protect legitimate interests, you may object to this processing on grounds relating to your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising, or defending legal claims.
Consent Manager Tool
We use a Consent Manager tool on our website, which allows you to give and revoke consent to data processing when using Google Analytics, sharing functions, embedded content, and the use of web analytics.
You can request information about the data we have stored about you at any time. To do so, please contact us, by e-mail or by post to the contact details given above.
In addition, you can request the correction or deletion of your data under certain conditions. As soon as you assert a claim for deletion or if the data is no longer required to fulfil the purpose for which it was stored or if its storage is inadmissible for other legal reasons, we will delete the personal data stored about you. You may also have a right to restrict the processing of your data and a right to receive the data you have provided in a structured, common, and machine-readable format.
You have the option of contacting the aforementioned data protection officer or a data protection supervisory authority with a complaint. The data protection supervisory authority responsible for us is the ICO.
Direct marketing
The legal basis for the processing of your personal data in the context of direct marketing measures is either your consent or our legitimate interest in marketing and promoting our courses and services. The purpose of processing your personal data in the context of direct marketing measures is to send information, offers and, if applicable, to promote sales.
Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected; this is the case in particular upon receipt of the revocation or objection. You can revoke your consent at any time for the future or object to the processing of your personal data in the context of direct marketing measures at any time for the future.
When you send a data subject access request
The legal basis for the processing of your personal data in the context of handling your data subject access request is our legal obligation and the legal basis for the subsequent documentation of the data subject access request is both our legitimate interest and our legal obligation. The purpose of processing your personal data in the context of processing data when you send a data subject access request is to respond to your request. The subsequent documentation of the data subject access request serves to fulfil the legally required accountability.
Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the processing of a data subject access request, this is three years after the end of the respective process. You have the possibility at any time to object to the processing of your personal data in the context of the processing of a data subject access request for the future. In this case, however, we will not be able to further process your request. The documentation of the legally compliant processing of the respective data subject access request is mandatory. Consequently, there is no possibility for you to object.
Legal defence and enforcement of our rights
The legal basis for the processing of your personal data in the context of legal defence and enforcement of our rights is our legitimate interest. The purpose of processing your personal data in the context of legal defence and enforcement of our rights is the defence against unjustified claims and the legal enforcement and assertion of claims and rights.
Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The processing of your personal data in the context of legal defence and enforcement is mandatory for legal defence and enforcement of our rights. Consequently, there is no possibility for you to object.
Commercial and business services
We process data of our contractual and business partners, e.g., customers and interested parties in the context of contractual and comparable legal relationships as well as related measures and in the context of communication with contractual partners (or pre-contractual), e.g., to answer inquiries.
We process this data to fulfil our contractual obligations, to secure our rights and for the purposes of the administrative tasks associated with this information as well as for business organisation. We only disclose the data of the contractual partners to third parties within the scope of the applicable law to the extent that this is necessary for the aforementioned purposes or for the fulfilment of legal obligations or with the consent of the contractual partners (e.g., to participating telecommunications, transport, and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities).
Unless otherwise specified the purposes of processing are Contractual performance and service, contact requests and communication, office and organisational procedures, administration, and response to requests, visit action evaluation, interest-based and behavioural marketing, profiling (creating profiles of users). And, the Legal bases are Contractual performance and pre-contractual inquiries, Legal obligation, and our Legitimate interests.
Facebook Pixel
Our website uses the visitor action pixel from Facebook, Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) for conversion measurement. This makes it possible to track the behaviour of page visitors after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of the Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimised.
The data collected is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage policy. This enables Facebook to serve advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the site operator.
Icon links to social networks
On our website, we use small icons that refer to our website on third-party platforms (e.g., Facebook, Instagram, Twitter). These are hyperlinks in each case, so no data is transferred from you automatically, but only when you click on the icons and a new tab opens in your browser with the third-party website. When you visit one of our pages equipped with a Facebook, Instagram, Twitter plugin, a connection to the Facebook, Instagram, or Twitter server is established. This tells the Facebook, Instagram or Twitter server which of our pages you have visited. If you are logged into your Facebook, Instagram, Twitter account, you enable Facebook, Instagram, Twitter to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your Facebook, Instagram, Twitter account. Facebook, Instagram, Twitter is used in the interest of an appealing presentation of our online offers.
Data security
All data transmitted by you personally will be transferred using the generally accepted and secure standard SSL (Secure Socket Layer). SSL is a secure and proven standard that is also used, for example, for online banking. You can recognise a secure SSL connection, among other things, by the appended s at the http (i.e., https://…) in the address bar of your browser or by the lock symbol in the lower area of your browser.
Economic analyses and market research
For business reasons and in order to be able to recognise market trends, wishes of contractual partners and users, we analyse the data we have on business transactions, contracts, inquiries, etc., whereby the group of persons concerned may include contractual partners, interested parties, customers, visitors, and users of our online offer.
The analyses are carried out for the purpose of business evaluations, marketing, and market research (e.g., to determine customer groups with different characteristics). In doing so, we may, if available, take into account the profiles of registered users together with their details, e.g., regarding services used. The analyses serve us alone and are not disclosed externally, unless they are anonymous analyses with summarised, i.e., anonymised values. Furthermore, we take the privacy of users into consideration and process the data for analysis purposes as pseudonymously as possible and, if feasible, anonymously (e.g., as summarised data).
Children Data
Our website is not intended for children, and we do not knowingly collect data relating to children. If you become aware that your Child has provided us with Personal Data, without parental consent, please contact us and we take the necessary steps to remove that information from our server.
Accuracy
It is important that the data we hold about you is accurate and current, therefore please keep us informed of any changes to your personal data.
Obligation to provide personal data
You are not obliged to provide us with personal data. However, depending on the individual case, the provision of certain personal data may be necessary for the provision of the above services. If you do not provide us with this personal data, we may not be able to provide the service.
Am I obliged to provide data?
The processing of your data is necessary for the conclusion or fulfilment of the contract you have entered into with us. If you do not provide us with this data, we will usually have to refuse to conclude the contract or will no longer be able to perform an existing contract and consequently have to terminate it. However, you are not obliged to give your consent to data processing with regard to data that is not relevant for the fulfilment of the contract or that is not required by law.
Can we make changes to this Privacy Policy?
We reserve the right to update and amend all or parts of this Privacy Policy, at any time, to the fullest extent permitted under applicable law. The version published on the Site is the version actually in force.
As an individual whose personal data is processed as described in this Privacy Policy, you have a number of rights which are summarised below. Please note that exercising these rights is subject to certain requirements and conditions as set forth in applicable law.
