This Cookie and Privacy Policy was updated on February 27, 2024 and is effective as of that date.
--------
Smet UK Ltd processes personal information in compliance with this cookie and privacy statement. For further information, questions or comments on our policy, please contact Peter Castro at peter.castro@smetstaircases.co.uk
The content of this document
This Cookie and Privacy Policy applies to any collection and processing of personal data carried out:
- when you interact with the website of Smet UK Ltd (http://www.smetstaircases.co.uk) operated by Smet UK Ltd, 2 Station Road West, Oxted, Surrey, RH8 9EP, United Kingdom
- when you order a staircase or request other services from Smet UK Ltd or our Belgian partner Trappen Smet (hereinafter, "we" or "us"), whether online on our site or offline, including when you contact our customer service for post-sale customer services or specific questions or requests;
- when we communicate with you as part of our marketing activities.
By accessing and using this site or otherwise providing us with your personal data, for example when visiting our showroom or head office or when contacting our customer service, you confirm that you have read and that you understand the way we collect, process, use and disclose your personal data as described in this Cookie and Privacy Policy.
When we need your consent for specific processing activities, like the newsletter, we will clarify this request for permission in a non-ambiguous manner. We will ask you, before you submit personal data or use the relevant sections of the site, to confirm electronically that you consent to the processing activity at stake, as described in this Cookie and Privacy Policy.
Our records of your acceptance of this Privacy Policy, the date thereof, and of all future amendments to this Privacy Policy, shall be regarded as conclusive and written evidence of your consent.
We collect and process your personal data in accordance with all applicable data protection laws and regulations, including, without limitation, the laws promulgated on the matter by the European Union, such as the Directive 95/46/EC on the protection of individuals with regard to the processing of personal data and on the free movement of such data and all the laws promulgated in the EU Member States, as well as the orders and guidelines issued by the competent data protection authorities, as applicable, and the General Data Protection Regulation (EU) 2016/679 of 27 April 2016 ("GDPR") and supplementing national provisions applicable as of February 27, 2024 (the "Data Protection Laws").
What data does Smet UK Ltd hold?
a) Customers
If you are a Smet UK Ltd customer, you will have provided us with the following:
- The name(s) and contact details of person(s) involved in the purchase and/or use of our products and solutions
- Billing and Delivery addresses of orders placed
No personally identifying information beyond the initial scope of providing products or services is asked for nor retained by Smet UK Ltd.
b) Suppliers
If you are a supplier to Smet UK Ltd, you will have provided us with the following:
- The name(s) and contact details of person(s) involved with facilitating orders placed by Smet UK Ltd, and;
- Financial details required by Smet UK Ltd in order to make payment for orders
c) Other Non-Customer Contacts
If you choose to provide Smet UK Ltd with identifying information such as your name, email address and/or phone number in response to direct marketing activities including trade shows and meetings in-person; the details provided to us are used exclusively for the transmission of relevant/requested materials directly following the show, meeting or similar. The details given are retained for making contact for the purposes of discussing and/or introducing relevant products and solution.
How is my data stored and used by Smet UK Ltd?
Personal data as defined above is used exclusively by Smet UK Ltd and not shared with any third parties for the purposes of marketing. Information directly relating to the physical delivery of goods to customers’ specified locations is shared with our chosen delivery partners, who themselves are subject to GDPR legislation as data processors.
Data pertaining to customer accounts and purchases is stored using Smet UK Ltd.’s chosen Enterprise Resource Planning (ERP) system. This data is accessible only by select Smet UK Ltd personnel and, as mentioned previously, is limited to information directly related to delivering products and services. No access is available externally, including by those about whom it relates.
This data is updated when subsequent orders are made by customers, or when Smet UK Ltd order from our suppliers. Updated information (primary contacts, email and physical addresses, and phone numbers) replaces previously held information. No record of the previous details are held within our ERP, with the exception of any documentation generated prior to the change.
The personally identifying data described here is held indefinitely for the purposes of delivering our products and services until such time as customer/supplier relationship is terminated, or upon request by the customer/supplier. We will share your personal information with third parties only where required by law, where it is necessary to administer the working relationship with you or where we have another legitimate interest in doing so.
Data Subject's Rights
As an individual whose personal data is processed as described in this Cookie and Privacy Policy, you have a number of rights which are summarized below. Please note that exercising these rights is subject to certain requirements and conditions as set forth in applicable law.
Subject to applicable law
You have the right to obtain confirmation from us as to whether or not personal data that concerns you is processed, and, if so, to request access to such personal data including, without limitation, the categories of personal data concerned, the purposes of the processing and the recipients or categories of recipients. However, we do have to take into account the rights and freedoms of others, so this is not an absolute right. If you request more than one copy of the personal data undergoing processing, we may charge a reasonable fee based on administrative costs.
Right to rectification
You have the right to request from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you also have the right to request that incomplete personal data be completed, including by means of providing a supplementary statement.
Right to erasure ('right to be forgotten')
You have the right to request from us the erasure of personal data concerning you in certain circumstances as defined under applicable law. When your request falls within one of those circumstances, we will erase your personal data without undue delay. If, for technical and organisational reasons, we were not able to erase your personal data, we will ensure that it is fully and irreversibly anonymized so that we will not longer be holding such personal data about you.
Right to restriction of processing
In certain circumstances as defined under applicable law, you have the right to request the restriction of processing of your personal data. In such case, your personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest.
Right to data portability
In certain circumstances as defined under applicable law, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit that data to another controller or to have such personal data transmitted directly from us to another controller, where technically feasible.
Right to object
In certain circumstances as defined under applicable law, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data by us and we can be required to no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. This notably applies in case of processing of your personal data based on our legitimate interests or for statistical purposes.
Right to object to direct marketing
Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing for such direct marketing (including profiling related to such direct marketing).
Right not to be subject to a decision based solely on automated processing
Subject to certain restrictions, you have the right not to be subject to a decision based solely on automated processed, including profiling, which produces legal effects on you similarly significantly affects you.
Right to withdraw consent
If you have declared your consent for any personal data.
processing activities as described in this Cookie & Privacy Policy, you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to withdrawal of the consent.
If you wish to access such personal data or exercise any of the rights listed above, you should apply in writing, providing evidence of your identity to Peter Castro via peter.castro@smetstaircases.co.uk.
Any communication from us in relation to your rights as detailed above will be provided free of charge. However, in case of requests that are manifestly unfounded or excessive, in particular because of their repetitive character, we may charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or refuse to act on the request.
In case you have a complaint about the processing of your personal data, you have the right to lodge a complaint with a competent supervisory authority.