Transparency notice for Schuco International (London) Limited

Schuco International (London) Limited, trading as Schuco (we or us) is registered in England and Wales under company number 00592183. Our registered office at Axis 4 Rhodes Way, Watford, Herts, England, WD24 4YW.

Schuco is part of the Schuco Holdings Limited Group. Schuco Holdings Limited is registered in England and Wales under company number 05442381 with registered office at Axis 4 Rhodes Way, Watford, Herts, England, WD24 4YW.

  • What is the purpose of this document?
    • We are committed to protecting and respecting your privacy. This transparency notice sets out the basis on which any personal data we collect about all users of our website at www.schuco.co.uk (our site), or that you provide to us via the site or otherwise during our relationship with you, will be processed by us.
    • This transparency notice applies to: visitors to our site who do not register as well as those who do; any Customers that purchase our goods and/or services from us via our site or otherwise; medical professionals (including doctors and nurses); Trainees who attend our Academy; models who assist in our demonstrations; and all individual contractors and service providers who provide services to our business (you).
    • We are a data controller. This means that we are responsible for deciding how we hold and use personal information about you, and for explaining this clearly to you.
    • Please read this transparency notice carefully to understand what we do with your personal information and what rights you have in relation to our activities.
  • What is personal data and our lawful basis for processing
    • Personal data, or personal information, means any information relating to an individual from which that person can be identified. There are special categories of more sensitive personal information which require a higher level of protection (see further at section 4, below).
    • We will only use your personal information when the law allows us to. Our principle lawful basis for processing is set out in the table below. However, some of our grounds for processing will overlap and there may be several grounds which justify our use of your personal information.
    • We may only rely on our legitimate interests (or those of a third party) to process your personal information, if your interests and fundamental rights do not override those interests. Where we rely on legitimate interests for our processing, we have set out the relevant interest, below.
    • We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
    • Please note that we may process your personal information without your knowledge or consent where this is required or permitted by law.

 

  • Information we collect from you and about you and how our use complies with the law:
Information we collect from you
Information How we use your information How our use complies with the law
From Customers we collect your name and contact details, including telephone number and email address.

Invoice address and delivery address (if different).

To fulfil your order and, where applicable, provide technical support and repairs. Because it is necessary to perform the contract we have agreed with you.
Remote connection dial information. To provide technical support. Because it is necessary to perform the contract we have agreed with you.
Your name and contact details, including email address and business area of interest.

Information you provide when you create an account with us online.

 

 

To manage your  account with us.

 

To provide you with marketing information (if you have agreed to this).

Because it is necessary to perform the contract we have agreed with you.

With your consent (where applicable) otherwise for the legitimate interest of promoting our business, provided that you have not asked us to stop sending you marketing.

Where we rely on our legitimate interests we do so as long as our interests do not disproportionately intrude on your privacy.

For clients and prospective clients, we collect the name, job title and business contact information of your individual employees and other representatives.. To provide our services to you

We add this information to our CRM system to manage our relationship with you.

To provide you with marketing information

This information is necessary to enter and to perform the contract between us and our client.

With your consent (where applicable) otherwise for the legitimate interest of promoting our business, provided that you have not asked us to stop sending you marketing.

For suppliers and prospective suppliers of services to our business, we collect the name, job title and business contact information of your individual employees and other representatives. To receive your services.

We add this information to our CRM system to manage our relationship with you.

To provide you with marketing information

This information is necessary to enter and to perform the contract between us and our supplier.

With your consent (where applicable) otherwise for the legitimate interest of promoting our business, provided that you have not asked us to stop sending you marketing.

For medical professionals providing services on our behalf , we collect your name, job title and business contact information.

We publish  our medical professional ‘s photograph and professional background information on the site

To manage your relationship with us.

To provide training and support in relation to our products and to members of the Academy.

With your consent, where applicable, and otherwise  for the legitimate interest of the smooth running of our business.
We use the business contact information provided for individual employees and other representatives of our clients and  suppliers (including prospective clients and suppliers) to provide updates and information about our services. We only send direct marketing by email to corporate addresses if the individual has not opted out of receiving marketing from us. Such processing is necessary for the legitimate interest of promoting our business.
We may perform due diligence in the form of credit checks on companies, including checking photographic identification and proof of address of directors and, in some cases, your shareholders, and verifying their identity using publicly available sources, such as companies house. For the purposes of fraud protection and credit risk reduction and to maintain the reputation of our business. Such processing is necessary for the legitimate interest of protecting our business.
Direct Debit information. To enable us to reference your payment to your account. Because it is necessary to perform the contract we have agreed with you.
Name, email, organisation name, address, contents of any messages you send us. To enable us to respond to your queries. For our legitimate interest of managing and improving our business.
Information we collect about you 
Information about your preferences and the types of services  you are interested in via the cookies on our website. To improve the services we offer to you and others.

To provide you with information about other products and services which we think may be of interest to you.

It is necessary for our legitimate interests to ensure the smooth running of our website.

 

If you place an order, an account is also created for them on our Enterprise RP system To process the order This processing is necessary to perform the contract with you
Background information relating to our past dealings with you. To inform and improve our service. For the legitimate interest of informing and improving the service we provide to you.
Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet,  browser type and version, time zone setting, browser plug-in types and versions, operating system and platform via cookies on our website (see further below). To improve the services we offer to you and others

 

it is necessary for our legitimate interests to ensure the smooth running of our website.

You can disable cookies on your browser.

Information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page. To improve the services we offer to you and others; it is necessary for our legitimate interests to ensure the smooth running of our website.

You can disable cookies on your browser.

Information we receive from third parties
Confirmation of payments you have made via our payment service provider. To confirm payment. Because it is necessary to perform the contract we have agreed with you.

 

  • Special Category Data
    • We do not process particularly sensitive personal information as part of our usual course of business. However, we may process information:
      • relating to a health condition or disability
        • if you are a model at our training academy, with your express consent
        • otherwise in order to meet our legal obligation to make reasonable adjustments in the provision of our services;
      • to ensure meaningful equal opportunity and diversity and inclusion monitoring and reporting;
      • where it is needed to protect your interests (or someone else’s interests) and you are not capable of giving your consent;
      • where it is necessary to establish, exercise or defend a legal claim;
      • where you have manifestly made the information public; or
      • otherwise with your explicit consent.

 

  • Sharing your information
    • We share your personal information with third party contractors and service providers to the extent necessary to fulfil your order.
    • For attendees at the training academy we share your information with the independent consultants and trainers for the purpose of providing the training to you.
    • We share your information with other third parties as follows:
      • our regulators, professional advisors and auditors;
      • HMRC or other government or law enforcement agencies;
      • our insurance provider;
      • members of the Schuco Group for the purpose of managing our business;
      • if we sell any business or assets, in which case we may disclose your personal information to the prospective buyer of such business or assets;
      • if we have a legal obligation to do so; and
      • for the purposes of fraud protection and credit risk reduction.
    • If you object to our sharing or continuing to use your personal data with any specific third party please contact us at salessupport@schuco.co.uk.
    • We share your data with third-party service providers, such as our payment service providers, our website host server, IT support and maintenance service, cloud storage provider and email exchange server and other businesses that provide certain services on our behalf. All of our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes.
  • If you fail to provide personal information
    • You are required to provide the personal information set out in sections 1 of the table. If you fail to provide certain information when requested, we will not be able to provide our services to you.

Your duty to inform us of changes

  • We want to be sure that the personal information we hold about you is accurate and current.
  • You can see what information we hold and update it by contacting salessupport@schuco.co.uk.
  • Automated decision-making
    • Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention.
    • We do not envisage that any decisions will be taken about you using automated means, however we will notify you in writing if this position changes.
  • Data security
    • We have put in place:
      • Appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
      • Procedures to deal with any suspected data security breach, and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
    • Any personal information that you submit to us will be held on secure servers, based within the European Economic Area (EEA).
    • If we are required to transfer your information outside the EEA, we have put in place the appropriate measures to ensure that your personal information is treated by those third parties in a way that is consistent with and which respects the EU and UK laws on data protection.

If you are based outside the EEA we may transfer personal information to the correspondence address you provide to us. We will take all reasonable steps to ensure that such transfers are secure. By instructing us from outside the EEA you acknowledge and agree that such transfers are necessary for us to provide services to you. Transferring information outside the EEA

  • We use Google Analytics to evaluate the performance of our site and improve the service we offer you. We may transfer information about you outside the EEA for this purpose. We will only do so where permitted by law.
  • Google Analytics complies with the EU-US Privacy Shield Framework as set out by the US Department of Commerce regarding the collection, use and retention of personal information from European Union member countries. It is subject to enforcement by the Federal Trade Commission. Google, including Google Inc. and its wholly-owned US subsidiaries, has certified that it adheres to the relevant Privacy Shield Principles, including for Google Analytics. For more information about this protective measure, please visit the following: https://www.google.de/intl/en/policies/privacy/frameworks/.
  • How long will we keep your personal information for?
    • We will only keep your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.
    • Where a minimum retention period is required by law (such as retaining records for HMRC purposes) we comply with that minimum period plus up to 12 months to allow time for us to anonymise or delete information in accordance with our internal data management processes.
    • Emails are kept for up to 5 years on our email exchange server. After which they are they are archived, and can only be accessed by request through the IT department. They are permanently deleted after a further 3 years.
    • Information relating to our contract with Customers, including payment data, may be retained for up to 7 years after termination of the contract.
  • Your rights
    • You have the following rights:
      • to be told what we are doing with your personal information. We do this by providing you with this transparency notice;
      • to correct or update the personal information we hold about you. to object to the processing of your personal information;
      • to request a copy of the personal information we hold about you;
      • to ask us to delete the information that we hold about you where there is no good reason for us continuing to process it;
      • to ask us to stop processing your personal information where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground;
      • to ask us to restrict how we use your personal information for a period of time if you claim that it is inaccurate and we want to verify the position or in some limited other circumstances;
      • to ask us to send your personal information to another organisation in a computer-readable format;
      • to complain to the Information Commissioner’s office if you are unhappy with our use of your personal data: you can do this at https://ico.org.uk/concerns/. Do contact us straight away if you consider that we are not handling your personal information properly so we can try and sort the problem out.
    • If we delete your personal information or restrict our use of it, we will not be able to provide our services to you.
    • If you want to exercise any of your rights, please contact salesssupport@schuco.co.uk. We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights).
  • Cookie policy
    • Our website uses cookies to distinguish you from other users of our website. We use cookies for our legitimate interests, to help us to provide you with a good experience when you browse our website and to improve our site. You can view our Cookies Policy on our Site.

Last Updated 25 May 2018