WashTec – Data protection statement
We are glad to see that you are interested in the content of our Website and our company.
The protection of your individual-related data in the course of its collection, processing and use on the occasion of your visit to our Website is very important to us. Your data are protected in the context of the respective legal regulations. In the following, you will find information on which data are collected during your visit to our homepage – and how these data are used.
SUMMARY WEBSITE DATA PROTECTION NOTICE
Revision date: 15 May 2018
WashTec Car Cleaning Equipment (Shanghai) Co., Ltd. (“WashTec” or “we” or “our”) and each of its affiliates and subsidiaries (collectively the “WashTec Group”) take data protection seriously. This Data Protection Notice provides users of the website www.washtec.cn and en.washtec.cn, and all other WashTec websites referring to this Data Protection Notice (collectively, “websites”) with information on how we, as controller within the meaning of the General Data Protection Regulation (“GDPR”) and the ePrivacy Regulation (“ePrivacy Regulation”), collect and process personal data and other data concerning users in connection with their use of the website.
Please note that other websites of the WashTec Group may be subject to different data protection notices.
Categories of personal data and purposes of processing
When you use our website, create a customer account or order products through our website, we process the following metadata: Browser type and version, operating system, interface, referrer URL, pages viewed, date, time, IP address and, if applicable, the following personal data: Your name and other identification information, your payment information, order information, and requests for marketing materials. We process the personal data for the following purposes: Provision of access to our website, quality improvement, managing your user account, answering your queries, provision of marketing materials, provision of requested products and services, fulfilment of contractual obligations and exercise of claims in law. For further information, please see heading 1 of the Full Website Data Protection Notice.
Basis of processing and legal consequences
One of the central requirements of data protection law is that all processing of personal data must have a lawful purpose. We primarily make use of the following lawful purposes: The processing is necessary (i) for performance of a contract, (ii) for compliance with a legal obligation, (iii) in order to protect the vital interests of you or a third party, (iv) for the purpose of legitimate interests pursued by us or by a third party, except where those interests are overridden by your interests or fundamental rights and freedoms. For further information, please see heading 2 of the Full Website Data Protection Notice.
Categories of recipients and international transfers
We transfer your personal data to other WashTec Group companies, processors, other companies in relation to transactions and, in accordance with applicable law, public authorities, courts, outside consultants and similar third parties; some such recipients are domiciled outside of the EU. For further information, please see heading 3 of the Full Website Data Protection Notice.
Storage periods
Your personal data will be erased as soon as it is no longer needed for the purposes for which it was originally collected, or as required by applicable law. For further information, please see heading 4 of the Full Website Data Protection Notice.
Your rights
Under applicable law, you have certain rights in relation to the processing of your personal data, in each case in accordance with the applicable statutory provisions, such as the right of access to your data and the right to rectification, erasure and portability. Please direct your questions to bcook@washtec-uk.com. For further information, please see heading 5 of the Full Website Data Protection Notice.
Cookies and other tracking technologies
Our website uses cookies and other tracking technologies. For further information, please see heading 6 of the Full Website Data Protection Notice.
Questions and contact information
If you have any questions about this Data Protection Notice or if you wish to exercise your rights as a data subject, please contact us at: WashTec Car Cleaning Equipment (Shanghai) Co., Ltd.
The WashTec Data Controller can be contacted at:
info@washtec.cn
WashTec (Shanghai) Ltd
Unit A, 8 Floor, Cross Region Plaza,
No. 899 Lingling Road,
Xuhui District, 200030 Shanghai,
China
Revision of this Data Protection Notice
Both the summary and the Full Website Data Protection Notice are subject to revision. We will notify you of revisions by appropriate means.
FULL WEBSITE DATA PROTECTION NOTICE
1. Categories of personal data and purposes of processing: What personal data do we process and why?
1.1 Metadata
You can use the website without providing personal data about yourself. In such cases, we collect only the following metadata, which results from the use of the website: Browser type and version, operating system and interface, referring website (referral URL), pages viewed, the date and time you access our website, and your Internet Protocol (IP) address.
Your IP address is used to provide you with access to our website. Once your IP address is no longer needed for this purpose, we truncate it by removing the last octet of the address. The metadata, including the truncated IP address, is used to improve the quality of the website and the services offered through it by analysing use patterns.
1.2 User account
When you create a user account on our website, you are asked to provide the following personal data about yourself: Name, gender (Mr. or Ms.), postal address, email address, phone number, selected password for your user account, payment information, billing and delivery address, and (optional) requests for marketing materials. We process such personal data to manage your user account, to answer your questions, to provide requested products or services, to provide marketing materials to the extent permitted by law, to analyse your interests for marketing purposes, to improve our website in line with use patterns and for technical management or for other purposes that you have consented to.
1.3 Orders for products
When you order a product on our website, we collect and process the following personal data about you: Name, gender (Mr. or Ms.), postal address, email address, phone number, payment information, billing and delivery address, product type and quantity, purchase price, order date, order status, returns, enquiries to customer service and (optional) requests for marketing materials. We process such personal data to fulfil contractual obligations and process your orders, provide customer service, comply with legal obligations, defend, establish and exercise claims in law, provide marketing materials to the extent permitted by law, and analyse your interests for marketing purposes.
1.4 Newsletter
When you state that you wish to receive our newsletter, we collect and process the following personal data about you: Email address and (optional) whether you wish to receive marketing emails or postal mailings. We process such personal data to send out the newsletter and other marketing materials to the extent permitted by law and to analyse your interests for marketing purposes.
2. Basis of processing and legal consequences: What is the legal basis for the processing of your personal data and what happens if you do not wish to provide personal data?
The legal basis for the collection, processing and use of personal data by the company is as follows:
The provision of your personal data is required by law or contract. The provision of your personal data is necessary in order to enter into a contract with us or for the receipt of services/products you have requested. The provision of your personal data is voluntary.
Not providing personal data can be to your detriment; for example, you will not be able to receive certain products and services. However, not providing personal data does not lead to any legal consequences.
3. Categories of recipients and international transfers: Who do we share your personal data with and where are they located?
We may transfer your personal data to third parties for the above-described purposes as follows:
Access to your personal data is restricted to persons who have a need to know in order to perform their work.
International transfers: The personal data we collect and receive from you may be transferred to and processed by recipients located inside or outside the European Economic Area (“EEA”). Some of the recipients outside the EEA are EU-U.S. Privacy Shield certified and others are in countries subject to current adequacy decisions (notably Andorra, Argentina, Canada (for non-public entities subject to the Canadian Personal Information Protection and Electronic Documents Act), Switzerland, Faroe Islands, Guernsey, Israel, Isle of Man, Jersey and New Zealand, please select the countries that apply). In all transfers, a level of data protection is ensured that is recognised and adequate from a European data protection perspective. Other recipients may be located in countries that do not ensure an adequate level of data protection from a European data protection perspective. We will take all necessary precautions to ensure that all security measures necessary under data protection law are taken when transferring to countries outside the EEA. With regard to transfers to countries that do not ensure an adequate level of data protection, we will take appropriate security precautions in transfers, such as standard data protection clauses issued by the European Commission or a supervisory authority, approved codes of conduct together with binding and enforceable commitments by the recipient or approved certification mechanisms together with binding and enforceable commitments by the recipient. You may contact us as specified under heading 7 below and request a copy of such appropriate security precautions.
4. Storage periods: How long do we store your personal data?
Your personal data will be stored for as long as is necessary to provide you with the services and products you request. When your contractual relationship with us comes to an end or your account is deleted, or when you terminate your relationship with us in any other way, we will remove your personal data from our systems and records and/or properly anonymise it so that you can no longer be identified from it (unless we have to retain your data to comply with legal or regulatory obligations to which WashTec is subject, such as for tax reasons).
We may retain your contact details and information about the interest you have expressed in our products and services for a longer period if you have consented to WashTec sending you marketing materials. We may also be required under applicable law to retain certain personal data for a period of ten years after the relevant tax year. We may retain your personal data after termination of our contractual relationship if your personal data is necessary for compliance with other applicable laws or if we require your personal information, exclusively on a need-to-know basis, in order to establish, exercise or defend a claim in law. As far as is possible, we will restrict the processing of your personal data to such limited purposes after termination of our contractual relationship.
5. Your rights: What are your rights and how can you assert them?
Right to revoke consent: If you have given your consent to the collection, processing and use of your personal data (in particular to receiving direct marketing communications via email, text message or telephone), you can revoke that consent at any time with effect for the future. Revoking consent does not affect the lawfulness of processing performed prior to revocation. If you wish to revoke your consent, please contact us as specified under heading 7 below. You can object to the use of your personal data for marketing purposes without incurring any costs other than basic telecommunication charges.
Additional data protection rights: In accordance with applicable data protection laws, you may have the right (i) of access to your personal data, (ii) to rectification of your personal data, (iii) to erasure of your personal data, (iv) to restrict the processing of your personal data (v) to data portability; and/or (vi) to object to the processing of your personal data (including to the creation of a profile).
Please note that these rights may be restricted under applicable local data protection law. Below you will find more information about your rights under the GDPR:
You have the right to object, on grounds relating to your particular situation, at any time to our processing of personal data concerning you and we may be obliged no longer to process your personal data. There may be such a right to object in particular if we collect and process your personal data for direct marketing purposes or to create a user profile in order to obtain a better picture of your interest in our products and services.
If you have a right to object and you exercise that right, your personal data will no longer be processed by us for such purposes. You may exercise this right by contacting us as specified under heading 7.
There may not be such a right to object if the processing of your personal data is necessary in order to take steps prior to entering into a contract or to perform an existing contract with you.
If you no longer wish to receive direct marketing material via email, text message/MMS, fax or telephone, you must revoke your consent as described above.
To exercise your rights, please contact us as specified under heading 7. You also have the right to lodge a complaint with the competent data protection supervisory authority.
6. Cookies and other tracking technologies
This website uses cookies and other tracking technologies. When you visit our website, open our emails, or view our services online, we or an authorised third party may send a cookie. Cookies are small text files that are placed on your device. When a website is accessed, a cookie placed on your device sends information to the party that put it there. Cookies are very common and are used on many websites. A cookie typically contains the name of the domain that sent it, its lifetime, and a value (typically a unique number). A more detailed explanation of what cookies are and how they work can be found at www.allaboutcookies.org.
The overview below lists the cookies we use on our website.
7. Questions and contact information
If you have any questions about this Data Protection Notice or if you wish to exercise your rights as specified under heading 5, please contact us at: WashTec Car Cleaning Equipment (Shanghai) Co., Ltd.
The WashTec Data Controller can be contacted at:
info@washtec.cn
WashTec (Shanghai) Ltd
Unit A, 8 Floor, Cross Region Plaza,
No. 899 Lingling Road,
Xuhui District, 200030 Shanghai,
China
8. Revision of this Data Protection Notice
We may revise this Data Protection Notice from time to time in response to changes in legal, regulatory or operational requirements. We will notify you of such changes, including when they will come into effect by updating the ‘Revision date’ at the top of this Notice or as otherwise required by law.
SUMMARY DATA PROTECTION NOTICE
Version date: 18.05.2018
WashTec Car Cleaning Equipment (Shanghai) Co., Ltd. (“WashTec” or “we” or “our”) provide this Supplier/Business Partner Data Protection Notice (“Data Protection Notice”) in order to explain our policy as controller regarding the collection, processing and use of the personal data of our current and future suppliers, shareholders, customers and other business partners (collectively “business partners”) and of employees of our business partners.
Scope
This summary of the Data Protection Notice applies to you if you are a current or former business partner of WashTec or if you are an employee of a current or former business partner of WashTec.
Categories of personal data and purposes of processing
If you are a business partner of WashTec or an employee of a business partner of WashTec, we may collect the following categories of personal data: Name, business contact details, employer name, title/function, services offered and provided, contract data, content of communications, payment information, billing information and business relationship history. For further information, please see heading 2 of the Full Supplier/Business Partner Data Protection Notice.
Purposes, legal basis and consequences of processing
Business partner data is collected, processed and used to perform the contract with the business partner (including the performance of contractual obligations, invoice processing, communication, and regulatory compliance and due diligence measures) and for marketing and customer relationship management activities, security measures and anti-fraud measures. For further information, please see heading 3 of the Full Supplier/Business Partner Data Protection Notice.
Categories of recipients and international transfers
We transfer your personal data to other WashTec Group companies, processors, companies that we acquire and, in accordance with applicable law, public authorities, courts, outside consultants and similar third parties; some such recipients are domiciled outside of the EU. For further information, please see heading 4 of the Full Supplier/Business Partner Data Protection Notice.
Storage periods
Your personal data will be erased as soon as it is no longer needed for the purposes for which it was originally collected, or as required by applicable law. For further information, please see heading 5 of the Full Supplier/Business Partner Data Protection Notice.
Your rights
Under applicable law, you have certain rights in relation to the processing of your personal data, in each case in accordance with the applicable statutory provisions, such as the right of access to your data and the right to rectification, erasure and portability. Please direct your questions to bcook@washtec-uk.com for further information, please see heading 6 of the Full Supplier/Business Partner Data Protection Notice.
Questions and contact information
If you have any questions about this Data Protection Notice or if you wish to exercise your rights as a data subject, please contact us at: WashTec Car Cleaning Equipment (Shanghai) Co., Ltd.
The WashTec Data Controller can be contacted at:
info@washtec.cn
WashTec (Shanghai) Ltd
Unit A, 8 Floor, Cross Region Plaza,
No. 899 Lingling Road,
Xuhui District, 200030 Shanghai,
China
FULL DATA PROTECTION NOTICE
1. Scope
This Notice applies to you if you are a current or former business partner of WashTec (such as a consult or business owner) or if you are an employee of a business partner of WashTec who is in contact with WashTec on behalf of that business partner.
2. Categories of personal data
WashTec collects, processes and uses the following categories of personal data from you or from authorised third parties (such as your supervisor, public authorities or public resources) (collectively, “business partner data”):
3. Purposes, legal basis and consequences of processing
Business partner data is collected, processed and used for the purposes of performing the contract with the business partner (including the performance of contractual obligations, invoice processing, communication, and regulatory compliance and due diligence measures) and for marketing and customer relationship management (“CRM”) activities, security activities and anti-fraud activities (collectively “processing purposes”).
The legal basis for the collection, processing and use of personal data by the company is as follows:
The provision of business partner data is voluntary and serves the purpose of entering into and/or performing the contract with the business partner. Failure to provide business partner data may cause the corresponding administrative and administrative processes with respect to the business partner to be delayed or prevented from proceeding.
4. Categories of recipients and international transfers
WashTec may disclose your business partner data to third parties for the following purposes:
Access to your personal data is restricted to persons who have a need to know in order to perform their work. WashTec may disclose your personal data to public authorities, courts, outside consultants and similar third parties where required or permitted by law.
International transfers The personal data we collect and receive from you may be transferred to and processed by recipients located inside or outside the European Economic Area (“EEA”). Some of the recipients outside the EEA are EU-U.S. Privacy Shield certified and others are in countries subject to current adequacy decisions (notably Andorra, Argentina, Canada (for non-public entities subject to the Canadian Personal Information Protection and Electronic Documents Act), Switzerland, Faroe Islands, Guernsey, Israel, Isle of Man, Jersey and New Zealand). In all transfers, a level of data protection is ensured that is recognised and adequate from a European data protection perspective. Other recipients may be located in countries that do not ensure an adequate level of data protection from a European data protection perspective. We will take all necessary precautions to ensure that all security measures necessary under data protection law are taken when transferring to countries outside the EEA. With regard to transfers to countries that do not ensure an adequate level of data protection, we will take appropriate security precautions in transfers, such as standard data protection clauses issued by the European Commission or a supervisory authority, approved codes of conduct together with binding and enforceable commitments by the recipient or approved certification mechanisms together with binding and enforceable commitments by the recipient. You may contact us as specified in Section 7 below and request a copy of such appropriate security precautions.
5. Storage periods
WashTec and/or our service providers store your personal data in accordance with the applicable data protection laws to the extent necessary for performance of our obligations and only for the period of time necessary for fulfilment of the purposes for which the data were collected. If WashTec should no longer need your personal data, we will remove it from our records and/or take steps to properly anonymise it so that you can no longer be identified from it (unless we have to retain your data to comply with legal or regulatory obligations to which WashTec is subject).
Personal data in contracts, communications and business letters may be subject to statutory retention requirements requiring retention for up to ten years. All other business partner data is normally erased five years after termination of the business relationship between you and WashTec.
6. Your rights
Right to revoke your consent: If you have given your consent to the collection, processing and use of your personal data (in particular to receiving direct marketing communications via email, text message/MMS, fax or telephone), you can revoke that consent at any time with effect for the future. Revoking consent does not affect the lawfulness of processing performed prior to revocation. If you wish to revoke your consent, please contact us as specified in Section 7 below. You can also object to the use of your personal data for direct marketing purposes without incurring any costs other than basic telecommunication charges.
Additional data protection rights: In accordance with applicable data protection laws, you may have the right (i) of access to your personal data, (ii) to rectification of your personal data, (iii) to erasure of your personal data, (iv) to restrict the processing of your personal data (v) to data portability; and/or (vi) to object to the processing of your personal data.
Please note that these rights may be restricted under applicable local data protection law. Below you will find more information about your rights under the GDPR:
You have the right to object, on grounds relating to your particular situation, at any time to our processing of personal data concerning you and we may be obliged no longer to process your personal data. There may be such a right to object in particular if we use your personal data to create a user profile in order to obtain a better picture of your interest in our products and services.
If you have a right to object and you exercise that right, your personal data will no longer be processed by us for such purposes. You may exercise this right by contacting us as specified in Section 7.
There may not be such a right to object if the processing of your personal data is necessary in order to take steps prior to entering into a contract or to perform an existing contract with you.
If you no longer wish to receive direct marketing material via email, text message/MMS, fax or telephone, you must revoke your consent as described above.
To exercise your rights, please contact us as specified in Section 7. You also have the right to lodge a complaint with the competent data protection supervisory authority.
7. Questions and contact information
If you have any questions about this Notice or if you wish to exercise your rights in accordance with Section 6, please contact us at: HR Department, WashTec (UK) Ltd, 14a Oak Industrial Park, Chelmsford Road, Great Dunmow, Essex, CM6 1XN.
The WashTec Data Controller can be contacted at:
info@washtec.cn
WashTec (Shanghai) Ltd
Unit A, 8 Floor, Cross Region Plaza,
No. 899 Lingling Road,
Xuhui District, 200030 Shanghai,
China