GEMÜ Valves Limited
Privacy Policy

Dated: 1st July 2023

This GEMÜ Privacy Policy explains how we use any personal information you provide to GEMÜ.

Under the General Data Protection Regulations (GDPR) from 25 May 2018 and the UK Data Protection Act 2018 we respect your right to privacy and are committed to maintaining it. We only collect, store and process your personal information in accordance with relevant laws and regulations and as explained in this GEMÜ privacy policy. This information is held in order to conduct business transactions between our companies which is the demonstrable reason to hold your data.

By accessing, browsing, contacting or otherwise using the GEMÜ Websites or Offices you confirm that you have read and understood this Privacy Policy. Please ensure you have read it carefully, and particularly the section detailing your rights in relation to the personal information that we collect about you.

Definitions

The Data Controller

GEMÜ are the data controller in respect of all personal data we hold, and we are required to provide you with specific information about how we will use, hold and retain this data, as well as making you aware of various rights that you have under this legislation. We have set out this information below.

Under GDPR we are required to tell you the identity of the legal person who controls your personal data. GEMÜ Valves Limited (Company Registration Number 1567612) is the data controller responsible for your personal data collected through our websites, by post, by our employees, by telephone research and at events. GEMÜ’s registered office is at 10 Olympic Way, Warrington WA2 0YL. Should you ever have any queries about what we hold, or how we process your personal data, your first contact should be our Data Protection Officer who is our Managing Director at customer.support(at)gemu.co.uk.

The Data Subject – who is it?

It’s any person who provides Personal Data directly, or who finds themselves in receipt of material perhaps personally requested, or possibly as a result of shared use, or through non personalised distribution. The Data Subject has the right to know what information is held, how it is being used and by whom, and to end their inclusion on such lists held by GEMÜ.

What information we hold about you

Drawn from the public domain, we have a register of companies operating in the UK. This contains details of the industries in which they operate, and the products and services offered to their markets and this can be linked to your Personal Data (The Data Subject).

Personal information that we collect from you

  • Name and Title
  • Order, Invoice and Delivery Address(es)
  • Email Address(es)
  • Phone Number(s)
  • Purchase information
  • Account Password and Login details (GEMÜ Portal)
  • Gender
  • Social media account details
  • Your communications with GEMÜ
  • Appointment booking and information given during an appointment
  • Your IP Address from your online communications

Where it came from

We collect personal information when you:

  • Request or obtain a quotation for GEMÜ products or services
  • Purchase GEMÜ products or services or supply to GEMÜ
  • Conduct communications with GEMÜ concerning possible, current or future transactions
  • Subscribe to our newsletters
  • Submit reviews or choose to complete surveys we have sent you
  • Engage with us via social media
  • Use our guest-WIFI at our offices
  • Use our customer services team or contact us for any reason, e.g. order queries, complaints, website
  • issues, exhibitions, via our web-chat facility, phone, email and postal correspondence
  • Book an appointment with us
  • Browse the GEMÜ website

Personal information that we collect from Third Parties

We may collect personal information provided to us by other companies who have obtained your permission to share this information with us, or who need to share information with us in relation to goods and/or services you have purchased or supplied.

We also collect personal information from third party databases (for example for our financial and/or money laundering checks) or from other third parties who are involved with your purchase or supply of goods and/or services.

If you link your Google, Facebook or Twitter accounts or any accounts from other third-party services e.g. “Social media” or shopping research panels or public forums such as blogging sites, to GEMÜ social media sites then we also receive information from those accounts to the extent you've agreed to this as part of your settings and that third party's privacy policy.

How we will use the information about you

We use your personal information in a number of different ways, depending on the type of information provided. You do not have to provide this personal information but if you don't, you may not be able to purchase goods from us, we may not be able to provide certain services.

The table below sets this out in detail, showing what we do, and why we do it:

Personal informationHow we use this personal informationWhy we do it
Your name and contact detailWe've got to do this to perform our contract with you.GEMÜ has a legitimate interest to complete our contract with you by fulfilling your enquiry or order, as well as taking payment, updating you regarding the status of your order and shipping the order to you.
To send you or request offers, promotions and events.GEMÜ has a legitimate interest to send you or request promotions relevant to our products and events. You can opt out of these at any time. We will also ask you if you want to consent to email marketing.
To verify your identity when you access your account or to contact you to perform security checks.GEMÜ has a legitimate interest in ensuring that you are who you say you are to ensure goods and services or details are provided to the correct person.
To be able to return any lost items to you or record any incidents or accidents.You have a legitimate interest in providing this information to GEMU to ensure we can manage any of the occurrences that may occur.
To invite you to complete a survey where you have purchased or sold us goods.GEMÜ has a legitimate interest in selling its products. We don't need your consent to send you these communications but they will not include any promotional content. We use responses from surveys to monitor and improve the quality of our products and services for the future.
To send you marketing promotions, offers and events by email, post, phone and SMS for goods and services.GEMÜ has a legitimate interest in selling its products. Sending details of promotions, offers and events to customers helps us do this. You are free to opt-out of receiving these communications at any time without opting out of normal business communications between us.
To process and manage your booking/appointment.GEMÜ has a legitimate interest to perform our contract with you and to enable us to set up the appointment and arrange this with you.
To send you service emails or communications required by law to update you about any changes to our goods and services, any information required by law relating to your order, safety notices or product recalls.We need to do this to comply with our legal obligations. GEMU has a legitimate interest. We don't need your consent to send you these communications but they will not include any promotional content.
Your payment detailsTo fulfil your order, i.e. taking payment, updating you regarding the status of your order and shipping the order to you. As well as managing any issues during order fulfilment.GEMÜ has a legitimate interest to perform our contract with you and our contracts with partners and suppliers who work with us to provide a service to you.
Your login and PasswordTo verify your identity when you access your account in the GEMÜ Portal.GEMÜ has a legitimate interest in ensuring that you are who you say you are to ensure goods and services are provided to the correct person.
Your device information, preferences and cookies provided when you browse our websiteTo show you advertising on such Social Media platforms as Facebook.GEMÜ has a legitimate interest to do this where you have consented to the use of cookies from our internet site or social media. You can personally manage your cookie settings at any time.
Device information and details when using our Wi-FiWe do this to allow you to use our Wi-Fi service at our premises.GEMÜ has a legitimate interest to do this to allow your use of our IT systems with you.
Financial information, social media informationWhen combined with personal identification and contact details to investigate cases of fraud.GEMÜ has a legitimate interest in protecting ourselves from various types of fraud or money laundering crimes.
In some circumstances we also need to provide your information to enable us to comply with legal or regulatory requirements, such as criminal or whistleblowing investigations, export control (including data concerning the destinations of exports of Dual-Use goods) to comply with the law.GEMÜ has a legitimate interest and a legal obligation to provide such personal information to the authorities and regulators.
Your image on CCTVTo ensure the safety and security of colleagues and customers and the prevention or detection of unlawful acts on our premises.GEMÜ has a legitimate interest in protecting itself from crime, and to provide a safe working environment for our staff.

We may also use publicly available information to ensure that our database is kept accurate and relevant. GEMÜ has a legitimate interest to ensure our database is kept up to date.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

(a) Your consent. You are able to remove your consent at any time. You can do this by contacting us.
(b) We have a contractual obligation.
(c) We have a legitimate interest.

Who we share it with

Personal information shared with Third Parties

In order to provide our services to you or purchase from you, we share your data with the following categories of companies:

  • Companies that help us provide products; such as payment service providers, warehouses, order packers, and delivery companies or as part of the standard customer journey for the purposes of taking payment, managing your order, monitoring our performance and stability, improving customer experience, tracking revenue, delivery and returns.
  • Data insight companies and other business systems providers who ensure the information we hold is up to date and accurate. We may also share information with our insurance providers.
  • Credit reference agencies, law enforcement and fraud prevention agencies and payment card and insurance providers.
  • If we sell or buy any business or assets or transfer an area of the business to a new provider, we will disclose your personal data to the prospective seller or buyer of such business or assets or any third party who acquires our assets or who the business is transferred to.

GEMÜ only transfers your personal information to those third parties where we can be sure that we can protect your privacy and your rights. We only transfer the information which is needed to provide or require goods and services and if we stop using a third party, we require them to remove or anonymise your information. We have contracts in place with all of our business partners to ensure data security. We do not, and will not, sell any of your personal data to any third party.

Security of your information

We want you to have confidence in how we use and hold your personal information. We have in place a range of organisational, procedural and technical security measures designed to protect your personal information from unauthorised use or disclosure.

How long we will store your information

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for satisfaction of any legal, accounting, or reporting requirements.

In some circumstances, such as to meet our legal or regulatory obligations, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions, we may hold on to your personal information after we’ve finished providing services to you, or for longer than our general retention policy.

Deletion of Data

Once you are no longer a customer of GEMÜ or we no longer require the use of your data we will securely destroy your personal information in accordance with applicable laws and regulations.

Your rights over your information

You have many rights over your personal information and how it is used.

The table below sets out the rights which are available to you (depending on how we collected your personal data) and how to make use of those rights.

Please be aware that we will need to verify your identity before providing any personal data to you. We do this to protect your information. We may also ask you to provide us some additional voluntary information to help us process your request more efficiently.

Your rightsHow to make use of those rights
Right to be informed about what we do with your informationThis Privacy Policy and any details provided when we capture your personal information will keep you informed about how we will use this information.
Right to access your information

You can request access to the personal information we hold about you. In most cases this is free of charge. We have in place a procedure for handling requests to access your personal information that we retain   

1. Gemu GB Data Subject Access Request Procedure   
2. Gemu GB Data Subject Access Request Form

Right to correct your informationIf you believe that the personal information we hold about you may be incorrect, then we require you to advise us of the correct information that we can correct our data held
Right to object to, or restrict, GEMÜ using your informationIn certain circumstances (including where we use legitimate interests as set out below) you can ask us to stop processing your information or ask for us to limit the ways in which we process this information. However we can refuse a request in some cases - we will provide you with information explaining why we have refused your request if we do this.
Right to delete your personal information (unless we have a reason to keep it)Some people call this the "right to be forgotten". Unless we have a reason for keeping your personal information (for example, where we need this to provide a service to you or deal with an ongoing complaint), you can request for us to stop holding your personal information. If we need to hold on to your information we will tell you why we need to do this when we respond.
Right to data portabilityYou have the right to ask that we transfer the personal information you gave us to another organisation, or to you in certain circumstances.

If you are currently opted-out of our marketing, you can always choose to opt-in to receive our emails by ticking the box in our communications or by advising us directly.

How to stop marketing messages from GEMÜ

You can stop receiving marketing messages from us at any time.

  • For email marketing click on the 'unsubscribe' link in any email you receive.
  • For phone and direct mail – you can contact our Customer Support team at GEMÜ Warrington.
  • For targeted or personalised adverts – you can update your Cookie preferences at any time.

It might take some time for all our systems to be updated, so you might get messages from us while we fully process your request, but we will ensure that we mark you as having opted out on our database as soon as we receive your request. We are working on improving our customer experience to allow you to opt-out easily from our communications and cookies and we will update this policy and our Cookies policy as soon as we have this in place.

Please be aware that stopping marketing messages will not stop our service communications (such as order confirmations, delivery notes, invoices or order updates).

Transferring data internationally

In order to provide our goods and services we may need to transfer your information from your country of residence to another country in the usual course of our business. By dealing with us and submitting your personal information, you agree to the transfer, storage, and/or processing of your personal information outside of your country of residence as set out below.

International orders

If you are based outside the UK and place an order with us (for example, through our International Sites), then we will transfer the personal data that we collect from you to GEMÜ in the UK.

Transferring outside of the EEA

We may transfer your personal information to a third-party data processor located in countries outside of the European Economic Area ('EEA').

GEMÜ only transfers your personal information to those third parties where we can be sure that we can protect your privacy and your rights, for example the third party is located in a country which the EU has deemed to have adequate data protection laws in place, where that third party is certified on the EU-US Privacy Shield or where we have a contract in place with that third party which includes the European Commission's standard data protection clauses.

Lawful basis

The legal basis on which we process your personal data is based on Legitimate Interest. The GEMÜ Privacy Policy equally applies to customers, potential customers and suppliers.

Data Protection officer - contact

At any time, you may contact the GEMÜ Data Protection Officer (DPO) within GEMÜ Valves Limited who is the Managing Director. All communications with the DPO will be acknowledged and acted upon within the requirements of the GDPR and this GEMÜ Privacy Policy. All communications to the DPO will be dealt with in a Confidential, Sincere and Timely fashion.

Address for communications:

GEMÜ Valves Limited
10 Olympic Way
Warrington
WA2 0YL

Email: customer.support(at)gemu.co.uk 
Tel: 01925 824044
Website: www.gemu.co.uk  

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk