The controller for the data processing is:
Express Phone Repair Ltd
6 Harefield Road, Nuneaton, Warwickshire, CV11 4HD
T: 02476 642 419
We appreciate your interest in our online shop. The protection of your privacy is very important to us. Below we will inform you in detail about the handling of your data.
1. Access Data and Hosting
You can visit our websites without providing any personal information. Each time a website is called up, the web server only automatically stores a so-called server log file, which, for example, contains the name of the requested file, your IP address, the date and time of the retrieval, the amount of data transferred and the requesting provider (access data) and documents the retrieval. These access data are evaluated exclusively for the purpose of ensuring trouble-free operation of the site and the improvement of our offer. This serves to safeguard our legitimate interests in a correct presentation of our offer in accordance with Art. 6 para. 1 pc. 1 lit. f GDPR. All access data will be deleted no later than seven days after the end of your page visit.
2. Data processing for contract processing and contacting
2.1 Data processing for contract processing
For the purpose of contract processing (incl. Requests for and processing of any existing warranty and service disturbance claims as well as any statutory updating obligations) in accordance with Art. 6 para. 1 pc. 1 lit. b GDPR, we collect personal data if you voluntarily provide it to us in the context of your order. Mandatory fields are identified as such, since in these cases we absolutely need the data for contract processing and we cannot send the order without the specification. Which data is collected can be seen from the respective input forms.
Further information on the processing of your data, in particular for the disclosure to our service providers for the purpose of ordering, payment and shipping processing, can be found in the following sections of this privacy policy. After completion of the contract, your data will be restricted for further processing and after expiry of the tax and commercial retention periods in accordance with Art. 6 para. 1 pc. 1 lit. c GDPR, unless you expressly in any further use of your data pursuant to Art. 6 para. 1 pc. 1 lit. a GDPR, or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
2.2 Customer account
If you have your consent to this in accordance with Art. 6 para. 1 pc. By choosing to open a customer account, we use your data for the purpose of opening your customer account and for storing your data for further future orders on our website. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account. After deletion of your customer account, your data will be deleted unless you explicitly use your data in accordance with Art. 6 para. 1 pc. 1 lit. a GDPR, or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
2.3 Contact
As part of customer communication, we collect to process your inquiries in accordance with Art. 6 para. 1 pc. 1 lit. b GDPR, if you voluntarily provide it to us when you contact us (e.g. by contact form or e-mail). Mandatory fields are identified as such, since in these cases we need the data to process your contact. Which data is collected can be seen from the respective input forms. After completion of your request, your data will be deleted unless you expressly in any further use of your data in accordance with Art. 6 para. 1 pc. 1 lit. a GDPR, or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
2.4 Data processing for scheduling
We collect personal data if you voluntarily provide it to us as part of an appointment booking. Mandatory fields are marked as such, since in these cases we absolutely need the data for posting an appointment and you cannot send the schedule booking without their specification. Which data is collected can be seen from the respective input forms. Information in free text fields is voluntary and does not necessarily have to be filled in to send the date booking. We ask that sensitive data (e.g. health claims such as diseases) be discontinued in the context of such free text fields.
We use the data provided by them to post an appointment according to Art. 6 para. 1 pc. 1 lit. b GDPR. After full processing of the booked date, your data will be restricted for further processing and after expiry of any tax and commercial retention periods pursuant to Art. 6 para. 1 pc. 1 lit. c GDPR, unless you expressly in any further use of your data pursuant to Art. 6 para. 1 pc. 1 lit. a GDPR, or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
2.5 Data processing for validation of the order
In exceptional cases, we process the IP address of our customers to ensure the security of our service and to protect our systems, as well as to prevent fraudulent activities. This is done exclusively for the validation and defense against abusive or fraudulent acts. In these cases, after the customer has clicked on “Order subject to payment”, the IP address has checked by our own system and automatically compared with the third-party provider ipinfo.io upon suspection. This forwarding is solely for the purpose of security validation and is necessary to maintain the integrity of our offer.
3. Data processing for the purpose of dispatch processing
For the fulfilment of the contract pursuant to Art. 6 para. 1 pc. 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.
Data transfer to shipping service providers for the purpose of shipping announcement
If you have given us your express consent to this during or after your order, we give us there on the basis of this in accordance with Art. 6 para. 1 pc. 1 lit. a GDPR, you can forward your e-mail address to the selected shipping service provider so that the latter can contact you before delivery for the purpose of delivery announcement or coordination.
The consent can be revoked at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to further data use, which is permitted by law and about which we inform you in this declaration.
DPDGroup UK Ltd, Roebuck Lane, Smethwick, B66 1BY
and
DHL International (UK) Limited, Southern Hub, Unit 1, Horton Road, Colnbrook, Berkshire SL3 0BB
4. Data processing for payment processing
When processing payments in our online shop, we work with these partners: technical service providers, credit institutions, payment service providers.
4.1 Data processing for transaction processing
Depending on the selected payment method, we pass on the data necessary for the processing of the payment transaction to our technical service providers who are active for us in the context of order processing, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary for the processing of the payment. This serves to fulfil the contract in accordance with Art. 6 para. 1 pc. 1 lit. b GDPR. In part, the payment service providers collect the data required for the processing of the payment themselves, e.g. on their own website or via a technical integration in the ordering process. The privacy policy of the respective payment service provider applies in this respect.
If you have any questions about our payment processing partners and the basis of our cooperation with them, please contact the contact option described in this privacy policy.
4.2 Data processing for the purpose of fraud prevention and the optimisation of our payment processes
If necessary, we may provide our service providers with further data, which they, together with the data necessary for the processing of the payment as our processors for the purpose of fraud prevention and the optimisation of our payment processes (e.g. Use invoicing, processing of contested payments, support of accounting). This is done according to Art. 6 para. 1 pc. 1 lit. f GDPR, the protection of our legitimate interests in our protection against fraud or in an efficient payment management system, which are overriding in the context of a balancing of interests.
4.4 Identity and check when selecting Stripe Payment Services
If you choose the payment services of Stripe Inc, 354 Oyster Point Blvd, South San Francisco, CA 94080, United States (hereinafter referred to as Stripe), we ask for your consent to Art. 6 para. 1 pc. 1 lit. a GDPR, that we may transmit the data necessary for the processing of the payment and an identity and transaction check to Stripe. In UK, the aspects mentioned in Stripe’s privacy policy may be used for the identity and transaction check. Stripe uses the information received about the statistical probability of a default for a balanced decision on the establishment, execution or termination of the contractual relationship. You may revoke your consent at any time by sending a message to the contact option specified in this privacy policy. This may mean that we can no longer offer you certain payment options. You can also revoke your consent to this use of personal data at any time to Stripe.
5. Advertising by e-mail, post, telephone
5.1 E-mail newsletter with registration
When you subscribe to our newsletter, we will use the data required or separately provided by you to regularly our e-mail newsletter based on your consent in accordance with Art. 6 para. 1 pc. 1 lit. a GDPR. You can unsubscribe from the newsletter at any time and can be done either by sending a message to the contact option described below or via a link provided in the newsletter. After unsubscribing, we will delete your e-mail address from the recipient list, unless you expressly regarding further use of your data in accordance with Art. 6 para. 1 pc. 1 lit. a GDPR, or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
5.2 Post advertising and your right to object
In addition, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, e.g. to send interesting offers and information about our products by letter post. This serves to safeguard our legitimate interests in addressing our customers in accordance with Art. 6 para. 1 pc. 1 lit. f GDPR. You can object to the storage and use of your data for these purposes at any time by sending a message to the contact option described in this privacy policy.
5.3 Telephone advertising
If you have your consent to this in accordance with Art. 6 para. 1 pc. We use the data required for this or separately provided by you for your own advertising purposes, e.g. for information about interesting offers and our products. You may revoke your consent at any time either by sending a notice to the contact option described in this privacy policy or by means of an oral notification on each call. After revocation, we will delete your telephone number, unless you have expressly consented to further use of your data or we reserve the right to use data beyond that, which is permitted by law and about which we inform you in this declaration.
6. Cookies and other technologies
General information
In order to make the visit to our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. Session cookies). Other cookies remain on your device and allow us to recognise your browser on your next visit (persistent cookies).
Protection of privacy for end devices
When using our online offer, we use absolutely necessary technologies to be able to make the expressly requested telemedia service available. The storage of information in your device or access to information that is already stored on your device does not require any consent in this respect.
In the case of functions that are not absolutely necessary, the storage of information in your device or access to information that is already stored on your device requires your consent. We would like to point out that if you do not grant your consent, you may Parts of the website may not be fully usable. Your consents granted remain in place until you adjust or reset the respective settings in your device.
Any downstream data processing by cookies and other technologies
We use such technologies to use certain functions of our website (e.g. Shopping cart function) are absolutely necessary. These technologies include IP address, time of visit, device and browser information as well as information about your use of our website (e.g. B. Information on the contents of the shopping cart) collected and processed. This serves as a weighing of interests overriding legitimate interests in an optimised presentation of our offer in accordance with Art. 6 para. 1 pc. 1 lit. f GDPR.
In addition, we use technologies to fulfil the legal obligations to which we are subject (e.g. to be able to demonstrate consent to the processing of your personal data) and to web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.
The cookie settings for your browser can be found at the following links:
Microsoft EdgeTM / SafariTM / ChromeTM / FirefoxTM / OperaTM
If you are included in the use of the technologies according to Art. 6 para. 1 p. 1 lit. a GDPR, you may withdraw your consent at any time by sending a message to the contact option described in the privacy policy.
7. Use of cookies and other technologies
If you have your consent to this in accordance with Art. 6 para. 1 pc. 1 lit. a GDPR, we use the following cookies and other technologies from third-party providers on our website. After the use of the respective technology has been found and the end of the use of the respective technology, the data collected in this context will be deleted. You can revoke your consent at any time with effect for the future. Further information on your cancellation options can be found in the section “Cookies and other technologies”. Further information, including the basis of our cooperation with the individual providers, can be found in the individual technologies. If you have any questions about the providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.
7.1 Use of Google Services
We use the following technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information collected automatically by Google technologies about your use of our website is usually transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. There is no adequate conclusion from the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission. If your IP address is collected via Google technologies, it will be shortened by activating IP anonymisation before it is placed on Google’s servers. Only in exceptional cases will the full IP address be transmitted to a Google server and truncated there. Insofar as the individual technologies do not specify anything different, the data processing takes place on the basis of an agreement concluded for the respective technology between jointly controllers in accordance with Art. 26 GDPR. Further information about data processing by Google can be found in Google’s privacy policy.
Google Analytics
For the purpose of website analysis, Google Analytics data (IP address, time of visit, device and browser information as well as information about your use of our website) are automatically collected and stored with Google Analytics, from which user profiles are created using pseudonyms. Cookies can be used for this purpose. Your IP address will not be merged with other Google data. The data processing is carried out on the basis of an agreement on order processing by Google.
Google Ads
For website analysis and event tracking, we measure your subsequent usage behaviour via Google Ads Conversion Tracking if you have accessed our website via an advertisement from Google Ads. For this purpose, cookies may be used and data (IP address, time of visit, device and browser information as well as information about your use of our website based on events specified by us, such as Visiting a website or newsletter registration) from which user profiles are created using pseudonyms.
Google Tag Manager
Google Tag Manager allows us to manage various codes and services on our website. When implementing the individual tags, Google may also process personal data (e.g. IP address, online identifiers (e.g. Cookies)). The data processing is carried out on the basis of an agreement on order processing by Google.
By using the Google Tag Manager, it is possible to achieve the integration of various services/technologies.
If you do not want to use individual tracking services and have therefore deactivated, the deactivation remains for all affected tracking tags that are integrated by the Google Tag Manager.
7.2 Use of Microsoft services
We use the technologies of Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (“Microsoft”) presented below. The data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR. The information collected automatically by Microsoft technologies about your use of our website is usually transferred to a server of the Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA and stored there. There is no adequate conclusion from the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission. Further information about data processing by Microsoft can be found in Microsoft’s privacy policy.
For website analysis and event tracking, we measure your subsequent usage behaviour via the Microsoft Advertising Universal Event Tracking (UET) if you have reached our website via an advertisement of Microsoft Advertising. For this purpose, cookies may be used and data (IP address, time of visit, device and browser information as well as information about your use of our website based on events specified by us, such as Visiting a website or newsletter registration) from which user profiles are created using pseudonyms. If your Internet-enabled devices are linked to your Microsoft account and you have not disabled the setting “Interest-related Advertising” in your Microsoft account, Microsoft can create reports on usage behavior (e.g., the cross-device numbers), even if you change your device, so-called. “Cross-Device Tracking”. We do not process personal data in this respect, we only receive statistics created on the basis of Microsoft UET.
8. Integration of the WooCommerce
To display the WooCommerce services as well as to offer products for buyers after an order are integrated on this website, WooCommerce widgets.
This serves to safeguard our legitimate interests in optimal marketing, which are predominant in the context of a balancing of interests, by enabling a secure purchasing in accordance with Art. 6 para. 1 pc. 1 lit. f GDPR. The WooCommerce and the services advertised with it are an offer from WooCommerce Ireland Ltd. Grand Canal Dock, 25 Herbert Place Dublin, D02 AY86 (WooCommerce), with which we are joining forces in accordance with Art. 26 GDPR Data protection controllers. We inform you in the context of this data protection information in the following about the essential contents of the contract according to Art. 26 para. 2 GDPR.
As part of the joint liability between us and the WooCommerce, please contact WooCommerce, whose contact options can be found for data protection questions and to assert your rights. Further information on data protection can be found in the following link here. Irrespective of this, you can always contact us at the contact option described in this privacy policy. Your request will then be passed on to the other controller if necessary.
8.1 Data processing when integrating the WooCommerce / other widgets
The WooCommerce is provided as part of a joint responsibility by a US CDN provider (Content-Delivery Network). An appropriate level of data protection is ensured by standard data protection clauses and other contractual measures. Further information on the data protection of WooCommerce can be found here. When the WooCommerce is called up, the web server automatically stores a so-called server log file, which also contains your IP address, date and time of the retrieval, the amount of data transferred and the requesting provider (access data) and documents the retrieval. The IP address is anonymised immediately after collection so that the stored data cannot be assigned to your person. The anonymised data is used in particular for statistical purposes and for error analysis.
8.2 Data processing after ordering
After completion of the order, your has-mail address, what has been added by cryptographic function, will be sent to WooCommerce . The legal basis is Art. 6 para. 1 pc. 1 lit. f GDPR. This serves to check whether you are already registered for services with WooCommerce and is therefore for the fulfilment of our and WooCommerce – overriding legitimate interests in the provision of the buyer protection linked to the specific order and the transactional valuation services in accordance with the performance of our and WooCommerce. Art. 6 para. 1 pc. 1 lit. f GDPR. If this is the case, the further processing will be carried out in accordance with the contractual agreement made between you and WooCommerce. If you are not yet registered for the Services, you will then be given the opportunity to do so for the first time. Further processing after registration is also based on the contractual agreement with WooCommerce . If you do not register, all transmitted data will be automatically deleted by WooCommerce and a personal reference is then no longer possible.
WooCommerce uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6 para. 1 lit. f GDPR for the purpose of ensuring trouble-free operation. Processing can take place in third countries (USA). An appropriate level of data protection is ensured in the case of the USA by standard data protection clauses and other contractual measures.
9. Social media
Our online presence on Youtube
If you have your consent to this in accordance with Art. 6 para. 1 pc. 1 lit. a DSGVO has granted to the respective social media operator, your data for market research and advertising purposes are automatically collected and stored when visiting our online presence on the above-mentioned social media, from which user profiles are created using pseudonyms. These can be used, e.g. To place advertisements inside and outside the platforms that are presumably in line with your interests. Cookies are usually used for this purpose. The detailed information on the processing and use of the data by the respective social media operator as well as a contact option and your rights in this regard and setting options for protecting your privacy, please refer to the data protection information of the providers linked below. Should you still need help in this regard, you can contact us.
YouTube is an offer of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information collected automatically by Google about your use of our online presence on YouTube is usually transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. There is no adequate conclusion from the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission.
10. Contact options and your rights
10.1 Your Rights
As a data subject you have the following rights:
- according to Art. 15 GDPR, you have the right to request information about your personal data processed by us to the extent specified therein;
- according to Art. 16 GDPR, the right to demand the immediate correction of incorrect or completion of your personal data stored by us;
- according to Art. 17 GDPR, you have the right to demand the deletion of your personal data stored by us, unless the further processing is used
- to exercise the right to freedom of expression and information;
- to fulfil a legal obligation;
- for reasons of public interest or
- is necessary for the establishment, exercise or defence of legal claims;
- according to Art. 18 GDPR, the right to demand the restriction of the processing of your personal data, insofar as
- the accuracy of the data is disputed by you;
- the processing is unlawful, but you reject its deletion;
- we no longer need the data, but you need it to assert, exercise or defend legal claims or
- You as per Art. 21 GDPR have objected to the processing;
- according to Art. 20 GDPR, you have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to request its transfer to another controller;
- according to Art. 77 GDPR, the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
| Right of objection Insofar as we process personal data as explained above in order to safeguard our legitimate interests, as explained above, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. Insofar as the processing is carried out for other purposes, you are only entitled to object if there are reasons arising from your particular situation. After exercising your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims. This does not apply if the processing is carried out for direct marketing purposes. Then we will not process your personal data for this purpose. |
10.2 Contact options
If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data as well as revocation of granted consent or objection to a specific use of data, please contact us directly using the contact details below:
Express Phone Repair Ltd
6 Harefield Road, Nuneaton, Warwickshire, CV11 4HD
T: 02476 642 419
Company number: 11820465
Company VAT no: GB 435454983