PRIVACY POLICY

pursuant to Article 13 of Regulation (EU) 2016/679
General Data Protection Regulation

(adapted from mountfieldlawnmowers.co.uk)

By means of this information notice (“Notice”), the Data Controller, as defined below, wish to inform You on the purposes and methods of the processing of Your personal data and on the rights that Regulation (UE) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”) entrust You.

This Notice pertains exclusively to the data processing performed within the website www.quadrantmowers.co.uk (the “Website”); any third-party website accessible by the data subject via links remains subjects to the privacy policy provided by the website manager of the relevant website. We recommend data subjects to inspect those documents before browsing on third-party websites.

1. Who is the Data Controller

The Data Controller is Quadrant Mowers (“Quadrant Mowers” or the “Data Controller”), with registered office in Horsell, Woking, Surrey, GU21.

2. Which personal data we process
      2.1 Specific requests

Pursuant to a specific request by You, and for the purposes set forth in article 3 of this Notice, the Data Controller processes the following personal data:
• common data and contact details, such as the name, surname, address, phone number, e-mail address, your IP address, your IP referrer and details of which version of web browser you used and other addresses.

• information on how you use the site, using cookies and page tagging techniques

      2.2 Browsing data

The IT systems and programs used for the functioning of the Website collect some personal data whose transmission is implicit in the usage of the Internet communication protocols (e.g. IP addresses or domain names of computers used by users who connect to the Website, URI addresses – Uniform Resource Identifier – of the requested resources, time of the request, method used in submitting the request to the server, file size obtained in response, numerical code about the status of the response made by the server – favorable outcome, error, etc. – and other parameters related to the operating system and the user’s IT environment). Although the information that is not collected to be associated with identified data subjects, by their nature they could, through processing and association with data held by third parties, allow identification of data subjects.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Website and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical IT crimes to the detriment of the Website: except for this eventuality, at present the data on web contacts do not persist for more than seven days.

      2.3 Cookies

In some cases, personal data is collected by Quadrant Mowers with the use of different technologies, including that of “cookies”. Cookies are made up of a series of data that a website sends to a “browser” (which could be Your browser). This information can then be stored on a computer (even Your computer) through a tag that identifies the computer but not the user.
Some pages of the Website use cookies, sent by Quadrant Mowers or third parties, and other technologies in order to allow the technical operation of the Website, for a better use of the site and to perform statistical analysis of the use of the Website.
For more information, please refer to the Cookie Policy.

3. Purposes of processing and legal basis
      3.1 Management of Your request

The processing is necessary for permitting the browsing on the Website, improving the site by monitoring how You use it and to reply to Your specific requests, included, but not limited to, sending You technical information and prices on Quadrant Mowers products, gathering feedback to improve our services, responding to any feedback or questions You send us, if you’ve asked us to and arranging an appointment with Quadrant Mowers etc.
The legal basis for the processing is therefore the execution of Your request, pursuant to Article 6, first paragraph, letter b), of the GDPR; therefore, Your consent is not necessary to allow the processing.

      3.2 Marketing

In case You provide us with Your specific consent, we may process Your personal data also for providing You with commercial information on products and services marketed by Quadrant Mowers; as well as asking You to participate in statistical analysis, polls and market surveys with regard to products and services marketed by Quadrant Mowers.
The legal basis for the processing activity is Your consent, pursuant to Article 6, first paragraph, letter a), of the GDPR.
Even if You grant us Your consent, You may request us to cease the processing for marketing purposes at any time, by sending an email to the following address: quadrant-mowers@outlook.com or by clicking on the link contained in each e-mail You will receive.

4. Nature of the personal data processing and consequences of a refusal

The processing of Your personal data is a mandatory requirement for the management of Your request, and therefore Your refusal to provide the personal data will result in the impossibility for the Data Controller to execute the sale and purchase agreement.

Sending information over the internet is generally not completely secure, and we can’t guarantee the security of your data while it’s in transit.

Any data you send is at your own risk.

We have procedures and security features in place to keep your data secure once we receive it.

We won’t share your information with any other organisations for marketing, market research or commercial purposes, and we don’t pass on your details to other websites.

If You refuse to grant us Your consent to process Your personal data also for marketing activities, we will not be able to provide You with special offers and/or information on new products and services; however, this will not impair the management of any different request from Your side.

5. Data Retention

The Data Controller will process your personal data, for the purposes indicated above, only for the time necessary for the management of Your request, as well as for the fulfillment of any legal obligation provided by any applicable European and/or Member State’s laws and/or regulations.
Your personal data will be subsequently retained by the Data Controller for a period equal to 1 year / equal to the applicable statute of limitation and then deleted.
As for the marketing activities, your data will be processed until 1 year from our receipt of Your consent, notwithstanding that you will be able to immediately interrupt the processing as specified in preceding article 3.

6. Methods by which your personal data will be processed

Your personal data will be processed, pursuant to the provisions of the GDPR, by means of paper, computerized and telematics tools, for the purposes indicated above and with adequate methods to guarantee their security and confidentiality in accordance to Article 32 of the GDPR.

7. To which subjects your personal data may be communicated and who may get to know them

For the purposes described in paragraph 3 above, Your personal data will be disclosed to employees, external consultants and, in general, Quadrant Mowers’ personnel, who will act as person authorized to the processing of personal data, specifically appointed as internal delegates.
In addition, Your personal data will be processed by the following third parties:
a) service providers for the management of the IT system;
b) service providers for technical assistance;
c) logistic companies, carriers, forwarders;
d) other service providers.
The above subjects shall act, in some cases, as an autonomous data controller, in other case as data processors specifically appointed by the Data Controller pursuant to Article 28 of the GDPR. You may request a list of our data processors at the contact details indicated at article 1 above.
Your personal data will not be disclosed to the public.

8. Your rights as data subject

With regard to the processing described in this Notice, You may exercise any of the rights described in this section in accordance with Articles 15 through 21 of the GDPR. In particular:
• Managing Your Information – Right of access – Article 15 of the GDPR: right to obtain from the data controller confirmation as to whether or not Your personal data is being processed, and, where that is the case, access to the personal data and the following information (also by receiving a copy of the same):
a) the purposes of the processing;
b) categories of personal data concerned;
c) the recipients or categories of recipient to whom the personal data have been or will be disclosed;
d) the envisaged period for which the personal data will be stored or the criteria used to determine such period;
e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
f) the right to lodge a complaint with the supervisory authority;
g) the source of the persona data, if not collected directly;
h) the existence of automated decision-making, including profiling;
• Rectification of Inaccurate or Incomplete Information – Right of rectification – Article 16 of the GDPR: the right to obtain, without undue delay, the rectification of inaccurate personal data or the integration of the same;
• Erasure – Right to erasure – Article of the 17 GDPR: the right to obtain from the controller the erasure of Your personal data without undue delay, if:
a) the personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) You withdraw Your consent, and there is no other legal basis for the processing;
c) You object to the processing of Your personal data on legitimate grounds;
d) the personal data has been unlawfully processed;
e) the personal data has to be erased for compliance with a legal obligation;
f) the personal data has been collected in relation to the offer of information society services referred to in Article 8, first paragraph, of the GDPR.
If You no longer want us to use Your information, You can request that we erase Your personal information. Please note that if You request the erasure of Your personal data, we may retain and use Your personal data to the extent necessary to comply with our legal obligations or for the performance of a duty carried out in the public interest or in the exercise of official authority vested in the Data Controller, or for the establishment, exercise or defense of legal claims. For example, we may keep some of your information for tax, legal reporting and auditing obligations.
• Restriction of processing – Right to restriction on processing – Article 18 of the GDPR: right to obtain from the controller restriction of processing if:
a) the accuracy of the personal data is contested by You, for a period enabling the controller to verify the accuracy of the personal data;
b) the processing is unlawful and You oppose the erasure of the personal data and request the restriction of their use instead;
c) the controller no longer needs the personal data for the purposes of the processing, but they are required by You for the establishment, exercise or defense of legal claims;
d) You have objected to processing pursuant to Article 21, first paragraph, of the GDPR pending the verification whether the legitimate grounds of the controller override Yours.
• Data Access and Portability – Right of portability – Article 20 of the GDPR: the right to receive, in a structured format, commonly used and readable by an automatic device the personal data concerning Yourself provided to the Data Controller and the right to transmit the same to another data controller without impediment, if the processing is based on consent and is made with automated means. Furthermore, the right to obtain that Your personal data is transmitted directly from the Data Controller to another data controller, if this is technically feasible;
• Complaints – file a complaint to the competent data protection authority by sending a notice to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF or to the Data Protection Supervisory Authority of your habitual residence, place of work or place of the alleged infringement.
The above rights may be exercised by contacting the Data Controller and the DPO at the contact details indicated in previous article 1. Please note that we may ask You to verify Your identity before taking further action on Your request.

Links to other websites

Quadrant Mowers may contain links to other websites.

This privacy policy only applies to quadrantmowers.co.uk, and doesn’t cover other websites that we link to.

Following a link to another website

If you go to another website from this one, read the privacy policy on that website to find out what it does with your information.