Who is the Administrator of my personal data?
The Administrator of your personal data is SOLLUX LIGHTING LTD, 85 Great Portland Street, First Floor, W1W 7LT London, VAT: GB371138117 (hereinafter referred to as the ‘Administrator’). Contact details of the Administrator: registerd address SOLLUX LIGHTING LTD, Address: 85 Great Portland Street, First Floor, W1W 7LT London, VAT: GB371138117 Telephone: +44 20 39361332 E-mail: email@example.com The Administrator is responsible for the use of personal data in a secure manner and in accordance with applicable law. The obligation to provide Customers with this information clause arises from the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: GDPR).
Who can I contact regarding issues related to the processing of my personal data?
In all matters related to the processing of your personal data by the Administrator, you can contact: at the e-mail address: firstname.lastname@example.org, at phone number: +44 20 39361332, or in person at registerd addres SOLLUX LIGHTING LTD, 85 Great Portland Street, First Floor, W1W 7LT London, VAT: GB371138117.
What is the source of my data - where is it collected from?
We obtain personal data directly from you - you give it to us e.g., when purchasing our products or paying for our services etc.
What is the scope of personal data processed by the Administrator, the purpose of processing and the duration of storage of personal data?
Due to the fact that we sell lighting products to our Customers, we cooperate with numerous contractors and provide various services in the field we process your personal data for different purposes, to a different extent and on different legal basis as defined in the GDPR. In addition, depending on the purpose for which we process your personal data, the duration of the processing varies. In order to provide you with the clearest possible information, we have grouped them by referring to the purpose of processing your personal data. Purpose of processing: To sell lighting products Data scope: First name, last name, bank account number, trader's company, trader's registered office address Legal basis: processing is necessary for the performance of the Contract for the benefit of the data subject - Article 6(1)(b) of the GDPR Duration of storage of personal data: The Administrator processes personal data until the expiration of claims arising from the concluded Agreement Purpose of processing: Telephone contacts Data scope: name, surname, telephone number, e-mail address, Legal basis: consent of the data subject resulting from undertaking contact with the Administrator - Article 6(1)(a) GDPR. The Administrator’s legitimate purpose of creating a contact list on the phone - Article 6(1)(f) of the GDPR. Duration of storage of personal data: After the data subject's request for erasure. Purpose of processing: To conduct ongoing business with Contractors/Customers Scope of data: Name, surname, telephone, email address, company name, registered office, bank account number Legal basis: taking action to perform the contract - Article 6(1)(b) of the GDPR Duration of storage of personal data: The personal data of Contractor/Customer Representatives will be stored for a maximum period of 4 years from the date of the last contact between the parties, and longer only until the expiry of the parties' contractual claims. Purpose of processing: To maintain an account on Facebook, Instagram, and other social media Scope of data: Name, surname, image Legal basis: The Administrator's legitimate interest in promoting its products Article 6(1)(f) of the GDPR Duration of storage of personal data: Personal data is processed for the duration of the individual's use of the pages provided by the Administrator through Facebook, Instagram, and other social media. Purpose of processing: Archiving and statistics Scope of data: Identification data, address data, contact data, data on the course of cooperation with the Customer l documents created and exchanged in the course of cooperation. Legal basis: The justified interest of the personal data Administrator in the form of keeping archives and statistics related to the services it provides and the goods it sells - Article 6(1)(f) of the GDPR. Duration of storage of personal data: After the termination of the business activity. After the customer/contractor requests the deletion of their data. Purpose of processing: Accounting Scope of data: Identification data, address data, contact data, data on the course of cooperation with the client Legal basis: Fulfilment of the legal obligation to keep accounting records - Article 6(1)(c) of the GDPR. Duration of personal data storage: After the expiry of the period required by law to keep accounting records Purpose of processing: Establishment, investigation, and enforcement of claims Scope of data: The Administrator processes personal data such as: name, surname, residential address, telephone number, e-mail address, bank account number Legal basis: The basis for the processing of personal data is the legitimate interest of the Administrator, consisting in the establishment, investigation and enforcement of claims and the defence against claims in proceedings before courts and other state authorities. (Legitimate reason: Article 6(1)(f) of the GDPR) Duration of storage of personal data:The Administrator processes personal data until the claims expire, i.e., for a maximum of 3 years from the date when the Administrator became aware of the damage and the person obliged to remedy it Purpose of processing: IT support Scope of data: name, surname, address of residence, e-mail, telephone number, date of birth, health data, PESEL Legal basis: the Administrator's legitimate interest in ensuring optimal operation of the website (Article 6(1)(f) of the GDPR) Duration of personal data storage: The Administrator processes personal data until the expiry of claims Purpose of processing: Marketing Scope of data: Name, surname, email address, company name, registered office, telephone number Legal basis: legitimate interest of the Administrator to ensure optimal operation of the website (Article 6(1)(f) of the GDPR) or consent of the person whose data is to be processed (Article 6(1)(a) of the GDPR) Duration of storage of personal data: The Administrator processes the data until you withdraw your consent to the processing of personal data or for 2 years after the last contact. Purpose of processing: Delivery of goods Scope of data: Name, surname, e-mail address, company name, registered office, telephone number, bank account number Legal basis: taking action to perform the contract - Article 6(1)(b) of the GDPR Duration of personal data storage: The Administrator processes the data until the expiry of possible claims
To whom is my data transferred?
The Administrator, with the utmost care cares about the confidentiality of your personal data. Due to the necessity of fulfilling contractual obligations and ensuring proper functioning of the website, personal data is transferred to the persons indicated below. Service providers, including IT service providers We pass your personal data to the service providers we use to operate the https://sollux-lighting.co.uk/about-us.php website. The providers supply the Administrator with technical, technological, and organisational solutions to enable the provision of services to you and organisational management. We also provide data to software providers. Suppliers and partners of logistic, transport and delivery services We transfer your personal data to suppliers and partners who provide logistics, transport, and delivery services to us. Servicing Administrator We may transfer your personal data to providers of legal and advisory services and to support the Administrator in enforcing due claims (in particular law firms). In addition, we transfer your personal data to entities providing audit and financial services to us and entities providing IT support etc. Government authorities We share your personal data if we are requested to do so by authorized governmental authorities.
Is my data transferred outside the European Union?
The Administrator transfers your personal data outside the EEA, including outside the European Union in connection with the use of, among others, IT services based outside the EEA, including outside the European Union.
Am I obliged to provide my personal data?
Providing some personal data is necessary in order to use the services offered by us. Providing other data is voluntary and is not necessary for the conclusion and performance of the contract. Required information is marked as mandatory. The consequence of failing to provide such data is the inability to provide certain services by us. Apart from the data marked as mandatory, the provision of other personal data is voluntary.
What are my rights?
The Administrator, in connection with the processing of your personal data, ensures the realization of your rights related to the processing of personal data, described below. You can exercise your rights by making a request to the data indicated in point 1.
Right to withdraw consent
You have the right to withdraw your consent to the processing of your personal data, if you had given it. The withdrawal of consent takes effect from the moment of withdrawal. The withdrawal of consent does not affect the processing carried out by us lawfully before the withdrawal of consent. The withdrawal of consent does not entail any negative consequences for you.
Right to object to the use of data
You have the right to object to the use of your personal data at any time. If we process your data based on our legitimate interests, e.g. in the case of archiving and statistics. If your objection proves to be justified and we have no other legal basis for processing your personal data, we will delete your data to which you have objected.
Right to erasure (so-called "right to be forgotten")
You have the right to request the erasure of all or some of your personal data. You have the right to request erasure of personal data if:
a) you have withdrawn specific consent, to the extent that the personal data was processed based on your consent,
b) your personal data is no longer necessary for the purposes for which it was collected or for which it was processed,
c) you have objected to the use of your data for the purpose of keeping statistics on the use of the Website and for ‘satisfaction’ surveys, and the objection has been declared valid,
d) your personal data is being processed unlawfully.
Despite your request to delete your personal data, we may retain certain personal data to the extent necessary for the establishment, assertion or defense of claims. This applies in particular to personal data including: name, surname and e-mail address, which we retain for the purpose of handling complaints and claims relating to the use of our services.
Right to restrict data processing
You have the right to request that we restrict the processing of your personal data. If you make such a request, we will prevent you from using certain functionalities or services, the use of which will involve the processing of the data covered by the request, until the request is considered. You have the right to request that we restrict the use of your personal data in the following cases:
a) where you question the accuracy of your personal data, in which case we will restrict the use of your personal data for the time we need to verify the accuracy of your data, but for no longer than 7 days,
b) when the processing of your data is unlawful, and instead of erasing your data you request the restriction of its use,
c) when your personal data are no longer necessary for the purposes for which we collected or used them, but are needed by you to establish, assert or defend your claims,
d) when you have objected to the use of your data, in which case the restriction is for the time needed to consider whether, in view of your particular situation, the protection of your interests, rights and freedoms outweighs the interests we pursue by processing your personal data.
Right of access to your data
You have the right to obtain confirmation from us as to whether we are processing your personal data, and if we are, you have the right to:
a) obtain access to your personal data,
b) obtain information about the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of that data, the intended period of retention of your data or the criteria for determining that period, your rights under the GDPR and your right to lodge a complaint with a supervisory authority, the source of that data, automated decision-making, including profiling, and the safeguards applied in relation to the transfer of that data outside the European Union,
c) obtain a copy of your personal data.
Right to data rectification
You have the right to rectify and complete the personal data you have provided. You can do this yourself in the Settings (Privacy) tab. With regard to other personal data, you have the right to request us to rectify this data (if it is incorrect) and to complete it (if it is incomplete).
Right to data portability
You have the right to receive your personal data that you have provided to us and then send it to another personal data administrator of your choice, such as another operator of similar services. You also have the right to request that we send your personal data directly to such other administrator, insofar as this is technically possible.
How much time do we have to comply with your request?
If, in the exercise of the above-mentioned rights, you make a request to us, we shall either comply with the request or refuse to comply with it immediately, but no later than within one month after receipt. If, however, due to the complexity of the request or the number of requests, we are unable to comply with your request within one month, we will comply with it within a further two months by informing you in advance of the intended extension of the deadline.
What are cookie files?
"Cookies" (Cookies) are individual, small text files sent by the websites you visit and downloaded on your computer. The information contained in these files can only be read by the website that created them. Thus, the website cannot access other files on your computer.
What cookies do we use?
The https://sollux-lighting.co.uk/about-us.php website may use two types of cookies:
a) session cookies - they remain on the user's device until leaving the website or switching off the Internet browser,
b) permanent - they remain on the user's device for the time specified in the file parameters or until the user manually deletes them.
Can I dissent to using cookies?
Activities connected with storing and sending cookies are supported by web browsers and are invisible to the user. Most browsers used accept them by default. However, the user can set the browser so that it will refuse requests to store cookies in general or selected ones. This can be done by means of settings in the browser. Before making such a decision, however, it is worth remembering that many cookies help you to use the website.
How do I disable cookies?