Privacy and Security Policy of Your Data
Privacy and Security Policy of your data, the GDPR
Update date: 05/11/2024
1/ Personal information
The use of our website involves the processing of certain personal information, referred to as "personal data."
We prioritize the lawful processing, security, and confidentiality of personal data.
The processing of personal data is governed by European Regulation 2016/679, known as the General Data Protection Regulation (GDPR), which was enacted by the European Parliament and Council on April 27, 2016. This regulation aims to protect the rights of natural persons regarding the processing of their personal data and ensures the free movement of such data. It also repeals Directive 95/46/EC.
2/ Processing of personal data
The concept of "personal data" includes all information relating to an identified or identifiable natural person, such as name, location data, IP address, contact details, and personal characteristics, as well as other documents allowing the person to be identified.
“Processing” means any operation on personal data, from collection to destruction.
We are responsible for processing your data.
3/ Personal data processed
Personal data communicated voluntarily
You are completely free to communicate or not your data.
We collect personal data from you, regardless of how you do so (including through the form to be completed on our website).
To access certain parts of our website or to complete transactions, we may ask you to provide us with certain personal information in the following ways:
by filling out forms (for example, a “Contact Us” form) on our website;
by subscribing to newsletters or other communications;
by interacting on social networks
by contacting us by telephone, email or through our other contact details;
Generally, the type of personal data you provide to us includes name, surname, address, contact details, date of birth and any personal details necessary to process any enquiry or complaint. When you apply for a job or internship, you may be required, by applicable laws, to provide certain additional information, for example about your education, and your professional background.
However, the processing of your requests, the conclusion of a contract and the delivery of products may be refused if essential data is not communicated to us.
You are solely responsible for the accuracy of the data that you communicate to us and/or that you complete.
Personal data collected automatically
When you visit our website, our server automatically collects certain information generated by the browser or device, which may in some cases constitute personal data, including:
your domain;
your IP address;
the date, time and duration of your visit to our website;
your browser type;
your operating system;
the pages viewed;
other information about your computer or device;
Internet traffic;
Information collected automatically is not used to identify you and is not combined with information provided voluntarily.
4/ Purposes of processing personal data
Processing of personal data for which we are responsible
We process and use your data only if it is justified. The purposes of this processing are as follows:
- Processing necessary to perform a past or future contract:
- Provide requested documents and communications
- Provide after-sales service
- Review your application
- Provide information on products and commercial offers
- The delivery and billing of services offered through our website;
- The technical management of our website as well as the administration of our customers.
- Evaluate transactions involving the Website or our products and services;
- Operate, evaluate, improve, develop and maintain the Website (including by monitoring and analyzing trends, access to and use of the Website for advertising, marketing and marketing research purposes);
- Evaluate, improve and develop our products and services in a broad sense; adapt our website to the needs of users;
- Contact users to answer their questions or complaints;
- Protect and ensure the security of the website, confidential and proprietary information;
- manage, protect against, and investigate fraud, risk exposure, claims and other liabilities, including, without limitation, violations of our contractual terms or laws or regulations;
- Share your data with third parties in connection with the potential or actual sale of our company or any portion of our assets, or those of any affiliated company, in which case personal data held by us about our users may be one of the transferred assets;
or after the anonymization of personal data, the establishment of statistics concerning the number of visits to the different parts of our website.
- Processing necessary to comply with a legal obligation: keeping accounts, VAT, keeping proof of online sales
- Processing necessary for the defence of our legitimate interests or those of third parties:
- The exercise of fundamental rights, including the initiation of legal action, either by us or by a third party;
- Prevention of fraudulent use of our website;
- Prospecting and marketing.
Further details on how we process your data can be provided to you upon request.
The personal data collected through cookies are used solely to simplify your use of the website and to collect statistical data on its use. This collection allows us to analyze traffic on our website and improve it. Cookies are never used for advertising purposes.
Purposes not provided for in this privacy statement
If we plan to process your data for a purpose that is not provided for in the privacy statement, we will contact you via the email address you have provided to inform you of this new processing and its purpose, it is understood that you will have the possibility to refuse this processing.
5/ Direct marketing
We may use your data to send you periodic direct marketing communications about marketed products that may be of interest to you. These will take the form of emails, postal mail, SMS or targeted online advertising. We limit direct marketing to a level that is reasonable and proportionate, based on the information we hold.
Where explicit acceptance is required, we will ask for your consent.
You have the right to opt out of direct marketing at any time - to stop, follow the unsubscribe or opt-out links in the electronic communications we send you, contact us or email us at sales@xebos.co.uk.
We also use your data to tailor or personalise the advertisements, offers and content made available to you based on your use of our website or other mobile applications, platforms or services, and by analysing the performance of these advertisements, offers and content, as well as your interaction with these advertisements, offers and content. We may also recommend content to you based on the information we have collected about you and your browsing habits. This constitutes “profiling”.
6/ Confidentiality
All personal data will be kept strictly confidential and will not be communicated to third parties under any circumstances, except with explicit and prior agreement or necessary communication to our external technical service providers and/or subcontractors to enable the delivery of our products.
Finsbury will not sell or rent personal data to third parties.
7/ Withdrawal of your consent
You can always withdraw the consent you have given us for the processing of your data by sending us a request in writing or electronically, with a copy of your identity card.
No withdrawal is possible for processing operations that are carried out based on a contract or that are necessary for the protection of our legitimate interests or those of a third party. The withdrawal will therefore have no impact on these processing operations.
The withdrawal of your consent will also not affect the lawfulness of processing already carried out based on the consent given before its withdrawal.
8/ Duration of storage of personal data
We apply a general rule of retaining the personal data we process only for as long as necessary to fulfil the purposes for which they were collected.
Generally, we retain your data for a period corresponding to a statute of limitations setting out the period within which actions can be brought in court. For example, we will retain your data for the period of the statute of limitations, to keep an accurate record of your transactions with us. However, in some cases, we may retain personal data for different periods, for example where FINSBURY is required to do so by legal, tax and accounting requirements, or if required by a legal process, a legal authority, or other governmental body entitled to make a request, for as long as necessary.
9/ Your rights
Right of access, rectification and erasure of data
You have the right to request access to your data and to obtain a copy of your data held, to request the rectification of inaccurate or incomplete data, and to request the erasure of your data.
No erasure is possible if the processing of this data is necessary for the performance or execution of a contract, for argumentation or defence in legal proceedings.
Limitation of processing
In certain cases, you have the right to obtain the restriction of the processing of your data by authorizing only the storage when:
- you contest the accuracy of your data
- when the processing is unlawful and you oppose the erasure of your data
- when you need the data for the establishment, exercise or defence of a legal claim while we no longer need your data for the processing.
Portability of personal data
You have the right to receive the personal data concerning you that you have provided to us or to transmit these data. No obtaining or transmission will be possible if the processing of your data is necessary for the performance and/or execution of a contract, for an argument or a defence in the context of a legal action.
Automated decision making
You have the right not to be subject to a decision which is based solely on automated processing and which produces legal effects concerning you or significantly affects you. This right does not exist if this decision is necessary for the performance or execution of a contract.
Opposition
You have the right to object to the processing of your data necessary for our legitimate interests provided that this is for reasons relating to your particular situation and (2) for direct marketing purposes. No objection is possible if the processing of your data is necessary for the performance of a contract.
10/ Exercising your rights
You can exercise these rights by sending us a dated request, in writing or electronically, with a copy of your identity card.
If we believe that you are not entitled to exercise one or more of these rights, we will inform you in writing.
11/ Security
FINSBURY aims to protect your data from unauthorized access, improper use or disclosure, falsification, inadvertent disclosure to third parties, unauthorized alteration, unlawful destruction or accidental loss, and we use and maintain reasonable processes, systems and technologies for this purpose. However, you acknowledge that no transmission over the Internet is completely secure or error-free and that these processes, systems and technologies used and maintained by XEBOS may be subject to malicious acts.
Consequently, we cannot be held responsible in any way for direct or indirect damages resulting from the wrongful or illicit use of your data by a third party.
12/ Complaints
If you consider that the processing of your data infringes applicable law, you have the right to complain to the Data Protection Authority of your habitual residence, place of work or place of the alleged infringement.
13/ Changes to this privacy statement
This privacy statement may be extended or adapted in the future. We therefore recommend that you consult this privacy statement regularly.
14/ Contact details
If you have any questions about this Statement or would like to exercise any of your rights, please contact us at:
XEBOS UK
Flat 9 Rindom Court, Old Meeting Street
West Bremwich B70 9SZ
Phone: +44 7821279141
Email: ssupport@xebos.co.uk
Or
Phone +44 7369260956
Email: admin@xebos.co.uk