In this policy, we, Purmo Group Plc, describe how we, as a statutory data processor, collect and process personal data in a lawful and secure manner.
If you have any questions on this topic or if you wish to exercise your right to review what information has been collected about you, you can contact us at [email protected]
Customer information
If you are a customer or represent a customer, we may collect the following information about you: your name, title, contact information, customer type, geographic location and language of your choice. If you represent a corporate or organisational client, we may also collect information about the organisation you represent. In addition to this information, we will keep information about your communications with us (e.g. email correspondence, feedback you send, meeting notes). We may also store information about whether you have consented to the publication of information about you on our website and any further description of your wishes in this regard.
In most cases, we will receive the information described above directly from you, but we may also receive information from the organisation you represent (for example, if your employer has sent us your name and contact details when you act as a contact person in relation to an order placed by your employer). In certain cases, we may also receive information from public sources (for example, if we check your telephone number on your employer’s public website or numbering service). We may also receive information about you from other companies in our group (for example, if you were initially contacted by another company in our group and were referred to us from there).
If we do not receive the customer information we need from you, we may not be able to establish a customer relationship with you or the organisation you represent.
Other marketing information
Whether or not you are one of our customers, we may collect information about you for marketing purposes. Such information may include your name, contact details, information about the organisation you represent, the status of your newsletter subscription, your content request (for example, if you have asked us to send you articles or similar content), your consent or opt-out of receiving electronic direct marketing material or other communications related to a particular subject, information about your opening of electronic communications from us, information about your visits to our website, your geographic location, your language preference, and your history of contact with us (for example, email conversations or feedback you have provided).
In most cases, we will receive marketing information such as that described above directly from you, for example when you contact us to inquire about our products or when you subscribe to our newsletters. We may also receive information through social media platforms when you respond to our content or accounts on our platforms (for example, by liking a post or sending us a public or private message). We may also receive information through other companies in our group (for example, if you have previously interacted with another company in our group). We may also receive marketing information from public sources (for example, your company’s website) or from business service providers.
Website usage data
We also collect certain website analytics information about how our websites are used, which pages are popular, how visitors arrive at our site, how much time they spend on each page, their geographic location, which web browser they use, and other such data. Such website usage data is generally anonymous and we do not seek to identify our website visitors (except, for example, when they subscribe to our newsletter or otherwise provide us with marketing information themselves in the ways described in the previous paragraph). It is still possible, in principle, that website usage data can be identified at the time of collection, for example, based on your IP address. Below we explain in more detail how we use our website analytics.
We collect and process your data primarily to fulfil our obligations to you and/or to prepare a contract with you at your request. If you are not our direct customer, but a representative of our customer, we process your customer data in order to fulfil our obligations towards the customer you represent or to take the necessary steps to prepare for cooperation.
In certain cases, we collect and process your data to respond to legal requirements imposed on us. These include, for example, documents and receipts relating to accounting, and customer feedback relating to security issues, which we are required by law to retain in certain cases.
We may also process your data to improve our products and services. This includes, for example, analysing your customer feedback on our products and services. We may also collect and analyse information about, for example, your interest in certain of our products or your purchasing behaviour in order to improve our offerings.
We also collect and process your data for our own purposes in connection with the marketing of our products and services. This may include, for example, identifying products or services of interest to you based on your interactions with us or your responses on our social media channels, and subsequent communications from us telling you about relevant products or services or inviting you to events (read more about direct marketing by email below). Identifying popular products or trends based on the information described above is also one of the purposes of collecting and processing such data.
We collect and process website usage data because we are interested in how our website is used, what content is popular and what trends are associated with popular products. We also use website usage data to ensure the safe, secure and fast operation of our website and to provide you with content that is relevant to other pages or content you have encountered in the past.
We are required by law to ask for your consent for electronic direct marketing (requirements may vary from region to region) and for situations where we use cookies to collect your information. Below we explain more about our use of web analytics and cookies. In situations where we need your separate consent, we will inform you of this and ask for your permission.
We will not use your personal data for automated decision-making.
In general, we will not disclose your data mentioned above to third parties. However, there are a few exceptions.
In addition, we may provide your information to service providers acting on our behalf. Such service providers may include, for example, ordinary IT service providers and companies that provide us with services such as marketing. For example, we may also use survey companies to collect feedback on our products and services. We may also use service providers to help us collect results from our paid marketing campaigns, for example on social media platforms.
We currently use the services of at least the following providers:
Some of these service providers may also partly operate outside the European Union and the European Economic Area (EEA) in regions where local legislation does not itself provide an EU/EEA model for data processing. In most cases where we use a service provider that processes data outside the EU/EEA, we have entered into an agreement with that service provider based on the clauses of the EU Commission’s model contract, which guarantees secure data processing in third countries as well. In certain limited cases, international data transfers may be necessary to fulfil our agreed obligations towards the end-customer, in which case the use of the Model Clauses is not necessary. We also ensure the safe and lawful processing of data abroad in other ways. Where possible, we can provide you with more detailed information on international data transfers.
We also use cookies on our website. Cookies are small text files that your web browser stores on the device you are using. Cookies may be technically necessary for the functionality of the website and its features, but they may also be used for non-essential analytical purposes.
Technically necessary cookies include session cookies and other cookies that enable, for example, your login to our online services, language preferences, checking the contents of your shopping cart and other similar technical functionalities (where applicable).
In addition to these, we use other cookies related to website analytics and the use of web behaviour data (see above for a list of third party services we use for this purpose). For non-essential cookies, we ask for your consent to use cookies. You can withdraw your consent at any time, but this does not affect the legality of the measures already taken.
If you wish, you can control how cookies are set on your device through your web browser.
We will process and retain your personal information only for as long as it is necessary to achieve the purpose for which the information was collected or as required by applicable law.
More specifically, we may retain information about you as follows:
At the end of that retention period, your personal data will either be completely deleted or modified so that it no longer makes it possible to identify you as an individual.
Under European Union data protection law, you have at least the following rights in relation to the personal data we collect and process about you: