Data Protection Notice
 
Contents
 
I.    Controller                                                                                                                             
II.   Data Protection Officer                                                                                                     
III.  Processing of your personal data when you visit our website                                   
1.    When you visit our website for information                                                                
2.    When you use our online shop                                                                                     
3.    When you use our contract platform                                                                            
4.    When you use our order history platform                                                                   
5.    When you use the contact form                                                                                    
IV.   Use of cookies   
V.    Recipients  
VI.   Transfer of personal data outside of the EU   
VII.  Your rights   
VIII. Automated individual decision-making, including profiling   
 
 
 
Welcome to our website and thank you for your interest in our Group and our companies’ products.
In the following Data Protection Notice, Kloeckner Metals UK (also referred to in the following as “Kloeckner”, “we”, “us” or “our”) provides you with various information about the processing of your personal data when you visit our website at https://shop.kloeckner.co.uk (referred to in the following as the “website”). Personal data is all information relating to an identified or identifiable natural person (such as your first name and last name, your mailing address, your phone number or your e-mail address).
In the following, we would like to inform you in particular what personal data will be processed when you visit our website and make use of its services and features, why this takes place in each case, and your rights in this regard.
 
 
I. Controller
 
The controller for the purposes of data protection law is:
 
Kloeckner Metals UK
Valley Farm Road, Stourton
Leeds
LS10 1SD 
 
In instances where we share joint responsibility for processing with another controller in accordance with Article 26 of the GDPR, this is marked in the following with an asterisk (*) and the contact details of the other controller are provided.
 

 

II. Data Protection Officer
 
You can contact our Data Protection Officer using the following contact details:
 
Kloeckner Metals UK
Valley Farm Road, Stourton
Leeds
LS10 1SD
 

 

III. Processing of your personal data when you visit our website
 
1. When you visit our website for information
 
a) Data categories affected:
Each time you visit our website, we process the following data:
  • The connection data of the requesting device, including the IP address;
  • The web pages accessed, including the referring page;
  • The date and time of your visit;
  • The type and version of the requesting browser and the operating system;
  • The volume of data transferred in connection with your visit.
 
b) Purposes of processing, legal basis and any legitimate interests:
We process this data for the purpose of making our website available and to ensure its technical operation on the basis of Article 6(1)(b) of the GDPR as well as to identify and eliminate faults on the basis of Article 6(1)(f) of the GDPR. In this connection, we pursue the interest of fault-free use of the website.
 
c) Duration of data storage:
We erase the data after 30 days unless, in exceptional instances, we need it for a longer period for the purposes mentioned above. In such instances, we erase the data as soon as the purpose no longer applies.
 
d) Need for your cooperation in data collection/consequences of refusal:
This data is processed automatically when you visit our website. You cannot use our website unless this data is provided.
 
2. When you use our online shop
 
a) Data categories affected:
We process the following data when you use our online shop: title, first name, last name, your account identifier, business e-mail address, password, date of birth, company name, business mailing address, form of company, billing address, delivery address and details, payment method, credit card information (truncated), business telephone number, tax number, Kloeckner customer number, and details of customer-specific prices (agreed discounts and terms), contracts and orders placed (including, for example, order number, call-off quantity unit, article number, quantity required, date and time), user data for the users associated with your account, including name, e-mail address, and usage data in connection with the use of our online shop.
 
b) Purposes of processing, legal basis and any legitimate interests; sources:
We process this data in order to complete your order and make the online shop available in accordance with Article 6(1)(b) of the GDPR (in the case of data concerning contractual partners) or Article 6(1)(f) of the GDPR (in the case of data concerning the contact persons of contractual partners). This includes, in particular, preparing and communicating offers, fulfilling orders, including logistics and invoicing, and general customer support for purposes such as answering questions on products.
Furthermore, in compliance with Article 6(1)(f) of the GDPR, this data is processed in pseudonymized form to generate statistical analyses of general customer behavior and manage our business operations or for the purposes of online marketing. 
Furthermore, we analyze existing data in terms of general customer behavior. This involves gaining an understanding of customer-specific differences with regard to ordering frequency, ordering medium, quantities, prices, etc. in order to provide you with personalized service. The basis for this, pursuant to Article 6(1)(f) of the GDPR, is our legitimate interest in promoting sales by making targeted offers and through customer support.
If you place an order in the online shop, we process your company name and your business mailing address to meet legal requirements for screening against terrorist lists on the basis of Article 6(1)(c) of the GDPR. We collect the data either directly from you, from information already known to us in other Kloeckner systems or from information provided by the administrator responsible for you in our online shop.
 
If you place items in a shopping basket and quit the order process by closing your browser window or save your basket without placing an order, we process your shopping basket data and your phone number on the basis of Article 6(1)(f) of the GDPR to contact you by phone and ask if there were technical reasons why you did not proceed with your order. In this connection, we pursue the interest of improving the quality of our online shop, identifying any faults and helping you with troubleshooting.
 
If you have already ordered products in our online shop, we process your first name and last name, title, e-mail address, buying behavior and buying history (online/offline) and the responsible branch on the basis of Article 6(1)(f) of the GDPR for the purpose of sending target group-specific e-mails. Our legitimate interest is that of sales promotion by advertising.
 
If you have consented to receive direct marketing, we also process additional data categories for the purpose of sending individualized e-mails. With regard to the processing of your data for direct marketing purposes, please see the separate Data Protection Notice for direct marketing.
 
c) Duration of data storage:
We store your data only until the legitimate purpose for which it has been collected has been completed (generally meaning contract and order fulfillment including any warranty obligations) or for as long as any statutory retention requirements apply. Notable statutory requirements include tax law and commercial law stipulations that mostly require a six- to ten-year retention period.
 
If your personal data is processed on the basis of Article 6(1)(a) of the GDPR and you revoke your consent, we will erase your stored personal data provided that there is no conflict with statutory requirements – such as retention requirements – or with our legitimate interests.
 
d) Need for your cooperation in data collection/consequences of refusal:
The provision of data when using our online shop is necessary for registration and order fulfillment. You cannot use our online shop unless this data is provided.
 
3. When you use the contract portal
 
a) Data categories affected:
We process the following data when you use the contract portal: Kloeckner customer number, business e-mail address, user name, password, and information on your contracts (such as duration, quantity, order number, responsible contact person, quantity unit, delivery address, article number, date and time).
 
b) Purposes of processing and legal basis:
We process this data for fulfillment and to provide the contract portal on the basis of Article 6(1)(b) of the GDPR (in the case of data concerning contractual partners) or Article 6(1)(f) of the GDPR (in the case of data concerning the contact persons of contractual partners).
 
c) Duration of data storage:
We erase your personal data from the contract portal upon your request or after contract fulfillment and the expiration of tax and commercial law retention requirements.
 
d) Need for your cooperation in data collection/consequences of refusal:
The provision of data when using the contract portal is necessary for registration and fulfillment. You cannot use the contract portal unless this data is provided.
 
4. When you use our order overview
 
a) Data categories affected:
We process the following data when you use the order overview: Kloeckner customer number, business e-mail address, user name, password, and information on your orders (such as duration, quantity, order number, contact person, quantity unit, delivery address, article number, date and time).
 
b) Purposes of processing and legal basis:
We process this data for fulfillment and to provide the order overview on the basis of Article 6(1)(b) of the GDPR (in the case of data concerning contractual partners) or Article 6(1)(f) of the GDPR (in the case of data concerning the contact persons of contractual partners).
 
c) Duration of data storage:
We erase your personal data from the order overview upon your request or after order fulfillment and the expiration of tax and commercial law retention requirements.
 
d) Need for your cooperation in data collection/consequences of refusal:
The provision of data when using the order overview is necessary for operation and provision of the order overview. You cannot use the order overview unless this data is provided.
 
5. When you contact us
 
a) Data categories affected:
When you contact us, we process the data you provide for the purpose, such as your title, first name, last name, e-mail address, company name, postcode/ZIP code, Kloeckner customer number, phone number, reason for contact, your message and any attachments.
 
b) Purposes of processing, legal basis and any legitimate interests:
We process this data to respond to your inquiry on the basis of Article 6(1)(b) of the GDPR (in the case of data concerning contractual partners) or Article 6(1)(f) of the GDPR (in the case of data concerning persons other than contractual partners). In doing so, we pursue the interest of responding to your inquiry.
 
c) Duration of data storage:
We erase the data when your inquiry has been responded to and after the expiration of tax and commercial law retention periods.
 
d) Need for your cooperation in data collection/consequences of refusal:
You must only provide us with the data we need to process your inquiry and contact you. These mandatory data items are marked in the contact form with an asterisk. If you do not provide us with the mandatory data, we may not be able to respond to your inquiry. All other data items are not mandatory, but they help us process your request faster and more effectively.
 
IV. Use of cookies

 V. Recipients 

Internal recipients: Access to your personal data is restricted to the extent needed and to those persons at Kloeckner who need such access in order to fulfill the above-mentioned purposes.

External recipients: We pass on your personal data to external recipients only if it is necessary to do so in order to process and respond to your inquiry or order, it is expressly allowed by law or you have given us your consent to doing so.

External recipients may be the following:

 a) Processors

Kloeckner Group companies or external service providers that we use for the provision of services, such as in connection with technical infrastructure and maintenance and with the provision of content under contract.

 b) Public bodies

Public authorities and government institutions, such as prosecutors, courts or tax authorities to which we are under a binding obligation to disclose personal data by law.

 c) Other recipients

 We pass on your personal data to other recipients only if it is necessary for contract fulfillment, you have given your consent or it is expressly allowed by law. Other recipients may notably include Group companies, payment service providers, credit reporting agencies or debt collection agencies.

Our service provider for matters related to debt collection is:

Atradius Crédito y Caución S.A. de Seguros y Reaseguros
3 Harbour Drive 
Capital Waterside 
Cardiff CF10 4WZ
Phone: + 44 29 2082 4000
Fax:     + 44 29 2082 40003
E-mail: info.uk@atradius.com 

Atradius N.V.’s data protection notice is available online at https://atradius.co.uk/article/privacy-statement.html. Atradius’s Data Protection Officer can be contacted by e-mail at dpo@atradius.com.

 

VI. Transfer to countries outside of the EU 

Where applicable, we also transfer personal data processed in connection with the processes described above to recipients who process your personal data outside the territory of the European Union. If the countries concerned do not have an equivalent level of data protection in accordance with EU law, we ensure adequate protection of your personal data with the recipients concerned by means of appropriate safeguards as stipulated in the GDPR. You can request a copy of the safeguards from us (see heading I for contact details).

 

VII. Your rights

Your rights as a data subject under the General Data Protection Regulation (GDPR) – subject to the applicable legal requirements being met – are as follows: 

Access: You have the right of access to personal data concerning you that we process.

Rectification: You have the right to obtain rectification of your personal data. You also have the right to have incomplete personal data completed.

Erasure: In certain instances, you have the right to obtain erasure of your personal data.

Restriction of processing: In certain instances, you have the right to have us restrict the processing of your personal data.

Data portability: If you have provided us with data on the basis of a contract or consent, you have the right to receive the data you have provided in a structured, commonly used and machine-readable format or to have us transmit it to another controller.

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(f) of the GDPR. We will then no longer process the personal data for the stated purposes unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing is for the purpose of establishing, exercising or defending legal claims.

With regard to the processing of your data for direct marketing purposes, please see the separate information on opt-out rights with regard to direct marketing.

Please also note the information on revocation of your consent with regard to processing on the basis of cookies in section IV.

Revocation of consent: If you have given us consent to the processing of your data, you can revoke it at any time with effect for the future. This does not affect the lawfulness of the processing of your data prior to the revocation.

Exercising your rights: To exercise any or all of your rights as described above, please contact us by e-mail or postal mail at the address under heading I. above. Alternatively, you can also contact the Data Protection Officer responsible for you (see heading II for contact details). Please make sure that we can clearly identify you.

In instances where we share joint responsibility with another controller in accordance with Article 26 of the GDPR, you may also contact the other controller in order to exercise your aforementioned rights, using the contact details provided.

On request, we will make available the essence of the arrangement under Article 26(1) of the GDPR determining who meets which responsibilities under the GDPR. 

Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority – in particular, in the Member State of your habitual residence, place of work or place of the alleged infringement – if you consider that the processing of personal data concerning you is unlawful.

 

VIII. Automated individual decision-making, including profiling

There is no automated individual decision-making, including profiling, within the meaning of Article 22 of the GDPR, in connection with the use of our website.

As of November 2019