Data privacy provisions

We are delighted that you are visiting our website and would like to thank you for your interest. In the following, we would like to inform you about the handling of your personal data when using our website. Personal data means all data which can be used to personally identify you.

1. Information on the collection of personal data and contact details of the controller

The controller responsible for data processing on this website as defined by the General Data Protection Regulation in UK (GDPR) is

BLANCO UK

1 Victor Way

Colney Street

St. Albans AL2 2 FL

United Kingdom

The controller is the natural person or legal entity who decides on the purposes and means of personal data processing, be it alone or in cooperation with others.

The controller has appointed a data protection officer, who can be reached as follows: dataprotectionofficer@blanco.co.uk

BLANCO UK

DATA PROTECTION OFFICER

1 Victor Way

Colney Street

St. Albans AL2 2 FL

United Kingdom

If you have any questions about data protection, you can contact our data protection team at the e-mail address datenschutz-kt@blanco.de

This website uses SSL or TLS encryption for security reasons and to protect the transfer of personal data and other confidential content (e.g. orders or inquiries to the controller). You can identify an encrypted connection by the character sequence "https://" and the lock symbol in your browser line.

2. Data collection when visiting our website

If you use our website for information purposes only, i.e. if you do not register or otherwise transfer information to us, we only collect data that your browser transmits to our server (known as "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our website visited

• Date and time of access

• Volume of data sent in bytes

• Source/reference from which you accessed the site

• Browser used

• Operating system used

• IP address used (in anonymised form, if applicable)

Processing is carried out in accordance with Art. 6(1)(f) UK-GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files at a later date if there are concrete indications of unlawful use.

3. Contact

Personal data is collected when contact is made with us (e.g. via contact form, e-mail or telephone). The data collected via a contact form can be seen in the respective contact form. This data will only be stored and used for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Art. 6(1)(f) UK-GDPR. If you contact us with the intent to conclude a contract, an additional legal basis for the processing is Art. 6(1)(b) UK-GDPR. Your data will be deleted once your request has been processed. This is the case if circumstances indicate that the matter in question has been conclusively clarified and if no statutory retention obligations stand in the way.

3.1 ReCaptcha:

We use the Google ReCaptcha function of the provider Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland on our website in order to prevent misuse of the content we offer. This system helps us to identify whether the user is an actual person or an Internet bot. This helps us prevent the automatic use of our contact forms and the sending of spam messages to our presented e-mail account.

When the Google ReCaptcha function is used, cookies are set that can store different data, such as IP address, referrer URL, information about the operating system, mouse movements, keystrokes, dwell time or settings on the user's device. This information is saved and passed on to Google. It cannot be ruled out that the data will be transferred to a Google server in the USA and saved there. We have no influence on data transfer.

There is no adequacy decision or other suitable guarantees that ensure an adequate level of data protection for the USA. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being entitled to legal remedies.

The legal basis for the processing of personal data at Google ReCaptcha is your voluntary consent pursuant to Art. 6(1)(1)(a) UK-GDPR. At the same time, you also consent to your data being transmitted to the USA in accordance with Art. 49(1)(1)(a) UK-GDPR.

Your consent is voluntary and can be withdrawn at any time with effect for the future. To do so, change your cookie settings under “Privacy settings” under the section Google ReCaptcha.

We process your personal data for as long as necessary to achieve its purpose. If you withdraw your consent by making changes to your settings under "Privacy settings", we will delete your data, unless statutory retention obligations prevent us from doing so.

You can find further information on how Google handles the use of Google ReCaptcha in Google’s privacy policy, which you can view under the following link: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/about/

3.2 Appointment bookings SimplyBook.me

On our website you have the possibility to book and manage appointments. For this purpose, we use the SimplyBook.me system of the service provider SimplyBook.me Ltd, 30 Glathonos, P. Makedonas Court, 3041, Limassol, Cyprus. This involves the processing of personal data, such as name, e-mail address, contact details, registration data, appointment data and other data that you provide when booking an appointment. Further information can be found on the following SimplyBook.me website: https://simplybook.me/de/policy & https://simplybook.me/de/legal/gdpr-compliance."

We have concluded a corresponding order processing contract with the service provider SimplyBook.me.

The legal basis for the processing of personal data is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f UK-GDPR. Our legitimate interest basically lies in the fact that this enables you to make and manage appointment bookings quickly and efficiently.

4. Data transfer to third parties for order processing

4.1 We work with the following service providers, who support us in full or in part in the performance of concluded contracts, in order to process your order and transport the goods:

The personal data we collect is passed on to the transport company commissioned with the delivery as part of the contract processing, if doing so is necessary to deliver the goods. For a transport within UK and Republic of Ireland, this includes the name, name of company (if applicable), as well as the postal address/parcel station and any associated address extensions. Additional information (e.g. e-mail address or telephone number) may be required in other countries of delivery due to the type of delivery or the circumstances there, so that the delivery agent can find or reach you.

The legal basis for the transfer of data to our service providers is Art. 6(1)(b) UK-GDPR.

5. Registration in the dealer portal

You have the option of registering on our website in the dealer portal. To do so, register using your customer number and postal code. In this dealer portal, you have the option of storing and updating your data and making purchases. You can also see an overview of your orders and deliveries or make changes to the consents you have granted here.

The legal basis for the processing is our legitimate interest in accordance with Art. 6(1)(f) UK-GDPR, to be able to provide you with the service described above for registration in the dealer portal and creation of a dealer account or the performance of a licence agreement with you (Art. 6(1)(b) UK-GDPR). Our legitimate interest is to provide you with a dealer account at your request in which you have an overview of your data, settings and orders. However, registration in the dealer portal is voluntary, as you can also place orders without registering in the dealer portal.

You may raise an objection to the processing of your data on the basis of Article 6(1)(f) UK-GDPR (in accordance with Art. 21(1) UK-GDPR). In principle, we will then have the opportunity to present compelling reasons for the processing in order to continue doing so. However, we will not do this for a customer account and the following will apply: The customer account will then have to be deleted and will no longer be available to you.

We only store your personal data and other information entered in the dealer portal for as long as you maintain the dealer portal. You have the option of cancelling and deleting it in the dealer portal. We will then delete your access to the dealer portal. If deletion is not possible for legal reasons, the respective data will be blocked instead. Please note that we may store the data about orders visible in your dealer account for longer (see 5.).

We would like to point out that certain information in the dealer portal may be subject to statutory retention periods, requiring us to retain such information for longer due to legal commercial or tax laws. This information is then only used for the purpose of legal verification and is generally deleted after 10 years.

6. Cookies

In order to make the visit to our website attractive and to enable the use of certain functions, we use what are known as “cookies” on various website pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (known as “session cookies”). Other cookies remain on your end device and allow your browser to be recognised on your next visit (known as “persistent cookies”). If cookies are set, they collect and process certain user information, such as browser and location data and IP address values, within an individual scope. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie.

We use different categories of cookies on this website: Technically necessary cookies, without which the functionality of our website would be restricted, and also optional analysis, functional and marketing cookies, which usually come from third-party providers:

6.2 Analytics cookies

Analytics cookies collect information about how visitors use a website as a whole, for example which pages they visit most often and whether they receive error messages from websites. All information collected with the help of these cookies serves exclusively to understand and improve the functionality and service of the website.

The legal basis for the use of analytics cookies and the processing of your data by the providers of these cookies is your prior consent (Art. 6(1)(a) UK-GDPR). You can revoke your consent at any time in the Privacy settings, which you can access using the link at the bottom of the website.

6.3 Functional cookies

We use functional cookies to improve and simplify the use and performance of our website.

The legal basis for the use of the functional cookies and the processing of your data by the providers of these cookies is your prior consent (Art. 6(1)(a) UK-GDPR). You can revoke your consent at any time in the Privacy settings, which you can access using the link at the bottom of the website.

6.4 Marketing cookies

Marketing cookies are used to better tailor advertising to you and your interests. They also limit how often you see the same advertisement, measure the effectiveness of an advertising campaign, and understand people’s behaviour after viewing an advertisement. These cookies are usually placed on the website by advertising networks with the consent of the website operator (in this case, us). They recognise that a user has visited a website and pass on this information to other companies, e.g. companies that advertise, or adapt advertising accordingly. They are often linked to a website functionality provided by this company. This way, we intend to tailor the advertising on other websites to you and provide the advertising networks we use with information about your visit so that you can later be presented with exactly the advertising that you are potentially interested in based on your browsing behaviour.

The legal basis for the use of marketing cookies and the processing of your data by the providers of these cookies is your prior consent (Art. 6(1)(a) UK-GDPR). You can revoke your consent at any time in the Privacy settings, which you can access using the link at the bottom of the website.

6.5 List of analytics, functional and marketing cookies

You can access the list of cookies we use and the providers who receive personal data from you using the cookies in the cookie platform that you can reach with the "Privacy settings" link at the bottom of the page. There you will find further information on the individual providers and cookies.

If you would like to receive further information about these cookies from us instead, please contact us using the contact details described in Section 1.

6.6 How can I declare or revoke my consent to cookies?

If you visit our website for the first time, the information on data protection will be displayed on your landing page with the consent text in optional cookies. By clicking on the individual categories (analytics, functional and marketing cookies) and then confirming by clicking on "Accept", you agree to these cookies being placed. You can adjust and change these settings at any time in the cookie settings, which you can access using the "Privacy settings" link at the bottom of the website.

7. Rights of the data subject

7.1 The applicable data protection law grants you comprehensive data subject rights (rights to information and intervention) with respect to the controller with regard to the processing of your personal data, which we will inform you about below:

Right of access in accordance with Art. 15 UK-GDPR:

In particular, you have the right to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the right to correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data, if not collected by us from you, the existence of automated decision-making including profiling and, where applicable, substantive information about the logic involved and the scope and intended effects of such processing, as well as your right to be informed of the guarantees in accordance with Art. 46 UK-GDPR when forwarding your data to non-member states;

Right to correction in accordance with Art. 16 UK-GDPR:

You have the right to immediate correction of incorrect data concerning you and/or completion of incomplete data stored by us;

Right to deletion in accordance with Art. 17 UK-GDPR:

You have the right to request the deletion of your personal data if the prerequisites of Art. 17(1) UK-GDPR are met. However, this right does not apply in particular if the processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or for the establishment, assertion or defence of legal claims;

Right to restriction of processing in accordance with Art. 18 UK-GDPR:

You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data disputed by you is verified, if you reject the deletion of your data due to impermissible data processing and instead request the restriction of the processing of your data, if you require your data for the establishment, assertion or defence of legal claims, once we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons of your particular situation, as long as it has not yet been determined whether our legitimate reasons prevail;

Right to information in accordance with Art. 19 UK-GDPR:

If you have asserted the right to correction, deletion or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate amount of effort. You have the right to be informed of these recipients.

Right to data portability in accordance with Art. 20 UK-GDPR:

You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transfer to another controller, if technically feasible;

Right to withdraw consent granted in accordance with Art. 7(3) UK-GDPR:

You have the right to revoke your consent to the processing of data at any time with future effect. In the event of revocation, we will delete the data in question immediately if further processing cannot be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent prior to revocation.

Right to lodge a complaint in accordance with Art. 77 UK-GDPR:

If you believe that the processing of personal data concerning you is in violation of the UK-GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged violation, without prejudice to any other administrative or judicial remedy.

7.2 Right to object in accordance with Art. 21 UK-GDPR:

If we process your personal data on the basis of our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time with future effect for reasons arising from your particular situation. If you exercise your right to object, we will terminate the processing of the data concerned. However, further processing is reserved if we can prove compelling legitimate grounds for processing that override your interests, fundamental rights and freedoms, or if the processing serves the establishment, assertion or defence of legal claims. If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. You can exercise the objection as described above. If you exercise your right to object, we will terminate the processing of the data concerned for direct marketing purposes.

8. Duration of storage of personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of the processing and – if applicable – on the basis of the respective statutory retention period as well (e.g. retention periods under commercial and tax law). In the case of processing personal data on the basis of express consent pursuant to Art. 6(1)(a) UK-GDPR, this data will be stored until the data subject revokes their consent. Should statutory retention periods exist for data that are required in the context of legal or similar obligations based on Art. 6(1)(b) UK-GDPR, this data will be routinely deleted after the expiry of the retention periods, provided that it is no longer required for the fulfilment or initiation of the contract and/or no legitimate interest in continued storage exists on our part. When processing personal data on the basis of Article 6(1)(f) UK-GDPR, this data will be stored until the data subject exercises their right to object in accordance with Art. 21(1) UK-GDPR, unless we can demonstrate compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. When processing personal data for the purposes of direct marketing on the basis of Art. 6(1)(f) UK-GDPR, this data will be stored until the data subject exercises their right to object in accordance with Art. 21(2) UK-GDPR. Unless otherwise stated in the other information contained in this statement on specific processing situations, stored personal data will be deleted if it is no longer necessary for the purposes for which it was collected or otherwise processed.

9. Signing up for newsletter and promotional e-mails when placing orders

You can subscribe to a free newsletter about our products on our website. The data collected when you sign up is processed (the data displayed as mandatory fields is absolutely necessary for receipt, data in voluntary fields is only used for enhanced personal contact and selection of the displayed information).

We will contact you via e-mail or post with information, offers and special benefits for BLANCO products tailored to you and your interests or use, either on the basis of your express consent or – if you purchase similar goods or services from us and enter your e-mail address – without separate consent.

You may object to the use of your personal data for the purposes of advertising and product development as well as the contact made for this purpose via a certain form at any time in whole or in part or, if necessary, revoke your consent given. Please use the relevant functions provided to you (e.g. the unsubscribe function in the newsletter e-mails or in the customer account) or send a message to that effect in written form (subject: data protection) or by e-mail to the contact details provided under Section 1.

After your objection or revocation of any consent you have given, we will delete this data after the end of its use at the latest, or it will only be stored in an aggregated, anonymised form. If necessary, we will store the fact that you have raised an objection so as to prevent you from being contacted further. See clause 7.2 for more information.