ENTEK International LLC and its affiliated companies (“we / us”) are committed to protecting and respecting your privacy.
WHO IS ENTEK?
CONTROLLERS OF PERSONAL DATA
Controllers are responsible for deciding how they hold and use personal information about you. When we use the terms “ENTEK,” “we,” “us,” or “our” in this Policy, we are referring to the relevant ENTEK entity that is responsible for processing your data. These entities/ controllers are listed in Schedule 1. In most cases, the ENTEK entity that you interact with is the controller for your information, for example, as a customer, supplier, distributor, or sales representative. This Policy also covers the individuals who are associated with these types of companies.
1. INFORMATION WE MAY COLLECT FROM YOU
We may collect and process the following data about you:
Information you give us. You may give us information about you (such as name, address, telephone number, CV, email address, passport or driver’s license number, employment history, national identifier, financial information) by filling in forms on our site entek.com in respect of an application for a job vacancy. You may also provide us with personal information by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you register to use our site, apply for a job vacancy on our site, or when you report a problem with our site.
Information we collect about you. With regard to your interactions with us, we may collect the following information:
- technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
- information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); job applications you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouseovers), and methods used to browse away from the page and any phone number used to call our customer service number;
- marketing communication data, including your preferences in receiving marketing information from us;
- social media account information;
- information provided to us during a visit to one of our locations;
- recordings of meetings (tape, video) between our representatives and others;
- body temperature results; and
- video images and sound captured at our locations, including through CCTV.
Information we receive from other sources. We are also working closely with third parties (including, for example, advertising networks, analytics providers, search information providers) and may receive information about you from them.
We may collect additional information for specific categories of persons, such as:
- Suppliers: supplier due diligence checks (reference checks, credit, workplace standards); director and employee details (trade sanctions and compliance purposes)
- Customers: client relationship management profiles; sales and performance analysis for customers and their employees; email and survey analysis and tracking.
Special categories of information. Certain categories of information require a higher level of protection under certain laws, including under UK and EEA data protection laws. These categories include personal information that includes or reveals: racial or ethnic origin, political opinions, religious and philosophical beliefs, trade union membership, genetic data, biometric data, health data, sex life, or sexual orientation. We may collect, store, or use background information, biometric information, and body temperature screening results, as described below. We do not collect other special categories of information.]
When we need to collect personal data by law, or under the terms of a contract we have or might have with you, if you fail to provide the data when requested, we may not be able to enter into or perform the contract or business transaction with you (for example, to provide you with goods or services). In this case, we may not be able to provide the product or service that you have or would like to enter into with us.
Automated decision-making. ENTEK does not regularly and systematically use automated decision-making that produces a legal effect concerning individuals or that would have a similar significant effect. We may use automated decision-making to complete certain credit checks and marketing analytics. Under the UK and EEA data protection laws, you may have the right to object to use of your personal information in automated decision-making.
2. USES MADE OF THE INFORMATION
We use personal information lawfully and for the purpose for which it was collected. Generally, ENTEK uses personal information to conduct our primary business operations. Examples of types of information, purpose of processing, and the legal basis for collection are described below:
|Types of Data||Purposes of Processing||Legal Basis for Processing|
|Billing information||To manage the execution of order, invoicing, and billing and for trade compliance purposes||• Performance of a contract|
|Employee and management contact details; background information||For the purpose of performing contracts; business relationship management; marketing; compliance and risk management; to enable access to system platforms; to manage aftermarket warranty, service, and claims; and for training about our products||
• Performance of a contract
• To comply with a legal obligation
• Necessary for our legitimate interests (to verify the identities of people we deal with, product marketing and sale
|Videos and images||To manage security and safety||• Public interest of health and safety|
|Questionnaires and interviews||For the purpose of research and development and product improvement||• Necessary for our legitimate interests (product development and safety)|
|Social media information||To communicate with you on social media platforms||• Necessary for our legitimate interests (marketing and informational purposes)|
|Identity, contact information, financial data, transaction information||To comply with our general regulatory and statutory obligations (including our responsibilities under codes of conduct and anti-bribery laws)||• Performance of a contract
• To comply with a legal obligation
|Recording of video calls, telephone calls, and meetings||To improve our communications and to facilitate quality assurance on products and services||• Necessary for our legitimate interests (marketing and informational purposes; health and safety)|
|Email and survey analytics tracking and responses||To enable us to track whether the communication was sent, opened, or viewed||• Necessary for our legitimate interests (marketing and informational purposes)|
|Recruitment, hiring, and training information||To carry out our obligations arising from any job vacancies which you apply for via the site, to contact you in relation to job vacancies, and to provide you with any other information that you request from us||• Necessary for our legitimate interests (to develop and train our workforce, to verify the identities of people we deal with)
• To comply with a legal obligation
|IP addresses and browsing activities||To ensure that content from our site is presented in the most effective manner for you and for your computer and to notify you about changes in our site||• Necessary for our legitimate interests (to keep our records updated and to study how customers use our products and services)|
|Cookies, profiling, and tracking data (including on-line behavior monitoring and email tracking); data analytics of website and browser usage||To administer and improve our websites and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes and to ensure that content is presented in the most effective manner for you and as part of our efforts to keep our websites safe and secure||• Necessary for our legitimate interests (to keep our sites updated; to define types of customers for products and services; to develop our business; and to inform our marketing strategy)|
|Biometric information (e.g. fingerprints) and body temperature screening results||• Necessary for our legitimate interests (site and system security)
• Public health and safety
We may combine this information with information you give to us and information we collect about you. We may use this information and the combined information for the purposes set out above (depending on the types of information we receive).
We will only use your personal data for the purposes for which we originally collected it. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis upon which we propose to do so.
Our websites may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
3. SHARING AND TRANSFERRING YOUR PERSONAL INFORMATION
We are careful to allow access to your personal information only to those persons or parties who require the information to perform their duties and tasks or who have a legitimate purpose for accessing it. Because ENTEK has operations in more than one country, we transfer information to various regions and countries for legitimate business purposes. We enter into appropriate data processing agreements with our affiliates and third parties who may process your information in various countries and regions.
We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006, and any of our other affiliated companies. We may share your information with selected third parties including analytics and search engine providers that assist us in the improvement and optimization of our websites. Categories of persons or entities with whom we may share or transfer your personal information include:
- To our ENTEK group of companies, third party service providers, distributors, sales representatives, and suppliers;
- To a government agency, regulatory or enforcement body, court, or other body to whom we believe disclosure is needed to comply with applicable law, to exercise or defend our legal rights, or to protect your interests or the rights of others;
- In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;
- If we, or any of us, or substantially all of our assets, are acquired by a third party, in which case personal data held by us is likely to be one of the transferred assets; and
If your personal data is provided to any third parties, you are entitled to request details of the recipients of your personal data or the categories of recipients of your personal data.
Security, storage, and deletion of your personal data
We work to maintain the safety and security of your personal information that we collect and process by using appropriate organizational and technical processes. The actions we take are designed to implement protections that are suitable for the risks that may be involved in processing your information. Some of the measures that we use include: controlling access to our systems; limiting or controlling physical access to areas where sensitive data is stored; gathering privacy compliance information about third parties with whom we share data; implementation of website security standards. In addition, we limit access to your personal information to those employees, service providers, agents, contractors, and parties who have a legitimate need to know.
Data that we collect from you in the UK or the European Economic Area (“EEA”) may be transferred to, and stored at, a destination outside the UK or the EEA or it may be processed by staff operating outside the United States, the UK or the EEA who work for us or for one of our other group companies or by our third-party service providers. When we transfer information outside the UK or the EEA, we work to ensure that a similar level of protection is given to the information as it would under the UK and EU GDPR and we will only transfer the personal data where such transfer is in accordance with the rules set out in the UK or the EU GDPR. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our websites; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.
We will store your personal information for so long as we have a legitimate business need to do so or as required by applicable law. In most cases, this means that we will retain your information while we have a relationship with you, for the time that it is useful and relevant for the purpose for which it was collected, or for the period in which our legitimate business need continues.
Factors that influence the appropriate retention period for personal information include the amount, nature, and sensitivity of the personal data; the potential risk of harm from unauthorized use or disclosure; the original or ongoing purposes for collection of the data; whether those purposes can be achieved through other means; and the applicable legal requirements.
We have put in place appropriate measures to address any security breach and to notify you and applicable regulators of a breach when legally required to do so.
4. YOUR RIGHTS
Subject to local laws, you have the right to have access to your personal information and to request that we correct or delete it. We will usually inform you (before collecting your data) if we intend to use your data for marketing purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent this type of processing by checking certain boxes on the forms we use to collect your data or by electing to opt-out or unsubscribe to these types of communications.
If you are protected by the laws of some jurisdictions, including UK and EEA data privacy laws, you have, in certain circumstances the rights to
- Request correction of your personal data if it is inaccurate;
- Request erasure of your personal data;
- Request access to your personal data;
- Object to processing your personal data (where the processing is necessary for the purposes of the legitimate interests pursued by us or a third party, including where we undertake any form of automated processing of your personal data);
- Request restriction of processing of your personal data;
- Request the transfer of your personal information to another party;
- Withdraw consent to processing of your personal information (this will not affect the lawfulness of any processing carried out before you withdrew your consent); and
- Lodge a complaint with the applicable supervisory authority about our processing of your personal information.
If you wish to exercise any of the rights set out above, please contact us at firstname.lastname@example.org. With your request, you will need to tell us the data or information that you are requesting or the right you are seeking to exercise, in order to enable us to provide a timely response. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances. We may not be required to comply with your request and if this is the case, we will notify you.
What we will need from you. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Questions, comments and requests regarding this Policy are welcomed and should be addressed to email@example.com.
The country or region-specific privacy notices in Schedule 1 will set out the relevant regulator or supervisory authority for personal data in that territory and how to contact them.