Privacy Policy - En Route

En Route International; Clewer Village; On-site; GBP 60,000 - 80,000; Full time

Job description

Privacy Policy sets out how we, En Route International Limited, collect, store and use information about you when you use or interact with our website, www.en-route.com (our website), and where we otherwise obtain or collect information about you. This Privacy Policy is effective from 25 May 2018.

Contents

• 1. Summary
• 2. Our details
• 3. Information we collect when you visit our website
• 4. Information we collect when you contact us
• 5. Information collected or obtained about you from third parties
• 6. Our use of automated decision-making and profiling
• 7. Disclosure and additional uses of your information
• 8. How long we retain your information
• 9. How we secure your information
• 10. Transfers of your information outside the European Economic Area
• 11. Your rights in relation to your information
• 12. Your right to object to the processing of your information for certain purposes
• 13. Sensitive Personal Information
• 14. Changes to our Privacy Policy
• 15. Children’s Privacy
• 16. California Do Not Track Disclosures
• 17. Copyright

1. Summary

This section summarises how we obtain, store and use information about you. It is intended to provide a very general overview only. It is not complete in and of itself and it must be read in conjunction with the corresponding full sections of this Privacy Policy.

• How we collect or obtain information about you:
• How we use your information: for administrative and business purposes (particularly to contact you, to improve our business and website, to fulfil our contractual obligations, to advertise our goods and services, to analyse your use of our website and in connection with our legal rights and obligations).
• Disclosure of your information to third parties: only to the extent necessary to run our business, to our service providers, to fulfil any contracts we enter into with you and where required by law or to enforce our legal rights.
• Do we sell your information to third parties: No
• How long we retain your information: for no longer than necessary, taking into account legal obligations and other legal bases described in this policy.
• How we secure your information: using appropriate technical and organisational measures such as secure servers, SSL encryption and restricted access.
• Transfers outside the EEA: information may be transferred outside the EEA to countries such as the United States, Australia and UAE with safeguards including the EU-U.S. Privacy Shield where applicable.
• Your rights: to access, rectify, delete, restrict processing, data portability, object to processing, withdraw consent and not be subject to automated decision-making.

Data controller: En Route International Limited, Company No. 04524355, Assurant House, 6-12 Victoria Street, Windsor, SL4 1EN, United Kingdom. Contact: [e-mail]

3. Information we collect when you visit our website

We collect and use information from website visitors in accordance with this section and the section entitled Disclosure and additional uses of your information. Our server is located in the United Kingdom.

Use of website server log information for IT security purposes:

We and our hosting provider collect and store server logs to ensure network and IT security and to identify unauthorised access, distribution of malware, denial of service attacks and other cyber-attacks. We do not identify individuals from server logs unless investigating suspicious activity.

Legal basis for processing: compliance with a legal obligation (Article 6(1)(c)) and legitimate interests (Article 6(1)(f)).

We also use server log information to analyse website use and improve our website, based on our legitimate interests (Article 6(1)(f)).

4. Information we collect when you contact us

We collect information from individuals who contact us as described here. Email: your email address and any other information in that email. Legal basis: legitimate interests (Article 6(1)(f)) and contract necessity (Article 6(1)(b)) where applicable.

Transfer and storage: emails you send us are stored within the European Economic Area on third-party providers’ servers in the UK, the Netherlands and Ireland.

Contact form: we collect your name, email and any optional information you provide. If mandatory fields are not supplied, submission may be blocked. Legal basis: legitimate interests (Article 6(1)(f)) and contract necessity (Article 6(1)(b)).

5. Information collected or obtained about you from third parties

Generally we do not receive information from third parties, but it may occur. We may obtain your information from third parties with or without your prior contact. Legal basis: contract necessity (Article 6(1)(b)), consent (Article 6(1)(a)) and legitimate interests (Article 6(1)(f)).

Where information is received in error we will delete it.

6. Our use of automated decision-making and profiling

We use profiling on our website and in marketing emails. We do not believe this has any legal effect on you. Automated decision making: decisions made by machine without human involvement. Profiling: automated processing to evaluate personal aspects. We may use profiling for web analytics and marketing emails with legitimate interests to improve our website and communications.

How to object: email [e-mail] to object to web beacons in marketing emails.

7. Disclosure and additional uses of your information

We disclose information to service providers who process data on our behalf (IT providers in Germany, mailing lists, analytics, hosting and email providers in the UK and USA). We may share with other third parties where necessary to provide services, perform contracts or for legitimate interests, including Google Analytics and internal group use. Details about specific third parties are available on request.

Information about Google Analytics: data stored outside the EEA in the United States. See Google privacy policy for details.

8. How long we retain your information

Retention periods include: server logs 12 months; orders six years for tax purposes; correspondence and enquiries with a 24-month post-resolution retention; marketing data while subscribed. In other cases retention is managed based on purpose, legal obligations, consent and risk considerations.

9. How we secure your information

We take technical and organisational measures to secure information, including least-privilege access, secure servers, identity verification, SSL encryption, and restricted transfers. Email transmission over the internet is not completely secure; use of information is at your own risk.

10. Transfers outside the EEA

We may transfer information outside the EEA where required to comply with legal obligations. Google Analytics data may be stored in the United States. Safeguards are in place as described in this policy.

11. Your rights in relation to your information

You have rights to access, rectify, delete, restrict processing, portability, object to processing and withdraw consent. How to exercise: write to Data Information Manager, En Route International Limited, Assurant House, 6-12 Victoria Street, Windsor, SL4 1EN, United Kingdom or email [e-mail]. See the policy for full details and ICO information.

12. Your right to object to the processing of your information for certain purposes

You may object to processing for public interest/legitimate interests including profiling, and to direct marketing. Instructions for exercising these rights are provided in the policy.

13. Sensitive Personal Information

We do not knowingly collect sensitive personal information. If transmitted, you are deemed to have consented to processing, which we will delete.

14. Changes to our Privacy Policy

We update and amend our Privacy Policy from time to time. We will notify you of major changes by email or site notice and obtain consent where required.

15. Children’s Privacy

We do not knowingly collect information from persons under 18. If information about a person under 18 is received, we will delete it or obtain parental consent as required by law.

16. California Do Not Track Disclosures (not separately detailed in this excerpt)

17. Copyright

The copyright in this Privacy Policy is owned by or licensed to us and protected by copyright laws. All rights reserved.