PRIVACY NOTICE AND COOKIES POLICY
1) Introduction
The Catering Equipment Distributors Association Ltd (ceda) are committed to safeguarding the privacy of our clients, website visitors and staff; in this policy we explain how we will treat your personal information.
We will ask you to consent to our use of cookies in accordance with the terms of this policy when you first visit our website.
2) Who are we
ceda are registered in England and Wales under registration number 06870445 and our registered office is at The Catering Equipment Distributors Association Limited, Carmichael House, The Green, Inkberrow, Worcester, WR7 4DZ
You can contact us by using our website contact form, by email to info@ceda.co.uk or by telephone on 01386 793911
3) What personal information we collect
We may collect, store and use the following kinds of personal information:
- information that you provide to us when becoming a Member or Partner, using our services, or that is generated in the course of the use of those services
- information relating to any purchases you make of our services
- information contained in or relating to any communications that you send to us or send through our website (including the communication content and meta data associated with the communication)
- information about your computer and about your visits to and use of our website
- any other personal information that you choose to provide to us
- information about staff employed by ceda to manage their employment
cedaRetain is an initiative to help match those who have lost their roles during the Covid 19 crisis. We collect personal details from you for this and these will be shared with all ceda Member companies in the private area of the ceda website.
All cedaRetain data will be deleted after 12 months unless otherwise requested by you.
If you wish to have any details you have submitted under cedaRetain removed then please contact adam@ceda.co.uk.
4) How we use your personal information
We may use your personal information to:
- send statements, invoices and payment reminders to you, and collect payments from you
- send you non-marketing commercial communications
- send you email notifications that you have specifically requested
- send you marketing communications relating to our business which we think may be of interest to you, by post or, where you have specifically agreed to this, by email or similar technology (you can inform us at any time if you no longer require marketing communications)
- deal with enquiries and complaints made by or about you relating to our website or any other service provided to you by ceda
- to support your rights under Data Protection law in relation to our use of your personal information
- manage your employment (where you are a member of staff employed by ceda or working with ceda)
- administer our website and business including:
- personalising our website for you
- enabling your use of the services available on our website
- keeping our website secure and preventing fraud
- Share data with ceda members as part of the cedaRetain initiative mentioned above
Personal information submitted to us through our website will be used for the purposes specified in this policy or on the relevant pages of the website.
We will not, without your express consent, supply your personal information to any third party for the purpose of their or any other third party’s direct marketing.
When registering to attend ceda events, including conferences and exhibitions, we may share relevant information with a limited number of event sponsors. If these sponsors choose to contact you using the details you have supplied, you will have the option to unsubscribe from any ongoing or continuing communications.
The personal data we hold about you will only be used in line with the purposes detailed above and the legal basis for this will be either for the administration of a contract we have in place with you or in line with the legitimate interests of our business in providing information governance and IT Security services (ensuring that this does not impact on your rights or freedoms in relation to privacy) or disclosed as required by law.
ceda have no reason to process sensitive information (special categories or criminal convictions data) about you
5) Disclosing personal information
We may disclose your personal information to any of our employees, officers, insurers, professional advisers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this policy.
We may disclose your personal information:
- to the extent that we are required to do so by law
- in connection with any ongoing or prospective legal proceedings
- in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk)
- to any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information
Except as provided in this policy, we will not provide your personal information to third parties
6) International data transfers
Information that we collect will only be stored and processed within the UK and is protected by UK Data Protection laws.
7) Retaining personal information
This section sets out our data retention policies and procedure, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal information.
Personal information that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
Notwithstanding the other provisions of this section, we will retain documents (including electronic documents) containing personal data:
- to the extent that we are required to do so by law
- if we believe that the documents may be relevant to any ongoing or prospective legal proceeding
- in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk)
- to support the ongoing business purposes of ceda (with due consideration for the rights and freedoms of individuals privacy)
If you would like further details of how personal data is retained by our organisation, please contact us directly.
8) Security of your personal information
We will take all reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.
We will store all the personal information you provide on our secure servers.
You acknowledge that the transmission of information over the internet is inherently insecure, and we cannot guarantee the security of data sent to us over the internet.
9) Your rights
You have a number of rights under the Data Protection Act including:
- The right to be informed about the collection and use of your personal data e.g. via this privacy notice
- The right to access your personal data
- The right to have any inaccurate personal data rectified, or completed if it is incomplete
- The right to have your personal data erased in certain circumstances
- The right to request the restriction or suppression of their personal data in certain circumstances
- The right to data portability – to obtain and reuse your personal data for your own purposes across different services
- The right to object to our use of your information in certain circumstances e.g. for marketing or profiling purposes
If you would like to access your own personal information or exercise any of the rights detailed above please contact us by email to info@ceda.co.uk or by telephone on 01386 793911. In the majority of cases, we will respond to your request within 30 days after receiving the necessary information required to deal with your request.
We may ask you to supply appropriate evidence of your identity (for this purpose, we will usually accept a photocopy of your passport plus an original copy of a utility bill showing your current address) and any additional information to help us to deal with your request effectively.
There may be some exemptions to dealing with your rights as specified in Data Protection law, but ceda will ensure you are fully informed of this within 30 days of receiving your request.
We do not carry out any profiling or automated decision making based on your personal data.
Full information on your rights under the Data Protection Act can be found from the following link:
https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
10) Third party websites
Our website includes hyperlinks to, and details of, third party websites.
We have no control over, and are not responsible for, the privacy policies and practices of third parties.
11) Cookies
Our website uses cookies – small text files that are placed on your machine to help the site provide a better user experience. In general, cookies are used to retain user preferences, store information for things like shopping baskets, and provide anonymised tracking data to third party applications like Google Analytics. As a rule, cookies will make your browsing experience better. However, you may prefer to disable cookies on this site and on others. The most effective way to do this is to disable cookies in your browser.
12) Amendments
We may update this policy from time to time by publishing a new version on our website.
You should check this page occasionally to ensure you are happy with any changes to this policy.
This policy will be updated in line with the EU General Data Protection Regulation once these have been translated into UK law.
13) If you have a concern about how your data is being handled
If you are unhappy about the use of your personal data, then please contact us directly and we will try to resolve your concern. You can also raise a concern directly with the Information Commissioner’s Office and more detail on how to do this can be found from the following link https://ico.org.uk/concerns/
14) Further Information
If you have any questions which you feel have not been answered by this Privacy Notice and Cookies Policy you can contact us by using our website contact form, by email to info@ceda.co.uk or by telephone on 01386 793911