This privacy policy is provided by Finstral UK Limited ("us" or "we") and sets out the information required under UK data protection law. This privacy policy applies to the processing of the personal data of the following types of individual: (i) visitors to the website www.finstral.com; (ii) commercial customers (i.e. intermediary partners who purchase our products) and potential commercial customers; (iii) potential end customers who contact us regarding a possible purchase from a commercial customer; (iv) architects, designers and other third parties with whom we have a wider relationship (“other third parties”). We refer collectively to such individuals in this privacy policy as "you" or "your".

Why are we giving you this information?
In accordance with UK data protection law (which includes the UK GDPR and Data Protection Act 2018), this privacy policy describes the way in which your personal data is processed by us.

Data controller

The data controller is Finstral UK Limited, whose registered office address is The Walbrook Building, 25 Walbrook, London, United Kingdom, EC4N 8AF.
Finstral UK Limited is part of a wider group of European companies, who are headquartered in Italy ("Finstral Group"). For any queries regarding this privacy policy, or in relation to your personal data, please contact: privacy@finstral.com

What personal data we collect about you
We collect and use the following personal data about you:

Category of individual	Types of personal data we collect and use
Website users	Browsing data The computer systems and software procedures necessary for the functioning of this website will collect certain personal data during normal operation: such data will be transmitted via internet communication protocols. Such data may include your IP addresses which could potentially identify you. Data provided by users The optional, explicit and voluntary sending of messages to the contact addresses plus the completion and transmission of the desired web forms appearing on the website will mean the collection of your contact data necessary for reply, as well as all personal data contained in the messages.
Commercial customers and potential commercial customers	Name, business contact details – particularly, phone no., email address and job title.
Potential End customers	Position, title, first name, last name, home address, e-mail and phone number.
Other third parties	Name, business contact details – particularly, phone no., email address and job title.

 

What we do with your personal data and our lawful basis
Under UK data protection law, we must be able to identify a justification (known as a lawful basis) in order to be able to use your personal data for a particular purpose. The purposes and accompanying lawful bases are as follows:


Direct marketing
We carry out direct marketing related activities (including via email and social media campaigns) using personal data of prospective end customers, potential commercial customers and other third parties. This may involve us obtaining such contact details of prospective end customers from other third parties. We only send direct marketing messages (whether by email or social media) to such individuals, where they have first provided their consent to receiving such marketing communications from us.

How long we retain your data for
We will only retain your personal data for as long as is necessary according to the purpose for which it was collected. In particular, we retain your data for the following periods (following which it will be either deleted or fully anonymised):

• Website users – The browsing data will be kept only for as long as is absolutely necessary to ensure the proper operation of the website and will be immediately deleted after indexing (unless we are required by law to retain it for a longer period). For information submitted via online website forms etc., we retain such information for 12 months, unless there is any ongoing communication with you.
• Commercial customers – for the duration of our agreement with you, plus 6 years thereafter (which aligns with limitation periods under English law); and
• Potential end customers, potential commercial customers and other third parties – we typically retain your data for a period of 36 months (depending on the specific nature of your query/our interaction with you) following our last contact with you. This is often the timescale between someone first getting in touch with an enquiry around potentially purchasing our products, and actually having them installed.

Overseas transfers of data
We will store your personal data on the Finstral Group’s IT servers in the EU. Furthermore, as a company within a wider European group, we may from time to time, share your information with another company in the Finstral Group, including our parent company Finstral AG who are based in Italy. However, all Finstral Group companies and our IT suppliers who host data, are based within the EU, which means that we can share personal data freely with each other in compliance with UK and EU data protection law. However, your personal data will not be transferred outside of the UK / the EU.

Cookies and other tracking systems
Cookies are used on this website. To learn more about cookies, including how to disable them, please view our Cookies Policy.

Recipients of data
We will share your data with a limited number of recipients. In particular:

• Our IT service providers;
• Credit institutions, in particular for the processing of payments (commercial customers only);
• Freight forwarders, courier services and door-to-door delivery services (foot or bicycle couriers) as well as post offices for the dispatch or receipt of goods and/or information material;
• Our external advisors e.g. lawyers, accountants, tax advisors, consultants;
• External marketing companies commissioned by the company to undertake marketing activities on our behalf, including by telephone and email (potential commercial customers only);
• Other contacts – for instance we may share details of one commercial customer with another, or details of another third party with a commercial customer (or vice versa); and
• Other entities within the Finstral Group.

 

Where possible, we have contracts in place with all such recipients, which ensures that suitable measures are in place to ensure that your data is protected in accordance with UK / EU data protection law.
The personal data gathered will also be processed by our personnel, subject to specific orders for the purposes and methods of processing.

Rights of data subjects
Under UK data protection law, you have certain rights over your personal data. In particular you have the following rights:

• The right to access your personal information - You can request a copy of the personal information we hold about you and certain details of how we use it.
• The right to rectification - We make reasonable efforts to keep your personal information where necessary up to date, complete and accurate. We encourage you to ensure that your personal information is accurate so please regularly let us know if you believe that the information we hold about you may be inaccurate or incomplete. We will correct and amend any such personal information and notify any third party recipients of necessary changes.
• The right to erasure - You can request that we delete your personal information. For example, where we no longer need your personal information for the original purpose we collected it. Whilst we will assess every request, this request is subject to legal and regulatory requirements that we are required to comply with.
• The right to restriction of processing - Subject to the circumstances in which you exercise this right, you can request that we stop using your personal information, such as where you believe that we no longer need to use your personal information.
• The right to data portability - Subject to the circumstances in which you exercise this right, you can request that we port across personal information you have provided to us, to a third party in a commonly used and machine-readable format.
• The right to object to direct marketing – You can unsubscribe from direct marketing at any time.
• The right to object to processing - In certain circumstances, where we only process your personal data because we have a legitimate business need to do so, you have the right to object to our processing of your personal data.
• Rights relating to automated decision-making - We do not currently carry out any automated decision-making. In the event that this changes, we will notify you and inform you about your rights relating to automated decision-making.
• The right to withdraw consent. You can withdraw your consent to direct marketing at any time. You can do this by contacting Finstral at the above address.

 
Specific enquiries may be addressed to the above contact point.

Right of complaint
If you believe that the processing of your personal data by Finstral UK is in breach of UK data protection law, then you have the right to file a complaint with the Information Commissioner's Office.