GDPR Statement

Privacy Notice for Customers

We issue this privacy notice in the interests of transparency over how we use (“process”) the personal data that we collect from customers (“you”).

For data protection purposes the “data controller” means the person or organisation who determines the purposes for which and the manner in which any personal data are processed. The data controller is Lodge Tyre Ltd.

The kind of information we hold about you

We will collect, store and use the following categories of personal data about you:

  • Personal contact details such as name, title, addresses, telephone numbers, and
    personal email addresses.
  • Records of items purchased from us.

Purpose of processing the data

We will need the information in order to provide our services to you.

Our legal basis for processing personal data is that it is necessary for the purpose of carrying out our contract with you. ;

Recipients of personal data

Your personal data will not routinely be shared with any third parties but could be shared with appropriate external regulators and authorities.

We do not envisage that your data would be transferred to a country outside the EEA.

Duration of storage of personal data

We will keep personal data for no longer than is necessary, having regard to the original purpose for which the data was processed.

Your rights in relation to your personal data

1. The right to be forgotten

You have the right to request that your personal data is deleted if:

a) it is no longer necessary for us to store that data having regard to the purposes for which it was originally collected; or
b) in circumstances where we rely solely on your consent to process the data (and have no other legal basis for processing the data), you withdraw your consent to the data being processed; or
c) you object to the processing of the data for good reasons which are not overridden by another compelling reason for us to retain the data; or
d) the data was unlawfully processed; or
e) the data needs to be deleted to comply with a legal obligation.

However, we can refuse to comply with a request to delete your personal data where we
process that data:

a) to exercise the right of freedom of expression and information;
b) to comply with a legal obligation or the performance of a public interest task or exercise of official authority;
c) for public health purposes in the public interest;
d) for archiving purposes in the public interest, scientific research, historical research or statistical purposes; or
e) the exercise or defence of legal claims.

2. The right to data portability

You have the right to receive the personal data which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided (us) where:

a) the processing is based on consent or on a contract; and
b) the processing is carried out by automated means.

Note that this right only applies if the processing is carried out by “automated means” which means it will not apply to most paper based data.

3. The right to withdraw consent

Where we process your personal data in reliance on your consent to that processing, you have the right to withdraw that consent at any time.

4. The right to object to processing

Where we process your personal data for the performance of a legal task or in view of our legitimate interests you have the right to object on “grounds relating to your particular situation”.

Where you exercise your right to object we must stop processing the personal data unless:

  • we can demonstrate compelling legitimate grounds for the processing, which
    override your interests, rights and freedoms; or
  • the processing is for the establishment, exercise or defence of legal claims.

5. The right of subject access

So that you are aware of the personal data we hold on you, you have the right to request access to that data. This is sometimes referred to as making a “subject access request”. If you would like to check what data we hold on you, please contact hr@nulllodgetyre.com

6. The right to rectification

If any of the personal data we hold on you is inaccurate or incomplete, you have the right to have any errors rectified. Where we do not take action in response to a request for rectification you have the right to complain about that to the Information Commissioner’s Office.

7. The right to restrict processing

In certain prescribed circumstances, such as where you have contested the accuracy of the personal data we hold on you, you have the right to block or suppress the further processing of your personal data.

8. Rights related to automated decision making and profiling

The GDPR defines “profiling” as any form of automated processing intended to evaluate certain personal aspects of an individual, in particular to analyse or predict:

  • performance at work;
  • economic situation;
  • health;
  • personal preferences;
  • reliability;
  • behaviour;
  • location; or
  • movement

You have the right not to be subject to a decision when it is based on automated processing; and it produces a legal effect or a similarly significant effect on you.

Complaints

Where you take the view that your personal data is processed in a way that does not comply with the GDPR, you have a specific right to lodge a complaint with the relevant supervisory authority. The supervisory authority will then inform you of the progress and outcome of your complaint. The supervisory authority in the UK is the ICO.

This privacy policy mirrors that of our parent Company, The Lodge Tyre Co. Ltd