Privacy Policy

This Privacy Policy sets out how the BIH group of companies (“BIH”, “we” or “us”) processes the personal information of our website visitors and other external individuals. It also describes the cookies we may use and send to your computer or mobile device. Please note that this Privacy Policy is not an exclusive description of how BIH processes the personal information of individuals. A separate privacy policy is in place for BIH staff which is available on BIH’s network.

BIH take the confidentiality and accuracy of personal data extremely seriously. If you have any questions about this Privacy Policy or matters arising from it then please contact the BIH Data Protection Officer by email at dpo@bihl.com.

How we collect personal information

We will collect and store your personal information when you physically or electronically give or send it to us, interact with our website or visit our premises. We collect personal information in writing, by telephone, by email, by audio, by video media, by online forms and by website analytics.

BIH collects personal information directly from the individual to whom it relates, except where that individual has consented to BIH collecting the personal information from a third party or the law otherwise permits BIH to do so.

What personal information do we hold about you

Personal information means any information relating to a person that enables them to be identified either directly or indirectly. Personal information that we hold about you may include your:

• name
• address
• email address(es)
• phone number(s)
• job title
• employer/business name
• IP address
• location data
• your CV, identity documents and evidence of qualifications if you have applied for a position with us
• still images, CCTV or video media footage
• audio recordings.

We may also obtain additional relevant personal information about you. This can be public information, e.g. official publications, or information which we obtain via third parties and that we use for the purposes mentioned in this Privacy Policy. For example, we may use such personal information to verify the accuracy of our personal information in our databases. Public information about you can consist of information published on the World Wide Web or personal information that you have made public, for example, on your social media profile. We will take reasonable steps to ensure the personal information that we store is accurate, complete and up-to-date.

How we use your information

We will use your personal data, and may share your personal data with other parties acting on our behalf, for one or more of the following purposes:

• for legitimate business purposes
• to conduct research about the use of our website
• to assess and respond to a complaint you might make to us
• for our own administrative purposes, including training our staff, conducting internal audits or transferring assets as part of a sale, purchase or investment in the business
• if you are a customer, to carry out our contract with you
• for market research purposes
• to prevent and conduct investigations of suspicious, harmful or corrupt activity
• to comply with BIH’s regulatory and legal obligations.

We do not sell or rent your personal information to others. If we wish to use your personal information for a purpose beyond that for which it was originally provided, we will ask for your consent or seek to rely on another valid legal ground to process your personal information in accordance with the applicable law. Staff and other parties acting on our behalf have a duty of confidentiality under our systems.

Information for marketing purposes

Where you have consented to us using your personal data for marketing purposes, we may use your information to conduct marketing and data analysis or to send you updates and news concerning BIH.

If at any time after you have consented to us using your information for marketing purposes you wish us to stop using your information for these purposes, please email us at dpo@bihl.com.

Grounds for processing

To process your data lawfully we need to rely on one or more valid legal grounds. The grounds we may rely upon include:

• your consent to particular processing activities. For example, where you have consented to us using your information for marketing purposes
• our legitimate interests as a business (except where your interests or fundamental rights override these). For example, it is within our legitimate interests to use your data to prevent or detect fraud or abuses of our website
• our compliance with a legal obligation to which BIH is subject. For example, we have a duty to investigate and respond to complaints made against us and may need to process your personal information as part of such investigation
• if you are a customer, because processing your personal data is necessary for the performance of a contract.

Disclosure of your personal information

There are circumstances where we may wish to disclose or are compelled to disclose your personal data to third parties. This will only take place in accordance with the applicable law and for the purposes listed above. These scenarios include disclosure:

• to our subsidiaries, branches or associated offices
• to our outsourced service providers or suppliers to facilitate the provision of our services
• to third party service providers and consultants in order to protect the security or integrity of our business, including our databases and systems and for business continuity reasons
• to another legal entity, on a temporary or permanent basis, for the purposes of a joint venture, collaboration, financing, sale, merger, reorganization, change of legal form, dissolution or similar event. In the case of a merger or sale, your personal data will be permanently transferred to a successor company
• to legal advisers who may need to manage or litigate a claim
• to public authorities where we are required by law to do so
• to any other third party where you have provided your consent.

International transfer of personal data

We may transfer your personal data to a third party in countries outside the EU for further processing in accordance with the purposes set out in this Privacy Policy. In particular, your personal data may be transferred throughout the BIH group and to our outsourced service providers located abroad. In these circumstances we will, as required by applicable law, ensure that your privacy rights are adequately protected by appropriate technical, organisation, contractual or other lawful means.

We may disclose your information to any person as required by law and specifically to any government agency if we believe in good faith that we must do so to comply with the law or that doing so is required to prevent, detect, investigate or remedy improper conduct potentially affecting BIH.

Retention of personal information

Your personal information will be retained for as long as it is necessary to carry out the purposes set out in this Privacy Policy (unless longer retention is required by the applicable law). However, we will not retain any of your personal information beyond this period and the retention of your personal information will be subject to periodic review. We may keep an anonymized form of your personal information, which will no longer refer to you, for statistical purposes without time limits, to the extent that we have a legitimate and lawful interest in doing so.

CCTV records are generally retained for 12 months. If you apply for a position with us and are unsuccessful, we generally destroy the application within 24 months of the closing date.

Confidentiality and security

BIH is committed to:

• seeking to safeguard all personal information that you provide to us
• seeking to ensure that it remains confidential and secure
• taking all reasonable steps to ensure that personal privacy is respected.

All our data is stored in written or electronic form on our servers and computers and in various physical locations. We maintain physical, electronic and procedural safeguards to protect your personal information from misuse, unauthorized access or disclosure and loss or corruption by computer viruses and other sources of harm. We restrict access to personal information to those who need to know that information for the purposes set out in this Privacy Policy.

Your rights with regards to your personal information

Data protection law provides individuals with certain rights, including the right to: access, rectify, withdraw consent, erase, restrict, transport, and object to the processing of, their personal information. Individuals also have the right to lodge a complaint with the relevant information protection authority if they believe that their personal information is not being processed in accordance with the law. Further information about your rights is set out below:

• Right to obtain a copy of your personal information. You have the right to obtain a copy of the personal information we hold about you. All requests for access to personal information should be made to dpo@bihl.com. You may be required to submit a proof of your identity and a fee.
• Right to rectification. You may request that we rectify any inaccurate and/or complete any incomplete personal information. If we disagree and believe the information to be accurate and complete, we will advise you and include a notation on the record that you dispute the information’s accuracy. Requests for corrections or supplements to all other personal information should be made to dpo@bihl.com. We will respond to your request to correct or supplement your personal information within a reasonable time period and, in any event, within any time period specified in relevant laws.
• Right to withdraw consent. You may, as permitted by law, withdraw your consent to the processing of your personal information at any time. Such withdrawal will not affect the lawfulness of processing based on your previous consent. Please note that if you withdraw your consent, you may not be able to benefit from certain service features for which the processing of your personal information is essential.
• Right to object to processing. You may, as permitted by law, request that we stop processing your personal information.
• Right to erasure. You may request that we erase your personal information and we will comply, unless there is a lawful reason for not doing so.
• Your right to lodge a complaint with the supervisory authority. We suggest that you contact the BIH Data Protection Officer about any questions or if you have a complaint in relation to how we process your personal information. However, you do have the right to contact the relevant supervisory authority in the relevant country directly.

Links

Our website provides hyperlinks to websites owned and controlled by others. BIH is not responsible for the privacy practices of any website that it does not own or otherwise control.

Third parties

Where you submit information on behalf of another person, you confirm that you have made that person aware of how we may collect, use and disclose their information, the reason you have provided it, how they can contact us, the terms of this Privacy Policy and that they have consented to such collection, use and disclosure.

Compliance with Privacy Laws

BIH complies with the data protection and privacy laws to which it is subject. You should satisfy yourself that you are familiar with those laws, including any exceptions which may apply under them. You should also be aware that privacy laws in various jurisdictions may change from time to time.

Except to the extent expressly stated otherwise in this Privacy Policy, BIH accepts no obligations with respect to the handling of personal information other than those mandated by law in the country which has, or counties which have jurisdiction over BIH in any given circumstances.

Cookies

This section of the Privacy Policy explains what cookies are, why we use them and what you may do if you wish to restrict, remove or refuse to accept cookies.

By continuing to use this website, you agree to the use of cookies for the purposes set out in this Privacy Policy.

What is a cookie?
A cookie is a small text file downloaded onto your computer or mobile device when you access a website, including this website. Cookies are widely used to make websites work, or work more efficiently, as well as to provide information to the website’s owners and third parties.

Cookies allow a website to recognize your computer or mobile device. Cookies do not identify you as an individual, but do identify the computer or mobile device you use to access the internet and can therefore be used to collect information about your use of the internet. Cookies do not allow access to any information stored on your computer or mobile device.

Why do we use cookies?
We use cookies for the following purposes:

• to determine the number of visitors to our website and to identify how visitors move around the site and, in particular, which pages they visit. This allows us to improve our website and our services
• to determine from where in the world our website is being visited so that we can ensure sufficient coverage
• to collect information, where available, about your computer or mobile device for system administration purposes, such as your IP address, operating system and browser type.

We will only use information collected through the use of cookies to evaluate our website’s effectiveness and to improve your experience when you visit it. Cookies are not used by us to identify who you are or send you targeted advertising.

What cookies are set by our website?

BIH uses Google Analytics session cookies to provide meaningful reports about site visitors. Google Analytics cookies do not collect personal information about website visitors. Cookies set via our website include those listed below:

To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.

For further information about how to restrict, remove, and refuse to accept cookies, visit aboutcookies.org or allaboutcookies.org.

Note, however, that in some cases, restricting, removing or refusing to accept cookies may reduce the functionality of, or prevent access to, this and other websites.

Changes to this Privacy Policy

As we strive to improve our practices, we may review this Privacy Policy from time to time. We reserve the right to change this Privacy Policy at any time and to notify you of those changes by posting an updated version of this Privacy Policy on our website. It is your responsibility to check our Privacy Policy each time before you access our website for any changes.

Susan Hoffman (BIH Data Protection Officer)
Boustead International Heaters Ltd
Europa House, Woodlands Court
Albert Drive
Burgess Hill
West Sussex
RH15 9TN
United Kingdom

dpo@bihl.com

September 2019