Privacy Policy

Data Privacy Statement (GDPR)

This aim of this privacy notice is to inform you of the purposes for which Hilco Europe, Brunt Acres Road Industrial Estate, Hawes, North Yorkshire,DL8 3UZ (hereinafter referred to as "we" or "us") processes your personal data. Personal data includes all information pertaining to you. The following information is intended to help you understand the processing of your personal data and to thus ensure transparency.

We handle the following personal data

1. Surname, first name

2. Contact details, address, telephone number, fax number, E-mail address

for the following purpose:

Processing of the order activated in the webshop (delivery, invoicing, complaint etc.).
Under certain circumstances for clarification of queries relating to the order.

Since your personal data must be processed for the purposes specified above in fulfillment of the existing business relationship between you and us or to take steps prior to entering into a contract, the legal basis for this processing is generally Article 6.1(b) UK GDPR. We may also have a legitimate interest in conducting promotional activities or marketing campaigns based on Article 6.1(f) UK GDPR, provided that no consent is required from you for these purposes.
If we transmit your personal data to other companies in our group such as our group-wide IT service provider and this is not carried out as part of order processing, the legal basis for such transfers is once again Article 6.1(f) UK GDPR. In this regard, we have a legitimate interest in (i) a centralized, global IT approach with harmonized processes and (ii) cost reductions resulting from the operation of centralized IT.
Article 6.1(c) may also be used as a legal basis if we need to process your personal data for compliance with a legal obligation.
If none of the legal bases specified above applies, we process your personal data only if you have given us your consent to do so.
No automatic decision-making is carried out based solely on automated processing – including profiling – that produces legal effects or similarly significantly affects you.
We generally retain your personal data as long as we have a business relationship with you. After the business relationship has ended, your data is generally saved for another 10 years unless contradicted by statutory record retention periods or you request that we delete it.

We transmit your personal data only to bodies that require your data to perform tasks on our behalf. Service providers may be required to support us with this. It may also be necessary to transmit your data to other units within our group of enterprises. In doing so, we comply with privacy regulations. In particular, your personal data may be transmitted to the following recipients:

• IT service providers, waste disposal service providers, and other service providers – e.g. those that support us with invoicing
• Authorities, agencies, and banks

The recipients specified above may be located outside the UK. This country may not have an adequate level of data protection as compared to the level of data protection in the UK. Your data is generally transmitted to third countries without adequate levels of data protection pursuant to what are known as the EU standard contractual clauses. You can obtain a copy of these protective measures at the following website: https://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX%3A32010D0087.  

Under the provisions of the UK General Data Protection Regulation, you may exercise the following rights vis-à-vis us:

• Right to access
• Right to rectification
• Right to restriction of processing
• Right to erasure / right to be forgotten
• Right to data portability
• Right to object

Where you have provided us with your consent you also have the right to withdraw this at any time. 

In order to exercise one of your rights listed above or to contact our data protection officer, please email: privacy@hilco.co.uk. If you believe we are unlawfully processing your personal data, please also contact us at: privacy@hilco.co.uk

You also have the right to contact the data protection supervisory authorities. The competent supervisory authority is:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Right of modification
We reserve the right to modify this Data Privacy Statement at any time in compliance with the legal regulations. This may be necessary, for example, to comply with new legislation or in the case of new services.

Data Privacy Policy for the Hilco Vision UK webshop

We are pleased that you are visiting our website at http://www.hilcovision.co.uk (hereinafter referred to as “Website”) and thank you for your interest in our company, our products and our website.
The protection of your privacy when using our website is very important to us. We therefore use your personal information only in accordance with the legal provisions on data protection. Please find information below about how we handle your personal data.

Controller and data protection officer
1.1       The Controller within the meaning of the UK General Data Protection Regulation (Art. 4 (7) UK GDPR) is Hilco Europe, Brunt Acres Road Industrial Estate, Hawes, North Yorkshire DL8 3UZ, Telephone +44 (0)1969 667688, Fax +44 (0)1969 667786, email privacy@hilco.co. (hereinafter referred to as “Hilco”, “we”, “our”, “us” etc.).

1.2       For questions regarding the collection, processing and use of your personal data or for the assertion of your data protection rights, please contact our data protection Hilco Europe – A Hilco Vision Company, Brunt Acres Road Industrial Estate, Hawes, North Yorkshire. DL8 3UZ, E-Mail privacy@hilco.co.uk.

What does “personal data” mean?
Personal data is any information that can be assigned to you individually. This is, for example, your name, address, telephone number, fax number and e-mail address. Non-personal data, on the other hand, is general information that cannot be used to establish your identity. This data, for example, may be the number of users of our website.

What personal data we collect from you, process and use and for what purposes
3.1       Web server logs including IP address
When you visit our website, our web server out of technical necessity automatically records your IP address, the date and time you are on our website, the pages you visited on our website, the website you were on previously, the browser you are using (e.g. Chrome), the operating system you are using (e.g. Windows XP) as well as the domain name and the address of your Internet provider (e.g. AOL). If our website uses cookies, the web server also stores this information. This also applies if you use our website with a mobile device, e.g. with the browser of a mobile phone.
If you have given us your consent, we evaluate these web server logs for statistical purposes (so-called click-stream analyses), so that we can determine how our website is used in order to optimize our website based on these findings. The legal basis for this is Art. 6.1 (a) UK GDPR.
In addition, in the event of a system abuse, we can process and use the information collected by the web server in collaboration with your Internet service provider and/or local authorities to identify the originator of the abuse. The legal basis for this is Art. 6.1 (f) UK GDPR. Our legitimate interest in doing so is to protect the integrity of our system and our users.

3.2       Services on our website

We will, moreover, only collect personal data from you if you have provided it to us voluntarily in order to use one of our services (e.g. placing orders in our online shop, making other inquiries through our website and subscribing to our newsletter). We process and use this personal data for the respective purposes stated.

Ordering in our online shop
For orders in our online shop and the processing of these, the registration as a customer of Hilco Vision is required. To register, you need to provide your company name, your address, e-mail address and telephone number.
The legal basis for the collection, processing and use of this personal data is Art. 6.1 (b) UK GDPR.

Newsletter
If you have given us your consent, we will process and use your e-mail address to send you our newsletter.
For the mailing of our newsletter we use the newsletter mailing platform Klaviyo. For more information about this, please see section 4.2.
You can revoke your consent to the receipt of our newsletter at any time with effect for the future by clicking on the corresponding link in the footer of the newsletter or by sending us an e-mail to one of the e-mail addresses listed under section 1.1.
The legal basis for the processing and use of this personal data is Art. 6 (1) (a) EU GDPR and Regulation 22 of the Privacy and Electronic Communications Act 2003. 

Other requests
For other requests via our contact form on the website, your company name and/or customer number, the contact person, your address and your e-mail address are required to process your inquiry.
The legal basis for the collection, processing and use of this personal data is Art. 6.1 (f) UK GDPR.

Disclosure of personal data
4.1       General
We do not disclose your personal data to third parties unless this is necessary to fulfill your request, is otherwise permitted on the basis of applicable law, or you have given us your consent. For example, in the course of processing your order, the transfer of your name, company and address to a shipping service provider is required to send you your order. The legal basis for the transfer of this personal data to the shipping service provider is Art. 6.1 (b) UK GDPR.
We are furthermore entitled to outsource all or part of the processing and use of personal data within the framework of the data protection regulations to external service providers who work for us as processors (Art. 28 UK GDPR). Examples of this are the hosting of our online shop and the use of the newsletter mailing service provider Klaviyo described in section 4.2. Beyond that, no transfer of your personal data to third parties takes place.
Our external service providers process and use your personal data on our behalf exclusively within the UK. The only exceptions to this are the newsletter mailing service provider Klaviyo and the web analytics provider Google, which are both based in the US. Both companies have an EU-US Privacy Shield certification (for Klaviyo available at  https://www.privacyshield.gov/participant?id=a2zt00000008RNFAA2 in order to guarantee an adequate level of data protection. Google's web analytics service also anonymizes your IP address. Additional information on Klaviyo can be found under section 4.2 and on Google under section 7.

4.2       Use of the newsletter mailing service provider Klaviyo
For the mailing of our newsletter, we use the newsletter mailing platform Klaviyo offered by the US provider Global HQ 125 Summer St, Floor 6 Boston, MA 02111 United States, which works on behalf of Hilco Vision a processor (Art. 28 EU GDPR). Klaviyo is a certified participant of the US-EU Privacy Shield data protection framework (available https://www.privacyshield.gov/participant?id=a2zt00000008RNFAA2, meaning that legal requirements for a privacy-compliant handling of personal data are prescribed.
If you have registered for our newsletter, your e-mail address will be stored on the Klaviyo servers in the USA for the purpose of using the newsletter mailing platform. Klaviyo processes and uses this personal data on our behalf for the mailing and evaluation of our newsletter. Klaviyo also processes and uses this personal data to optimize and improve its newsletter mailing platform.
The newsletters contain what is known as tracking pixel placed by Klaviyo. This is a pixel-sized file that is retrieved from the Klaviyo server when you open our newsletter and that collects technical browser and system information (including your IP address) for the technical improvement of the newsletter mailing platform. In addition, information is collected on whether and when you opened the newsletter and which links in the newsletter you clicked on. This is for the purpose of evaluating the reading habits of our newsletter recipients in general in order to adapt and optimize our content accordingly.
Please note: If you retrieve our newsletter online, for example, via the link specified in the newsletter in order to display it correctly, you will be accessing the Klaviyo website. In this context, we would like to point out that the Klaviyo website may use cookies or tracking pixels, which we have no influence over. Additional information can be found in the Klaviyo privacy policy at https://www.klaviyo.com/privacy/policy.
In addition to your consent (see also section 3.2 letter b), the use of Klaviyo is legally based on Art. 6.1 (f) UK GDPR. Our legitimate interest in this regard is the use of a user-friendly and secure newsletter system that meets your expectations and needs and serves our business interests.
If you do not agree with the mailing by Klaviyo or the statistical evaluation of the newsletter by Klaviyo, you can only cancel the receipt of our newsletter in its entirety (see section 3.2 letter b). The cancellation of individual components only is unfortunately not possible.

Storage period
We store your personal data only for as long as it is necessary to achieve the purposes for which it was collected or, insofar as there are any statutory retention periods which go beyond this, for the duration of these. Afterwards your personal data will be deleted.

Cookies
We use so-called cookies on our website to better understand how our visitors use our services and to provide our visitors with the best possible use. Cookies help us to make the visit to our website more attractive and meaningful for you.
Cookies are text information files that are sent from our web server to your computer and stored there when you visit the website.
Most browsers automatically accept cookies, but can be configured through the browser's setting preferences so that they do not accept them or indicate when a cookie is sent. Our cookies can be rejected or deleted at a later date. It is not necessary to accept our cookies in order to use the website in a general way. However, there are certain areas and features on the website that you cannot use without cookies.

Update Cookie Settings

Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies (see section 6 above), which are stored on your computer and enable an analysis of the use of the website. The information generated by the cookie about your use of the website is forwarded to Google and stored on servers in the United States. If IP anonymization is activated on the website, your IP address will however be truncated by Google beforehand within the UK. Only in exceptional cases will the full IP address be sent first to a Google server in the USA and truncated there. IP anonymization is activated on this website. Google will use this information on our behalf for the purpose of evaluating how you use the website, compiling reports for us on website activities and providing further services for us related to the activities on the website and Internet usage. The IP address communicated by your browser in the context of Google Analytics is not associated with any other data held by Google.
You can prevent the use of cookies by adjusting the corresponding setting in your Internet browser (see section 6 above). You can also disable the service by downloading and installing the browser add-on available at  https://chrome.google.com/webstore/detail/google-analytics-opt-out/fllaojicojecljbmefodhfapmkghcbnh?hl=en 

to disable Google Analytics for your current Internet browser. For additional information, please visit https://marketingplatform.google.com/about/analytics/terms/gb/ .

The legal basis for the processing and use of this personal data is Art. 6.1 (a) UK GDPR. You can change your settings and withdraw your consent by doing so at any time. 

Your data protection rights
According to the applicable data protection legislation, you have the following rights in particular:
(a)        Right to information: You have the right to request information on your data stored by us at any time.
(b)       Right to rectification: When we process or use your personal data, we use reasonable efforts to ensure that your personal data is accurate and up-to-date for the purposes for which it was collected. In the event that your personal data is incorrect or incomplete, you can request the correction of this data.
(c)        Right to erasure and restriction: You have the right, where applicable, to request the erasure or restriction of the processing of your personal data if, for example, according to this Data Privacy Statement or applicable law there is no longer a legitimate business purpose for such processing, and statutory retention requirements do not preclude further storage.
(d)       Right to data portability: You have the right, where applicable, to receive the personal data that you have provided to us in a structured, common and machine-readable format or to transmit this data to another controller.
(e)        Right of objection: You have the right, where applicable, to object to the processing of your personal data for special reasons that arise from your particular situation.
(f)        Right to revoke your granted consent: If you have consented to the collection, processing and use of your personal data, you can revoke your consent at any time with future effect, but without affecting the lawfulness of the processing carried out on the basis of the consent up until the revocation. In addition, you may object to the use of your personal data for the purposes of market research, opinion polling and advertising and unsubscribe from receiving our newsletter (see section 3.2 letter b).
(g)       Supervisory authority responsible for possible complaints: In the event of a complaint, you can also contact the Supervisory Authority for the UK the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF the supervisory authority responsible for Hilco Vision.

Security
Please note that the transfer of data on the Internet is unsecured and there is a risk that third parties may intercept and use the data. You can alternatively contact us at any time by mail or telephone.

Minors
Persons under the age of 14 are not permitted to transfer any personal data to us without the consent of their parents or legal guardians. Please note that our website is not intended for or directed at young people under the age of 18. We do not knowingly collect personal data from anyone under the age of 18.

Links to other websites
This website also contains links to other websites. This Data Privacy Statement does not apply to these other websites. We ask that you visit these other websites directly for information about privacy and how they handle your personal data. We cannot be held liable for any measures taken by these other websites or for their content.
Our website also includes links to the social networks Facebook, Twitter and Google+. These links are each marked with the logo of the corresponding network.
These are not so-called social plugins. As we are committed to protecting your privacy, we have made a conscious decision not to use social plugins and instead use links. When you visit our website, no direct connection is therefore established with the servers of the respective network operator and no information as described under section 3.1 (web server protocols) is transmitted to the web server of the respective network operator. The social network operators will therefore not know that you are visiting our website.
Other conditions apply only if you activate one of the links to the social networks. Based on the information that your web server automatically sends to the servers of the respective network operator, the latter is able to recognize that you have previously visited our website. If you have a user account with the respective social network and are logged in, the respective network operator can also link this information with the information stored in your user account. Information on the further processing and use of the data by the respective social network operators as well as your rights and configuration options in this regard to protect your privacy can be found in the privacy notices of the respective social networks. 

Right of modification
We reserve the right to modify this Data Privacy Statement at any time in compliance with the legal regulations. This may be necessary, for example, to comply with new legislation or in the case of new services.