Online Privacy Statement

Revision: July 2024

Our Privacy Undertaking

We will:
- Keep your personal data safe and private
- Not sell your data to 3rd parties
- Give you ways to manage and review how we interact with, and market to you at any time

Vink UK Limited trading as Nylaplas Engineering (“us”, “we”, “our”) is committed to protecting and respecting your privacy.

Our privacy policy (together with our terms of use and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. For the purposes of the General Data Protection Regulations, the data controller is Vink UK Limited, a company incorporated in the United Kingdom with company number 12207746 and a registered office of Melita House, 2nd Floor, 124 Bridge Road, Chertsey, Surrey, KT16 8LA.

Our privacy policy applies to all companies (not necessarily named Nylaplas Engineering) associated by way of ownership with the Vink UK Limited family of companies, websites in the Vink UK Limited family of companies, Vink online applications that run on smart phones, tablets, and other mobile devices (“apps”) as well as your use or access of any of our online services, content.

If you are an existing customer or supplier we already have limited personal information of yourself or of your staff, such as names and family names, contact details, birthdays, addresses, payment details, etc. Maintaining and processing this personal data is necessary for continued trade between the Vink UK Ltd family of companies and yourself.

By continuing to trade with Nylaplas Engineering and its associated companies or by submitting any personal data, you agree to this collection, transfer, storing, maintenance and / or processing in so far as the data is necessary for the purpose for which it has been collected. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with the GDPR.

We may from time to time change this privacy policy as the need arises from changes in European legislation or local country legislation. When such changes take place, you will be notified.

With the exception of personal data specified in this policy we may collect additional personal information from you, only if you have chosen to provide it to us.

Use made of the information We may use information held about you for various reasons, for example:
o To carry out our obligations arising from any contracts entered into between you and us
o To comply with any legal and /or statutory obligation in terms of relevant municipal laws
o To ensure that content from our site is presented in the most effective manner for you and for your computer
o To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes
o To allow you to participate in interactive features of our service(s), when you choose to do so
o To notify you about changes to our products and/or service(s)

If you are an existing customer, we may contact you by email, telephone, printed media or in other manners with information about goods and services similar to those which were the subject of a previous sale to you.

Nylaplas Engineering does not share the personal information of its customers or suppliers and/or their employees with any third parties for the purposes of further marketing by those third parties.

The information we collect from you depends on what activities you are carrying out on our site(s), whether you are logged in or not and whether you are placing an order. For example, we may collect, process, maintain and store some, all, or any combination of the following personally identifiable information about you:
- Contact Name (First and family names)
- Company Name, registration number and tax related numbers
- Postal and / or physical address
- Payment details (which may include credit card or banking account information)
- Contact telephone number(s)
- Contact email address(es)
- Contact person(s) names

Examples of instances when such information may be collected, processed, maintained or stored are when you:
o Provide the information by completing online forms on our site: This includes information provided at the time of registering to use our site, purchasing our products, completing the “Contact Us” form. We may also ask you for information when you report a problem with our site
o Contact us: we may keep a record of that correspondence
o Complete surveys that we use for research purposes or to enhance our services: There will however be no obligation on your part to respond to them
o Complete transactions through our site and for the fulfilment of your orders
o Visit our site(s) and access resources we may collect data with the use of cookies (See below for more on Cookies)
o Trade with us, including requests for offers, quotes, etc. In such cases the collection of personal data will also potentially be necessary to complete the trade contract

Nylaplas Engineering also relies on collecting data to further its legitimate interests as a basis of lawfulness of processing.

For Nylaplas Engineering a legitimate interest is when we have a business or commercial reason to use your information. Even in these circumstances the legitimate interest must not unfairly go against your rights in terms of the GDPR. Generally, we will rely on legitimate business interest when collecting the following, or any combination of the following, categories of personal information:

Category of personal information Description (Examples) Purpose of processing
Identity Name(s)
Family names
Contact person’s / representatives
names
  • General communications with trading partners
  • Being efficient about how we fulfil our legal duties
  • Being efficient about how we fulfil our legal and
  • contractual obligations
  • Complying with regulations that apply to us
Financial Sales orders (customers)
Purchase orders (suppliers)
Related payments to the above
  • Being efficient about how we fulfil our legal duties
  • Being efficient about how we fulfil our legal and contractual obligations
  • Complying with regulations that apply to us
Contact Details about the trading relationship that we have with you
  • General communications with trading partners
  • Being efficient about how we fulfil our legal duties
  • Being efficient about how we fulfil our legal and contractual obligations
  • Complying with regulations that apply to us
Transactional Sales orders (customers)
Purchase orders (suppliers)
Related payments to the above
  • Being efficient about how we fulfil our legal duties
  • Being efficient about how we fulfil our legal and contractual obligations
  • Complying with regulations that apply to us
Contractual Details about the trading relationship that we have with you
  • General communications with trading partners
  • Being efficient about how we fulfil our legal duties
  • Being efficient about how we fulfil our legal and contractual obligations
  • Complying with regulations that apply to us
Locational Data we get about where you are, the address where you connect a computer to the internet
  • General communications with trading partners
  • Being efficient about how we fulfil our legal and contractual obligations
  • Complying with regulations that apply to us
Behavioural Information on how you use our products and services
  • Figuring which of our products and services may interest you and informing you about them
  • Developing products and services, and marketing such products and services, and making trade offers
Open Data and Public Records Details about you that are in public records and information about you that is openly available on the internet, or that you may have made shared through social media
  • Being efficient about how we fulfil our legal duties
  • Being efficient about how we fulfil our legal and contractual obligations
Usage Data General data about how you use our products and services
  • General communications with trading partners
Documentary Data Details about you that are stored in documents in different formats, or copies of them. This could include items such as credit references, general correspondence, etc.
  • General communications with trading partners
  • Being efficient about how we fulfil our legal duties
  • Being efficient about how we fulfil our legal and contractual obligations
  • Complying with regulations that apply to us
Consents Any permissions, consents, or preferences that you give us. This may include items such as how you want us to contact you, whether you prefer to receive paper invoices and statements, or prefer e-mail formats.
  • General communications with trading partners
  • Being efficient about how we fulfil our legal duties
  • Being efficient about how we fulfil our legal and contractual obligations
  • Complying with regulations that apply to us

The table below lists examples of the ways that we may use your personal information, and the bases that we rely on to do so.

Purpose for data processing How data is processed Legal basis for processing Duration of processing Recipients of the personal data Transfer to countries which do not offer adequate data protection.
  • To manage our trading relationship with you
  • To develop new ways to meet your needs and to grow our business
  • To develop and carry out marketing activities
  • To study how you use our products and services
  • To provide advice or guidance about our products and services
  • To solicit feedback regarding our products and services
  • Collected
  • Stored
  • Recorded
  • Consulted
  • Used
  • Disseminated or otherwise made available
  • Aligned or combined
  • Archived
  • Your consent (new trading partners)
  • Fulfilling contracts
  • Our legitimate interests
  • Our legal obligation(s)
  • Duration of the contract
  • As prescribed by data retention laws
  • Where applicable, for the period of an online session
  • Vink UK Limited companies
  • Governmental and regulatory bodies
  • Where applicable 3rd party contractors
None
  • To deliver products
  • To make and manage customer and supplier payments
  • To manage customer accounts
  • To collect and recover money that is owed to us or make supplier payments for money that we owe
  • Collected
  • Stored
  • Recorded
  • Consulted
  • Used
  • Disseminated or otherwise made available
  • Aligned or combined
  • Archived
  • Fulfilling contracts
  • Our legitimate interests
  • Duration of the contract
  • As prescribed by data retention laws
  • Vink UK companies
None
  • To comply with laws and regulations that apply to us
  • To respond to customer and supplier’s complaints and seek to resolve them
  • Collected
  • Stored
  • Recorded
  • Consulted
  • Used
  • Disclosed
  • Disseminated or otherwise made available
  • Combined
  • Archived
  • Fulfilling contracts
  • Our legitimate interests
  • Our legal obligation(s)
  • As prescribed by data retention laws
  • Vink UK companies
  • Governmental and regulatory bodies
None
  • To run our business in an efficient, effective and economic manner. This includes managing our financial position, business capability, planning, communications, corporate governance, and audit
  •  Collected
  • Stored
  • Recorded
  • Consulted
  • Used
  • Disclosed
  • Combined
  • Archived
  • Our legitimate interests
  • Our legal obligation(s)
  • Duration of the contract
  • As prescribed by data retention laws
  • Vink UK companies
  • Governmental and regulatory bodies
None
  • To exercise our rights set out in agreements or contracts.
  • Collected
  • Stored
  • Recorded
  • Consulted
  • Used
  • Fulfillment of contracts
  • Duration of the contract
  • As prescribed by data retention laws
  • Vink UK companies
None

When you provide personal information on one of our websites you:
- Are made aware that Nylaplas Engineering or its associated companies may collect, maintain and process your personal information.
- Confirm that any information that you provide is true, accurate and complete, and that you will not deliberately provide any false information nor impersonate any other person or entity or misrepresent yourself or any other person or entity.

Our websites and apps are not intended for children under 16 years of age. We will not knowingly solicit data online from, or market online to, children under 16 years of age.

Automated decision making and profiling, and special categories of personal data
In terms of the GDPR you have a right to object against automated decision making and profiling based on special categories of data.

Special categories of data refer to personal data regarding ethnic or racial origin, trade union membership, criminal records, etc. Nylaplas Engineering does not collect, store, maintain or process any of the special categories of data. If this status changes at any stage in the future, we will update this online privacy statement accordingly.

Automated decision making, and profiling refers to a process of allowing computer systems to generate outcomes that have legal effect. In general Nylaplas Engineering does not make use of automated decision making and profiling in its relationship with trading partners. If this status changes at any stage in the future, we will update this online privacy statement accordingly and you will be notified.

Cookies
Cookies are text files, used by your computer's browser, that store visitor data. Cookies are commonly used on the Internet and do not harm your system.

We currently use cookies to collate general management data which is used to plan enhancements to our services.

We make use of the following cookies, which are set to expire as detailed below:

Name Purpose Type Duration
_dd_cookie_test Tests if cookies are supported Cookie Expires instantly
_dd_s Tracks browser errors Cookie Four hours
_dd_site_test Tests if cookies are supported Cookie Expires instantly
_ssid Remembers devices for anti-fraud purposes Cookie Four years
Crumb Prevents cross-site request forgery (CSRF) Cookie Session
RecentRedirect Prevents redirect loops if a site has custom URL redirects. Redirect loops are bad for SEO Cookie 30 minutes
siteUserCrumb Prevents cross-site request forgery (CSRF) for logged in site users Cookie Three years
squarespace-announcement-bar Prevents the announcement bar from displaying if a visitor dismisses it localstorage Persistent
squarespace-popup-overlay Prevents the promotional pop-up from displaying if a visitor dismisses it localstorage Persistent
squarespace-video-player-options Remembers video player selected preferences (volume, playback speed, and quality) for videos uploaded directly to Squarespace localstorage Persistent
ss_cookieAllowed Remembers if a visitor agreed to placing analytics cookies on their browser if a site is restricting the placement of cookies Cookie 30 days
ss_sd Ensures that visitors on the Squarespace 5 platform remain authenticated during their sessions Cookie Session
Test Investigates if the browser supports cookies and prevents errors Cookie Session
ss_cid Identifies unique visitors and tracks a visitor’s sessions on a site Cookie Two years
ss_cpvisit Identifies unique visitors and tracks a visitor’s sessions on a site Cookie Two years
ss_cvisit Identifies unique visitors and tracks a visitor’s sessions on a site Cookie 30 minutes
ss_cvr Identifies unique visitors and tracks a visitor’s sessions on a site Cookie Two years
ss_cvt Identifies unique visitors and tracks a visitor’s sessions on a site Cookie 30 minutes
_ga A google Analytics Tracking Cookie used to distinguish between users Cookie 2 years
_gat A Google Analytics Tracking Cookie used to throttle request rates Cookie 24 hours
_gid A Google Analytics Tracking Cookie used to distinguish between users Cookie 1 minute

If you do not want to accept cookies you may be able to configure your browser not to accept them. Please refer to your browser's 'help' facility for further information. Subject to specific regional European country laws you may be asked to consent to cookies via a cookie banner on the website. However, you should bear in mind that this may affect our ability to process the transactions you wish to have authorized. You can enable or disable cookies by modifying the settings in your browser. You can find out how to do this, and find more information on cookies, at: https://www.aboutcookies.org/ (Note that Nylaplas Engineering does not control this website and is not responsible for its content. It is provided as information only. For the most current browser-specific information, please consult your browser’s manufacturer).

Where we store your personal data
Any data that you provide to us is normally stored, processed and maintained in a country within the European Union (EU). While it is not normal practice for Nylaplas Engineering to do so, data may be transferred to, and stored at, a destination outside the EU. In such cases we shall ensure that only countries, and / or third-party processors that are compliant with the EU regulations are used by using means prescribed by the EU - GDPR.

Similarly, data may also be processed by staff operating outside the EU who work for us or our associated service provider(s). Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We request that you do not share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect any personal data you give us, we cannot guarantee the security of your data transmitted from your terminal to our site.

Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access. These include:
- Hashing
- SSL-encryption
- ISO 27001

We also take appropriate steps, such as encrypted passwords and recovering passwords via email without direct passwords details, to verify your identity before granting access to your personal profile.

Disclosure of your information
Regional companies in the Vink UK family may share your personal information for marketing purposes. In order to further our legitimate interests, we may disclose your personal information to third parties:
o In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;
o If Nylaplas Engineering is, or substantially all of its assets are, acquired by a third party, in which case personal data held by it about its customers and suppliers and /or their employees will be one of the transferred assets.
o If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of us or our group, our customers and suppliers, or others.
o When furthering the legitimate interests of Nylaplas Engineering and its associated family of companies by exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.
In all of the above cases we shall inform you that your personal information has been shared with a third party.

Your rights
In terms of the EU-GDPR you have the following rights:

1. To be provided with details regarding the type of personal information being collected, processed and maintained

2. Rectification of incorrect personal information that has been collected and stored by Nylaplas Engineering

3. Subject to competing rights and legal obligations of Nylaplas Engineering, partial or complete erasure of your personal information because:
- Nylaplas Engineering no longer needs the personal information for the purposes that it has collected
- You wish to withdraw the consent that you gave for the personal information to be processes
- If the processing is based on furthering our legitimate interest you may object to such processing. This objection will be weighed against our rights and legal obligations to further process the personal information.
- The processing is unlawful

4. Restrict the processing of personal information because:
- Of inaccuracies in the personal information
- The processing is unlawful
- Nylaplas Engineering no longer needs the personal information for the purposes that it has been collected
- If the processing is based on furthering our legitimate interest you may object to such processing. This objection will be weighed against our rights and legal obligations to further process the personal information.

5. If the processing is based on furthering Nylaplas Engineering’s legitimate interest you may request that such processing be ceased. This objection will be weighed against our rights and legal obligations to further process the personal information

6. Where the processing of personal information is based on furthering Nylaplas Engineering’s legitimate interest, to download such personal information in digital format

7. Where the processing of personal information is based on consent, to withdraw such consent You can exercise your right to prevent such processing by checking the relevant boxes on the online forms that we use to collect your personal data. You can also exercise the right at any time by contacting us directly.

Where we have shared your personal information in line with the provisions with this privacy policy, we shall take reasonable steps to inform all parties with whom we have shared the information of any request to have such personal information deleted.

Any of our websites may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

The GDPR gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act. Any access request will be dealt with free of charge.

Changes to our privacy policy
You will be notified of any changes that we may make to our Privacy Policy in the future.

Queries and Complaints
If you have any requests concerning your personal information, please contact our operations team by email to sales@nylaplas.co.uk