Data privacy statement according to EU General Data Protection Regulations (EU-GDPR)
With the following information, we would like to give you an overview of the use and processing of your personal data by TDK-Micronas Limited. Furthermore, we would like to point out the rights you are entitled to under UK and European data protection law.
Responsible body and contact:
Responsible body for the processing of personal data is:
Derek Hampson (Managing Director)
TDK - Micronas Ltd
2 Stirling Road, Southfield Industrial Estate
The company Data Protection Coordinators can be contacted at:
TDK - Micronas Ltd
2 Stirling Road, Southfield Industrial Estate
If you have any questions about this Privacy Notice, please contact:
TDK-Micronas Ltd is the controller and is responsible for your personal data.
You have the right to make a complaint at any time to the Information commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would however appreciate the opportunity to deal with your concerns before you approach the ICO so please contact the company Data Protection Coordinators at firstname.lastname@example.org in the first instance.
Definition of personal data:
By ‘personal data’, it is meant all information that relates to an identified or identifiable natural person. A natural person is considered to be identifiable, either directly or indirectly, in particular by association with any identifying information, such as a name, identification number, location data, online user names, or one or more special features, as well as the expression of physical, physiological, genetic, mental, economic, cultural, or social identity of this natural person.
Examples of personal data are: name, birthday, address, marital status, gender, email address, telephone number, bank account number, license plates, entries in Computer Log Files. It also includes special categories of personal data and pseudonymised personal data but excludes anonymous data or data that has had the identity of a natural person permanently removed.
Information we may collect about you:
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:
- Identity Data includes first name, maiden name, last name, username or similar identifier, title, date of birth and gender.
- Contact Data includes billing address, delivery address, email address and telephone numbers.
- Financial Data includes bank account and payment card details
- Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
- Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
- Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
- Usage Data includes information about how you use our website, products and services.
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you.
For what purpose is your data used:
We process personal data according to the principles relating to the processing of personal data set out in the General Data Protection Regulation (EU 2016/679) (GDPR) which require personal data to be:
- Processed lawfully, fairly and in a transparent manner.
- Collected only for specified, explicit and legitimate purposes.
- Adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.
- Accurate and where necessary kept up to date.
- Not kept in a form which permits identification of natural persons for longer than is necessary for the purposes for which the data is processed.
- Processed in a manner that ensures its security using appropriate technical and organisational measures to protect against unauthorised or unlawful processing and against accidental loss, destruction or damage.
- Not transferred to another country without appropriate safeguards being in place.
- Made available to a natural person about whom we hold personal data and be allowed to exercise certain rights in relation to their personal data.
Processing is any activity that involves the use of personal data. It includes obtaining, recording or holding the data, or carrying out any operation or set of operations on the data including organising, amending, retrieving, using, disclosing, erasing or destroying it. Processing also includes transmitting or transferring personal data to third parties.
We will only use your personal data when the law allows us to . Most commonly, we will use your personal data in the following circumstances:
1. For the fulfillment of contractual obligations
We process personal data if it is necessary to fulfill a contract or to carry out pre-contractual measures. Contractual obligations exist towards employees, applicants, customers, suppliers, and other partners. Personal data that is used here comprises of primarily contact data, bank details, payment data, information on education.
2. To comply with a legal or regulatory obligations
Like every trading company, we too are subject to a variety of different legal obligations and requirements. Examples include: commercial law, health and safety laws, reporting and accounting obligations to HMRC and reporting criminal or suspected criminal offences to the Police.
3. To safeguard our legitimate interests or those of others a third party and your interests and fundamental rights do not override those interests.
We process personal data if there are legitimate interests on our part, or those of a third party, that is, if the processing is necessary to transact our business or to carry out our business processes. For example to deliver a better service to you.
Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data.
We use your data in the following examples of our business processes:
- Production and sale of semiconductor elements.
- Project planning.
- To ensure the necessary employee qualifications.
- Attendance planning and attendance control.
- Measures for building and plant safety:
- Measures to guarantee right of owner or occupier of premises to undisturbed possession.
- IT measures ensuring data security and data integrity.
- Ensuring communication processes via telephone, intranet, internet, email, post, etc.
- Measures for staff management.
- Rental and on-site services.
4. On the basis of your consent
We generally do not rely on consent as a legal basis for processing your personal data. If consent is necessary we will ask for you express consent and you have the right to withdraw consent at any time by contacting us. You have the right to withdraw consent at any time by contacting us.
Who has access to your data:
Within TDK-Micronas Limited and within the TDK-Micronas Group there are those that have access to your data when it is necessary for them to carry out their duties.
In addition, external organizations may receive personal data including:
- HMRC, regulators and other authorities.
- The Police.
- Professional advisers.
- Site security database maintenance contractors.
- Banking institutions.
- Tax auditors, accountants and other auditors.
- Chamber of Commerce, the University of Cooperative Education, and schools in the context of education and training.
- Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Or we may seek to acquire other businesses or merge with them.
If personal data is not processed in-house but assigned to external service providers in the form of order data processing, this only happens if the binding data protection agreement ensures a data protection level corresponding to GDPR. We do not allow out third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
If your data is transmitted to a third country (non-EU) or international organizations:
A transfer of personal data to offices in countries outside the European Union (third countries) takes place within the framework of internal TDK communication and planning processes. The shared use of software platforms also makes personal information accessible to TDK branches outside the EU.
A transfer to third countries is permitted if the relevant state has been certified by the European Commission as having an adequate level of data protection. If this is not the case, TDK-Micronas Limited may only transfer personal data to a third country or an international organization provided that the data recipient has provided appropriate safeguards to protect the data. This is usually achieved by the implementation of standard data protection clauses, which are prescribed by the European Commission, or by an equivalent procedure according to GDPR .
TDK-Micronas Limited transmits personal data only to bodies for which suitable guarantees pursuant to GDPR exist.
How long will your data be stored:
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
By law we have to keep basic information about our customers or six years after they cease being customers for tax purposes.
In some circumstances you can ask us to delete your data.
In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
What rights do you have in relation to your data:
Under certain circumstances, you have rights under GDPR in relation to your personal data:
- Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
- Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
- Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
- Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
- Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
- Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
- Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
If you wish to exercise any of the rights set out above, please contact us.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Does any automated decision-making or profiling exist:
Automated decision-making, including profiling, within the meaning of GDPR does not take place.