Privacy Policy

At HVIIT, we believe in the importance of protecting personal information and an individual’s right to privacy and integrity.

This privacy policy explains how we collect and process your personal data when you interact with us. It also outlines your rights and how you can exercise them.

Additionally, your device sends its IP address when you visit our website. We only use this information temporarily to deliver content to you and, for security, to ensure you’re not a malicious bot. We don’t save your IP address or any unique identifiers alongside your searches or visits to our websites. We also never log IP addresses or any unique identifiers to disk.

You are always welcome to contact us if you have any questions at info@hviit.com.

WHO IS RESPONSIBLE FOR THE PERSONAL DATA WE COLLECT?

MR CORDYS LTD, Company Registered Number 15839168, registered in England and Wales, is the data controller responsible for the processing of personal data described in this privacy policy.

WHAT IS PERSONAL DATA AND WHAT CONSTITUTES THE PROCESSING OF PERSONAL DATA?

Personal data refers to any information that can be linked directly or indirectly (together with other information) to a natural, living person. This means that information such as name and contact details, images, audio recordings, IP addresses, and competition entries is classified as personal data if it can be linked to a natural person.

Any action taken with personal data is called processing, regardless of whether it is carried out in an automated manner or not. Examples of common processing procedures are collection, recording, organization, structuring, storage, adaptation, transfer, or erasure.

HOW WE COLLECT PERSONAL DATA ABOUT YOU?

We use different methods to collect data from and about you including through:

Direct interactions: You may give us information about you by filling in forms or by corresponding with us by phone, email, or otherwise. This includes information you provide when you subscribe to our newsletters, participate in discussion boards or other social media functions on our website, enter a competition, promotion or survey, use our customer service, and other similar activities.

Automated technologies or interactions: As you interact with our website, we may automatically collect technical data about your equipment, browsing actions, and patterns as specified above. We collect this information by using cookies and other similar technologies (read more in our Cookie Policy).

Third parties or publicly available sources: We may receive information about you from third parties including, for example, business partners, sub-contractors in technical, payment, and delivery services, advertising networks, analytics providers, search information providers, data brokers, or aggregators.

User contributions: You also may provide information for us to publish or display ("post") on public website areas or transmit to other website users or third parties (collectively, "User Contributions"). You submit User Contributions for posting and transmission to others at your own risk. Although you may set certain privacy settings for User Contributions, please be aware that no security measures are perfect or impenetrable. Additionally, we cannot control the actions of any website users with whom you choose to share your User Contributions. Therefore, we cannot and do not guarantee that unauthorized persons will not view your User Contributions.

WHAT PERSONAL DATA DO WE COLLECT ABOUT YOU AND FOR WHAT PURPOSE (WHY)?

Purpose: To handle complaints and other consumer matters.

  • Processing that is carried out:

    • Communication and response to complaints and other issues related to consumer contact (via telephone, letter, or digital channels, including social media)

    • Investigation of complaints and questions

    • Eventual dispatch of compensation

  • Category of personal data:

    • Name

    • Contact details (address, email, and telephone number)

    • Your correspondence

    • Details of purchase date, place of purchase, possible error/complaint

    • Health data (e.g. allergic reactions and health conditions that you choose to inform us about)

  • Legal basis: Legitimate interest. The processing is necessary to meet our and your legitimate interests in dealing with complaints and consumer issues.

  • Storage period: Personal data relating to complaints and consumer issues is stored for no longer than two years.

Purpose: To carry out competitions and manage entries therein.

  • Processing that is carried out:

    • Communication before and after participation in a competition (e.g. confirmation of registration, questions, contact with winners)

    • Handing out of winnings

  • Category of personal data:

    • Name

    • Contact details (address, email, and telephone number)

    • Personal identity number if the winnings are to be taxed by the winner

  • Legal basis: Legitimate interest. The processing is necessary to meet our and your legitimate interests in handling your participation in competitions and events.

  • Storage period: During the time that the competition/event is in progress (including any evaluation). In the event of profit tax payable by the winner, the filing rules of the accounting act shall apply.

Purpose: Photography in connection with HVIIT’s participation in events, festivals, trade fairs, etc.

  • Processing that is carried out:

    • Photographing

    • Storage of photographs taken

    • The use of photographs in social media marketing campaigns globally

  • Category of personal data:

    • Photography

    • Time of photography

  • Legal basis: Consent in connection with photography and a legitimate interest with regards to so-called mingle images in connection with Mr Cordys’ participation in events, festivals, and trade fairs.

  • Storage period: 5 years.

Purpose: To handle incoming requests for sponsorship.

  • Processing that is carried out:

    • Communication in connection with incoming sponsorship inquiries (e.g. confirmation of incoming inquiry, questions, response)

    • Selection of sponsorship activities

  • Category of personal data:

    • Name

    • Contact details (address, email)

  • Legal basis: Legitimate interest and contractual duties in cases where sponsor agreements have been entered. The processing is necessary to meet our and your legitimate interests in handling sponsorship matters.

  • Storage period: As long as is necessary to handle the sponsorship case, but no more than 1 year. Accounting documents are filed in accordance with the regulations in the accounting act. Sponsor agreements are stored as long as either party may take any legal action under the agreement.

Purpose: To communicate with you as a subscriber of any of HVIIT’s newsletters.

  • Processing that is carried out:

    • Collection of addresses in order to mail out our newsletters

    • Storage of addresses in order to mail out our newsletters

    • Newsletter mailouts

  • Category of personal data:

    • Name

    • Address (postal address for postal mailouts, email address for electronic mailouts)

    • Date of birth (yy, dd, mm)

  • Legal basis: Consent. The consent is voluntary and you can withdraw your consent at any time by unsubscribing.

  • Storage period: Until the person unsubscribes.

Purpose: To communicate with you as a recipient of press releases from HVIIT.

  • Processing that is carried out:

    • Collection of addresses in order to mail out our press releases

    • Storage of addresses in order to mail out press releases

    • Press release mailouts

  • Category of personal data:

    • Name

    • Email

  • Legal basis: Legitimate interest. The processing is necessary to meet our and your legitimate interests in the mailing of press releases from Mr Cordys.

  • Storage period: Until the person unsubscribes.

Purpose: To offer you as a board member or an auditor access to information through our board portal.

  • Processing that is carried out:

    • Creating a user account

    • Access control

    • Notification, when new data has been uploaded to the portal

    • Storage of data

  • Category of personal data:

    • Name

    • Social security number

    • Company

    • Title

    • Contact information (e.g. email, address, phone number)

  • Legal basis: Legitimate interest. The processing is necessary to meet our and your legitimate interests in providing financial and corporate information.

  • Storage period: As long as your assignment is ongoing and then until limitation periods for legal action expire.

Purpose: To handle visits to HVIIT’s production facilities correctly, efficiently, and safely (e.g. fire protection and quality issues).

  • Processing that is carried out:

    • Visitors register their arrival and departure

    • The personal data is stored and includes data confirming that visitors to the production facility have read and accepted HVIIT’s quality standards.

  • Category of personal data:

    • Name

    • Company

    • Email

    • Mobile

    • Telephone

    • Photography

  • Legal basis: Legitimate interest. The processing is necessary to meet our and your legitimate interests in providing a safe and efficient visit.

  • Storage period: 2 years.

Purpose: Camera surveillance at targeted areas of our business premises, such as entrances to office space, plants, and the warehouses to prevent accidents, and to prevent, investigate, and expose possible intrusion and criminal activity.

  • Processing that is carried out:

    • Camera surveillance at Mr Cordys’ production facilities, both indoors and outdoors.

    • Camera surveillance at entrances to office spaces, both indoors and outdoors.

    • The personal data is stored and includes data confirming that visitors to the production facility have read and accepted Mr Cordys’ quality standards.

  • Category of personal data:

    • Video recording

  • Legal basis: Legitimate interest. The processing is necessary to meet our and your legitimate interests in preventing accidents and to prevent, investigate, and expose possible intrusion and criminal activity.

  • Storage period: 7 days.

Purpose: To handle the necessary permissions when you, as an entrepreneur, temporarily work at our production facility.

  • Processing that is carried out:

    • Registering your permissions

    • The personal data is stored and includes data confirming that visitors to the production facility have read and accepted Mr Cordys’ quality standards.

  • Category of personal data:

    • Name

    • Contact details (address, email, and telephone number)

    • Your correspondence

    • Date of permissions

  • Legal basis: Legitimate interest. The processing is necessary to meet our and your legitimate interests in handling permissions.

  • Storage period: During the time you temporarily work at our production facility.

Purpose: To handle and investigate incidents (e.g. personal injury, property damage, near-miss incidents, quality deviations, and complaints).

  • Processing that is carried out:

    • Incident report including incident description, photographs, and documents showing follow-up

    • Investigation of incidents

    • Reports to the Insurance companies, Authorities, and internal incident follow-up.

  • Category of personal data:

    • Name

    • Contact details (address, email, and telephone number)

    • Your correspondence

    • Incident description

    • Photograph of incident

    • Health data (e.g. allergic reactions and health conditions that you choose to inform us about)

  • Legal basis: Legitimate interest. The processing is necessary to meet our and your legitimate interests in handling and investigating incidents.

  • Storage period: 10 years from the date the incident was reported.

WHO DO WE SHARE YOUR PERSONAL DATA WITH?

We may share your personal data with the following categories of recipients:

  • Service Providers: We may share your personal data with third-party service providers that perform services on our behalf, such as IT services, payment processing, marketing services, and shipping services.

  • Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, personal data may be transferred to the acquiring entity.

  • Legal Requirements: We may disclose your personal data when required to do so by law, such as in response to a subpoena or other legal process, or to comply with regulatory requirements.

  • Protection of Rights: We may disclose personal data when we believe it is necessary to protect the rights, property, or safety of Mr Cordys, our employees, customers, or others.

YOUR RIGHTS

You have certain rights regarding your personal data, including the right to:

  • Access: You have the right to request a copy of the personal data we hold about you.

  • Rectification: You have the right to request the correction of any inaccurate or incomplete personal data.

  • Erasure: You have the right to request the deletion of your personal data under certain circumstances.

  • Restriction: You have the right to request the restriction of processing of your personal data under certain circumstances.

  • Portability: You have the right to request the transfer of your personal data to another organization or to you under certain circumstances.

  • Objection: You have the right to object to the processing of your personal data under certain circumstances.

  • Withdraw Consent: If we process your personal data based on your consent, you have the right to withdraw your consent at any time.

To exercise any of these rights, please contact us at info@mrcordys.com.

CHANGES TO THIS PRIVACY POLICY

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on our website. You are advised to review this privacy policy periodically for any changes.

CONTACT US

If you have any questions about this privacy policy, please contact us at: info@hviit.com