Penn Packaging Limited (“Penn Packaging”, “we”, “us” or “our”) is a company incorporated in England and Wales with company number 3158573. Our registered office is 629 Foxhall Road, Ipswich, Suffolk, IP3 8NE.
This policy sets out the basis on which any personal data we collect from individuals, or data that we obtain from other sources, how it will be processed, why we collect your personal information, how we use it, the limited conditions under which we may disclose it to others and how we keep it secure. This includes personal data we use in connection with:
1.Visitors to our websites
When someone visits www.penn-packaging.co.uk we collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. We collect this information in a way which does not identify anyone. We do not make any attempt to find out the identities of those visiting our website. We will not associate any data gathered from this site with any personally identifying information from any source. If we do want to collect personally identifiable information through our website, we are up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it.
Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
When you accept cookies from our site we write a cookie called ecd_opt_in to your machine. This stores your acceptance so that when you return to our site in the future you will not have to accept cookies again. Once you have accepted, our site will save a number of cookies to store information as follows.
A set of system cookies are used to store information allowing functionality. These include data relating to a user’s membership, such as log-in details, if the user has signed up to any memberships on the site.
These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. These cookies are listed below:
We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.
Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.
- Direct Marketing
Part of our business activities is to inform and provide information to individuals of products and services we can provide from our suppliers and partners. We do this to keep individuals informed of latest developments and to provide information on company or industry related subjects.
The legal basis on which we process personal data in these circumstances is the legitimate interest of business to business contact and the grounds that we are working towards the legitimate interest of the individual and/or their business.
- Email newsletters
Where individuals have opted in to receive marketing communications from us, we will process their personal data to provide them with marketing communications in line with the preferences they have provided.
The legal basis on which we process personal data for marketing purposes is consent. Individuals are not under any obligation to provide us with their personal data for marketing purposes, and they can withdraw their consent to personal data being processed in this way at any time by contacting us at email@example.com or, where relevant, by following the unsubscribe link in any marketing communication they receive from us. If individuals do choose to withdraw consent, this will not mean that our processing of personal data before they withdrew consent was unlawful.
In certain circumstances, we may also need to share personal data if we are under a duty to disclose or share personal data in order to comply with any legal obligation.
3.Types of Information we collect
We will collect and process the following personal data:
- Information individuals give us: This is information about individuals that is supplied when filling in forms on our website, or by corresponding with us by phone, e-mail or otherwise. It includes information provided when participating in social media functions on our website, and when problems are reported with our website or services. The information may include names, addresses, email addresses and phone numbers.
- Information we collect: With regard to visits to our website we will automatically collect the following information:
- Technical information, including the Internet Protocol (IP) address used to connect computers to the internet, browser type and version, time zone setting, browser plug-in types and versions, screen resolution, operating system and platform; and
- Information about visits, including the full Uniform Resource Locators (URL), clickstream to, through and from our website (including date and time), page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs) and methods used to browse away from the page.
- Information we receive from other sources: We are also working closely with third parties (including, for example, business partners, sub-contractors, advertising networks, analytics providers, hosting providers and search information providers) from whom we may also receive information about individuals in connection with our services.
We do not process any special categories of personal data, meaning personal data revealing:
- racial or ethnic origin;
- political opinions; religious or philosophical beliefs;
- trade union membership;
- genetic or biometric data that uniquely identifies individuals; or
- data concerning an individual’s health, sex life or sexual orientation.
We do not process data relating to criminal convictions unless legally obliged to do so.
We do not sell any personal contact data or pass on to any third party without prior consent. We do share personal contact data with our suppliers and business partners in relation to a contract.
4.Uses made of the information
- We will combine the information individuals provide to us with information we collect about them.
- We will use this information and the combined information for the purposes set out above (depending on the types of information we receive).
5.Where we store personal data
- The data that we collect from individuals will be stored in (and will not be transferred out of) the European Economic Area.
- All information individuals provide to us is stored on secure encrypted servers. Where we have given individuals (or where individuals have chosen) a password which enables individuals to access certain parts of our website, the individuals are responsible for keeping this password confidential. Individuals must not share their password with anyone.
6.Period of storage
- Where we have processed personal data to provide marketing communications with consent, we may contact individuals at least every twelve (12) months to ensure they are happy to continue receiving such communications. If individuals tell us that they no longer wish to receive such communications, their personal data will be removed from our lists.
7.Rights under data protection laws
Individuals have the right to object to us processing their personal data where we are processing personal data:
- For direct marking purposes. If individuals ask us to stop processing their personal data on this basis, we will stop.
- Right of access
- Individuals have the right to receive confirmation as to whether their personal data is being processed by us, as well as various other information relating to our use of their personal data. Individuals also have the right to access their personal data which we are processing.
- Right to rectification
- Individuals have the right to require us to rectify any inaccurate personal data we hold about them. Individuals also have the right to have incomplete personal data we hold about them completed, by providing a supplementary statement to us.
- Right to erasure
- Individuals have the right to require we erase their personal data which we are processing where one of the following grounds applies:
- the processing is no longer necessary in relation to the purposes for which their personal data was collected or otherwise processed;
- our processing of their personal data is based on their consent, the individual has subsequently withdrawn their consent and there is no other legal ground we can use to process their personal data;
- individuals object to the processing as set out in section 184.108.40.206 of this policy and we have no overriding legitimate interest for our processing;
- the personal data have been unlawfully processed; and
- the erasure is required for compliance with a law to which we are subject.
- Exercising rights
- Individuals can exercise such rights by contacting us at firstname.lastname@example.org