Your Right to be informed
We respect your privacy and safeguard your data.
Our Data Controller is:
Your personal information
Collecting very specific, relevant information is a necessary part of us being able to provide you with the services you are purchasing. We will only use your personal information fairly and securely, and will never do anything with it (such as sharing it with any other party) that you have not clearly agreed to, or that could be considered irresponsible.
How we collect your data – We collect your data from phone calls, emails, from your appointed representatives and in the case of Businesses, web search engines, directories and websites.
Lawful basis of our processing – we process data under our contractual obligations to you, and under our legitimate business interests. Contractual Obligations – it is necessary for us to process your data to deliver on our contractual obligations. Legitimate business interest – it is in our legitimate business interest to keep you informed of our products with the purpose of retaining your custom for the future, or, if you are not currently a customer, for the purposes of potentially supplying you with our product.
When we process your personal information for our legitimate interests, we make sure to consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws.
Our legitimate business interests do not automatically override your interests – we will not use your Personal Data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
We collect a range of data – information required to deliver on our services. We also collect contact details (e.g. email address, phone number, address). This data can include details of individuals under the age of 16, where necessary, to complete our contract. Where the individual is under the age of 16 we obtain explicit permission for all contact, from the individual and if under 13, from their parent or guardian.
We do not share this data with anyone you would not expect us to – for example on occasion our appointed marketing agency and partners
We do not transfer data outside of the UK or EEA. However by the nature of the Internet, the personal data you supply through this website may be sent electronically to servers anywhere in the world, google analytics data for example. It may be used, stored and processed anywhere in the world, including countries outside the European Economic Area. Any transfers where the data is moved outside the EEA we will ensure that all reasonable security measures are taken and that any third party processers will be required to process the data in accordance with GDPR.
We retain all data for 7 years from last purchase or last contact, after which it is securely destroyed.
You can find more information on your individual rights on the ICO website by clicking here https://ico.org.uk/
You can withdraw your consent for any aspect of our data processing at any time by emailing email@example.com. Please be aware that we must process and maintain data to support contractual obligations to you and to third parties so withdrawing your consent will not necessarily mean your data is deleted. We will retain what is necessary to fulfil our contractual obligations, and also an identifier to ensure we do not collect your data again – so we have a record that you have asked us not to process your data.
You can object to processing to any aspect of our data processing at any time by emailing firstname.lastname@example.org. Please be aware that we must process and maintain data to support contractual obligations to you and to third parties so withdrawing your consent will not necessarily mean your will not be processed. We will retain what is necessary to fulfil our contractual obligations, and also an identifier to ensure we do not collect your data again – so we have a record that you have asked us not to process your data.
You can request rectification – of any of the data we hold on you if you believe it to be inaccurate by emailing email@example.com
You have the right to see what data we have on you by emailing firstname.lastname@example.org. We will deal with your request within 1 month of request.
You have the right to data portability – so we will transfer the data we have on you to any other appointed company at your request. This will not include business confidential information
You can also lodge a complaint with the ICO if you feel we have not lived up to our obligations by clicking here https://ico.org.uk/concerns/
The data we hold comes from two sources – for our customers it comes from the customers themselves (or their appointed representatives). For our business contacts it comes directly from them, or from publicly available sources including the internet.
In order to provide you with the best, tailored experience of our site we will need to place small text files, or ‘cookies’, or your computer. Most cookies that we use are ‘session’ cookies and only exist for the time that you are using our site. They perform functional tasks – such as remembering that you are logged in as you move from page to page, or to pre-load your personal details into forms to save you time.
We also track cookies anonymously to fuel our site analytics and learn how to improve your experience and hone the relevance of our products and services.
You can set your browser to reject all cookies. Please note that if you do this then certain areas of this website will not be able to function for you. Choose a browser setting that rejects third-party cookies but allows the benign, functional ones that make the good stuff work.
External links to any site other than ours are not our responsibility – obviously we cannot control how any other business handles your data.
Security – You can rest assured that all of your personal data is kept secure. Unfortunately, no data transmission over the Internet is guaranteed 100% secure, but we do take appropriate steps to protect the security of your personal data as required under our obligations under GDPR.
We endeavour to keep your personal data accurate and up to date. If you become aware of errors or inaccuracies, please email email@example.com
Copyright – The Greka logo and contents of this website (including text, design and graphics) are trademarked and copyrighted materials of Greka or its partners. All rights are reserved.
Online Advertising We May Use – We reserve the right to use Google AdWords Remarketing to advertise ourselves across the Internet. AdWords remarketing will display relevant ads tailored to you based on what parts of our website you have viewed by placing a cookie on your internet browser. The cookie does NOT in any way identify you or give access to your device. Google AdWords Remarketing allows us to tailor our marketing to better suit your needs and only display ads that are relevant to you.
How to Opt Out of Remarketing and Advertising – If you do not wish to participate in our Google AdWords Remarketing, you can opt out by visiting Google’s Ads Preferences Manager.
This Policy was updated on 25th May 2018.
Data Retention Policy
We store your data as securely as is practical, respecting your privacy. It is stored in a few locations: our offices, some mobiles and some with our appointed third parties. We store data for a maximum of 7 years after the point of last contact, after which it is securely destroyed. It is a requirement for us to retain data where it is relevant where there is a contractual obligation or a legal obligation to do so.
We believe that 7 years is a reasonable time scale.
Data is securely deleted, and/or shredded at the end of the retention period.
A small amount of data – such as analytics data on our website – is stored permanently.