WART REMOVAL PRIVACY

With this privacy policy we inform you about our handling of your personal data and about your rights according to the UK`s Data Protection Act (DPA) and the General Data Protection Regulation (GDPR). Responsible for data processing is Wart Removal Clinic (hereinafter referred to as “we” or “us”).

Contact

If you have any questions or suggestions regarding this policy or would like to contact us about asserting your rights, please send your request to

Wart Removal Clinic
3 Fairview Court – Fairview Road – Cheltenham – GL52 2EX

Web: www.wartremoval.co.uk

Phone: 0330 043 2013

E-mail: hello@wartremoval.co.uk

Legal basis

The term “personal data” under data protection law refers to all information relating to a specific or identifiable individual. We process personal data in compliance with the relevant data protection regulations, in particular the DPA and the GDPR.

Data processing by us only takes place on the basis of legal permission. We process personal data only with your consent (Art. 6 (1) a GDPR), for the performance of

• a contract to which you are a party (Art. 6 (1) b GDPR), or
• at your request for the performance of pre-contractual measures (Art. 6 (1) b GDPR),
• for the performance of a legal obligation (Art. 6(1)(c) GDPR), or
• if the processing is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms which require the protection of personal data override (Art. 6(1)(f) GDPR).

Duration of storage

Unless otherwise stated in the following notes, we only store data for as long as is necessary to achieve the purpose of processing or to fulfil our contractual or legal obligations. In addition, we will retain data in connection with consents requiring proof, as well as with complaints and claims for the duration of the statutory limitation periods. We will delete data stored for advertising purposes if you object to processing for this purpose.

Third Party Processors

We use processors as part of the processing of your data. Processing operations carried out by such processors include, for example, hosting, emailing, IT system maintenance and support, Customer Relationship Management software, marketing activities or file and data carrier destruction. A processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the data controller. Processors do not use the data for their own purposes but carry out data processing exclusively for the data controller and are contractually obliged to guarantee appropriate technical and organisational measures for data protection.

Transfer of personal data to commercial partners

Wart Removal Clinic will not disclose or otherwise distribute your personal data to third parties unless:
this is necessary for the performance of our services (legal basis for processing: Art. 6 para. 1 lit. b) GDPR), you have consented to the disclosure (legal basis for processing: Art. 6 para. 1 lit. a) GDPR) or the disclosure of data is permitted by relevant legal provisions.

The commercial partners commissioned by Wart Removal Clinic process your data exclusively in accordance with our instructions. Wart Removal Clinic remains responsible for the protection of your data, which is ensured by strict contractual regulations, technical and organisational measures, and additional controls by us. For further information please request our Processing addendum.

It goes without saying that Wart Removal Clinic ensures that the respective commercial partner guarantees data security before passing on personal data. Wart Removal Clinic will therefore only commission companies that can guarantee secure and proper data processing based on their qualifications and their technical and organisational capabilities.

Disclosure due to a legal obligation

Personal data may also be disclosed to third parties if we are legally obliged to do so e.g., by court order (legal basis for processing: Art. 6 (1) (c) GDPR) or if this is necessary to support criminal or legal investigations or other legal investigations or proceedings at home or abroad or to fulfil Wart Removal Clinic’s legitimate interests (legal basis for processing: Art. 6 (1) (f) GDPR).

Data transfer to third countries

Our data processing operations are carried out typically within the United Kingdom only. However, they may involve the transfer of certain personal data to third countries, i.e., countries where the DPA/ GDPR is not applicable law. Such a transfer is permissible if an adequate level of data protection is warranted in such third country pursuant to Art. 46 GDPR are in place or if one of the conditions of Art. 49 GDPR is met.

Unless otherwise stated below, we use the standard data protection clauses as appropriate safeguards for the transfer of personal data to third countries.

If you consent to the transfer of personal data to third countries, the transfer will take place on the legal basis of Article 49(1)(a) of the GDPR for example the use of Google Analytics on our website.

Processing when exercising your rights

If you exercise your rights under Articles 15 to 22 of the GDPR, we will process the personal data transferred for the purpose of implementing those rights by us and to be able to provide evidence thereof. We will only process data stored for the purpose of providing information and preparing it for this purpose as well as for data protection control purposes and otherwise restrict processing in accordance with Art. 18 GDPR. These processing operations are based on the legal basis of Art. 6 para. 1 lit. c GDPR in conjunction with. Art. 15 to 22 GDPR.

Your rights

As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:

• In accordance with Article 15 of the GDPR, you have the right to request information about whether or not we process personal data relating to you and, if so, to what extent.
• You have the right to demand that we correct your data in accordance with Article 16 of the GDPR.
• You have the right to demand that we delete your personal data in accordance with Art. 17 GDPR.
• You have the right to have the processing of your personal data restricted in accordance with Art. 18 GDPR.
• You have the right, in accordance with Art. 20 GDPR, to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transfer this data to another controller.
• If you have given us separate consent to data processing, you may revoke this consent at any time in accordance with Art. 7 (3) of the GDPR. Such a revocation does not affect the lawfulness of the processing that was carried out on the basis of the consent until the revocation.
• If you are of the opinion that a processing of personal data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 of the GDPR.
• In accordance with Article 21(1) of the GDPR, you have the right to object to processing based on the legal basis of Article 6(1)(e) or (f) of the GDPR on grounds relating to your particular situation. If we process personal data about you for the purpose of direct marketing, you may object to such processing pursuant to Article 21(2) and (3) of the GDPR.

The above rights may be limited in some circumstances, for example, if fulfilling your request would reveal personal information about another person, if you ask us to delete information which we are required to have by law, or if we have compelling legitimate interests to keep it. We will let you know if that is the case and will then only use your information for these purposes. You may also be unable to continue using our services if you want us to stop processing your personal information.

Please direct all requests for information, requests for information or objections to data processing to us.

The Supervisory Authority

The Information Commissioner`s Office (ICO) is the for Wart Removal Clinic relevant authority in matters of data protection. You have the right to make a complaint at any time to the ICO (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO in the first instance.

Data processing on our website

When you use the website, we collect information that you provide yourself. In addition, during your visit to the website, we automatically collect certain information about your use of the website. In data protection law, the IP address is also generally considered to be a personal data. An IP address is assigned to every device connected to the Internet by the Internet provider so that it can send and receive data.

Hosting

We use the web hosting provider Brace Hosting based in the UK, www.bracehosting.co.uk to display and host our website. Insofar as this involves the processing of personal data relating to the use of our website, Brace Hosting is our processor. The processing of personal data takes place on servers operated by Brace Hosting.

Server log files

During the purely informative use of our website, general information that your browser transmits to our server is initially stored automatically. This includes by default: browser type/version, operating system used, page accessed, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 (1) f GDPR. This processing serves the technical administration and security of the website. The stored data is deleted after 3 months unless there is a justified suspicion of unlawful use based on concrete indications and further examination and processing of the information is necessary for this reason. We are not able to identify you as a data subject from the stored information. Articles 15 to 22 of the GDPR therefore do not apply pursuant to Article 11 (2) of the GDPR, unless you provide additional information enabling us to identify you in order to exercise your rights set out in these articles.

Contacting us

When you contact us by telephone or e-mail, the data you provide will be stored by us based on Art. 6 (1) lit. b of the GDPR, insofar as it is necessary to answer your questions. The contact is logged in order to be able to prove the contact in accordance with the legal requirements. We delete the data accruing in this context when the respective conversation with you has ended and the facts concerned have been conclusively clarified.

Appointment booking and enquiries

Our website contains contact forms through which you can send us enquiries. The transfer of your data is encrypted (recognisable by the “https” in the address line of the browser). All data fields marked as mandatory are required to process your request. Failure to provide this information will result in us not being able to process your enquiries. The provision of further data is voluntary. We process the data for the purpose of answering your enquiry, as your enquiry is directed towards the conclusion or performance of a contract or initiation of a pre-contractual measure, Art. 6 para. 1 letter b GDPR is the legal basis for the data processing. Otherwise, we process the data on the basis of our legitimate interest in contacting enquirers. The legal basis for data processing is then Art. 6 (1) f GDPR.

Cookies

We use cookies and comparable technologies (“cookies”) on our website. Cookies are small data sets that are stored by your browser when you visit a website. This identifies the browser you are using and can be recognised by web servers. You have full control over the use of cookies through your browser. You can delete the cookies in the security settings of your browser at any time. You can object to the use of cookies through your browser settings in principle or for specific cases.

The use of cookies is partly technically necessary for the operation of our website and thus permissible without the user’s consent. In addition, we may use cookies to offer special functions and content as well as for analysis and marketing purposes. These may also include cookies from third-party providers (so-called third party cookies). The legal basis for the processing of cookies is Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is based exclusively on Art. 6 (1) lit. a GDPR; the consent can be revoked at any time. For more information about the cookies please refer to our Cookie Policy.

Further information on the purposes, providers, technologies used, data stored and the storage period of individual cookies can be found in our Cookie Policy.

Consent Management Tool

This website uses a Consent Management Banner to control cookies. The consent banner enables the users of our website to give consent to certain data processing procedures or to revoke a given consent. The legal basis under data protection law is your consent within the meaning of Art. 6 (1) a GDPR.

In addition, the banner helps us to be able to provide evidence of the declaration of consent. For this purpose, we process information about the declaration of consent and further log data about this declaration. Cookies are also used to collect this data. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis results from our legal obligation to document your consent (Art. 6 para. 1 letter c in conjunction with Art. 7 para. 1 GDPR).

Functional services of third parties

We use the Google Analytics service of the provider Google Ireland Limited (Google Ireland) on our website.

Google Analytics is a web analytics service that enables us to collect and analyse data about the behaviour of visitors to our website. Google Analytics uses cookies to analyse the use of our website. This involves the processing of personal data in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers and information about interaction with our website.

Some of this data is information stored in the terminal device you are using. In addition, further information is also stored on your end device via the cookies used. Such storage of information by Google Analytics or access to information already stored in your terminal device will only take place with your consent.

Google Ireland will process the data collected in this way on our behalf in order to evaluate the use of our website by users, to compile reports on the activities within our website and to provide us with other services associated with the use of our website and the use of the Internet. In doing so, pseudonymous user profiles of the users can be created from the processed data.

The setting of cookies and the further processing of personal data described here takes place with your consent. The legal basis for data processing in connection with the Google Analytics service is therefore Art. 6 para. 1 letter a GDPR. You can revoke this consent at any time with effect for the future.

The personal data processed on our behalf to provide Google Analytics may be transferred to any country in which Google Ireland or Google Ireland’s sub-processors maintain facilities.

We only use Google Analytics with IP anonymisation activated. This means that the IP address of the user is shortened by Google Ireland within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The IP address transmitted by the user’s browser is not merged with other data. Further information on the use of data for advertising purposes can be found in Google’s privacy policy at: www.google.com/policies/technologies/ads/.

The data on user actions is stored for a period of 14 months and then automatically deleted. Data whose storage period has expired is automatically deleted once a month.

Data Breaches/Notification

Databases or data sets that include Personal Data may be breached inadvertently or through wrongful intrusion. Upon becoming aware of a data breach, Wart Removal Clinic will notify all affected individuals whose Personal Data may have been compromised, and the notice will be accompanied by a description of action being taken to reconcile any damage as a result of the data breach. Notices will be provided as expeditiously as possible after which the breach was discovered.

Direct marketing in the context of a customer relationship

We use the data you provide to fulfil and process our contract and to respond to your enquiries in accordance with Art. 6 (1) (b) GDPR or on the basis of your consent in accordance with Art. 6 (1) (a) GDPR. Insofar as you have also given us separate consent to process your data for consulting, quotation purposes and instructed us to find you a suitable local service provider, Wart Removal Clinic is entitled to contact you for these purposes.

Security and confidentiality

To ensure the security and confidentiality of the personal data we collect on the Website, we use data networks that are protected by, among other things, industry-standard firewalls and password systems. When handling your personal information, we take appropriate technical and organisational measures to protect your information from loss, misuse, unauthorised access, disclosure, alteration or destruction and to ensure its availability.

Personal data and children

Most of the services available on this website are aimed at people aged 18 and over. We will not knowingly collect, use or disclose personal information from minors under the age of 18 without first obtaining consent from a legal guardian through direct offline contact. The parent or guardian will be provided with (i) information about the specific type of personal information being collected from the minor, (ii) the purpose for which it will be used, and (iii) the opportunity to object to any further collection, use or storage of such information. We comply with youth protection laws.

Changes and updates to the privacy policy

We kindly ask you to regularly inform yourself about the content of our privacy policy. We will amend the privacy policy as soon as changes to the data processing activities we carry out make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g., consent) or other individual notification.

Concerns and Contact

If you have any concerns about a possible compromise of your privacy or misuse of your personal data on our part, or any other questions or comments, you can contact us.