Personal data in this case means any information relating to an identified or identifiable natural person, such as your name or email address.
A. The Controller
The controller within the meaning of Article 4(7) GDPR for data processing on this website is:
Martin Engineering Ltd.
The Tangent Hub,
Phone: +44 115 946 47 46
Legal representatives: Robert Whetstone, Samuel Chenoweth
You can contact our data protection officer by email at: email@example.com.
B. Nature and scope of data processing
1. Server log files
When you use our website, the following information is collected, which your browser send to us automatically and which is stored automatically in server log files:
- Browser type and browser version
- Operating system used
- Referrer URL (URL from which you visit our website)
- Host name of the computer accessing the website
- Time of the server request
- IP address
This data is not combined with data from other sources.
An IP address can be personal data, because under certain circumstances it is possible to identify the person who is connected to the Internet by obtaining information from the relevant Internet service provider.
The data is only used for statistical purposes and to optimise our website. It is not used to analyse you personally or to create a profile. Temporary storage is necessary for us to be able to provide the website for you.
The legal basis for the data processing is our legitimate interest within the meaning of Article 6(1)(f) GDPR in designing our website to meet the needs of our users.
Your IP address is deleted after 30 days.
2. Contact form/customer feedback form
We collect the personal data that you provide voluntarily when you contact us, in particular by email or using our contact form.
If you use our contact form to contact us, this includes as a minimum your email address, your professional role and your postcode. You can provide further information (name, company name, and phone number) on a purely voluntary basis.
All data is only processed for correspondence with you and for the purpose for which you have provided us with the data as part of communication, e.g. to process your enquiry or to contact you at your request.
The legal basis for processing is therefore your consent within the meaning of Article 6(1)(a) GDPR. Insofar as contact is necessary for the performance of a contract with you or to take steps prior to entering into a contract, the legal basis is Article 6(1)(b) GDPR.
The data that you enter on the contact form is stored on servers at the Martin Engineering Company in Arizona, USA. Martin Engineering is certified under the EU-US Privacy Shield, thereby ensuring an adequate level of data protection. This data is not disclosed to third parties and is not disclosed within the Martin Engineering group.
After your enquiry has been fully dealt with or you have withdrawn your consent, your data is deleted, subject to any statutory retention periods, unless you have expressly consented to the further use of your data or we otherwise have a right to store it.
3. Processing data from job applicants
If you apply to work with us via our website, we collect the data you provide for your application, which includes the following as a minimum:
- Title, first name and last name
- Email address
- Other information and documents, e.g. cover letter, CV, references, which you provide to us in connection with your application
Your data is only used to decide whether to employ you and is only disclosed internally to those contacts at our company who are responsible for deciding who to appoint. If you do not apply in response to a specific job ad (unsolicited application), we use your data for all the vacancies that match your requirements at the time of your application.
We process your data for this purpose pursuant to Article 88 GDPR.
We delete your data after the application process has ended and following a retention period of 6 months. Data is only stored beyond this period if you have given your consent.
Most of the cookies we use are session cookies. They are automatically deleted after your visit. Other cookies are kept on your device until you delete them. These cookies allow us to identify your browser when you next visit the site.
You can configure your browser to notify you when cookies are used so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to accept cookies automatically under certain conditions, to always reject them or to delete cookies automatically when you close your browser. Disabling cookies may restrict some of the features of this website.
5. Newsletter data
You can subscribe to our newsletter. We use the opt-in method, when you subscribe to our newsletter. As a minimum, you must enter your email address for this process.
We only use this data and the additional data you provide to send the requested information and do not disclose it to third parties.
We save a log of the subscriptions to our newsletter. For this purpose, we save the subscription and confirmation time, as well as the corresponding email address. This is on the basis of our legitimate interest according to Article 6(1)(f) GDPR in being able to provide evidence of the subscription process in case of doubt.
We only process the data you have entered in the newsletter subscription form with your consent (Article 6(1)(a) GDPR).
If we have received your email address in connection with the sale of a product or service, we may also use your email address to send you newsletters or other promotional emails within the scope of Article 6(1)(f) GDPR if this (i) is for the purpose of directly advertising similar goods or services; (ii) you have not objected; and (iii) when your email address is first collected and for any further use, you are clearly informed that you may object to this use at any time without incurring any costs other than the basic costs of sending data.
You can revoke consent to the storage of your data and email address and to use of your data to send the newsletter at any time by clicking the "Unsubscribe" link in the newsletter. The withdrawal of consent does not affect the lawfulness of data processing operations based on consent before it is withdrawn.
The data provided when you subscribe to the newsletter is used to distribute the newsletter until such time as you unsubscribe, at which time this data is deleted, subject to any statutory retention periods to the contrary or if we are otherwise entitled to store the data. This does not apply to data we have stored for other purposes (e.g. email addresses for the members area).
6. Email marketing and tracking
We will send you information about our company and our goods and services by email if you have expressly consented to receive such information or if we are allows to send email advertising by law without your express consent. In the first case, the data is processed for this purpose in accordance with Article 6(1)(a) GDPR; in the second case, it is processed on the basis of our legitimate interest in informing our existing and former customers about our services (Article 6(1)(f) GDPR). Even if we are allowed to use your email address for advertising purposes without your consent, you can of course object to such use at any time without incurring any costs other than the basic costs of sending data.
Emails (e.g. as part of the newsletter) that we send to you contain a web beacon. This is a pixel-sized file that is retrieved from our server when the email is opened. This is used to collect technical information, such as the browser you are using, your operating system, the time of access and your IP address. This data allows us to track whether an email was opened, when it was opened and the content of the email that attracted particular interest (e.g. the links that a customer has clicked in the email). For technical reasons, this information can also be linked to specific email recipients. However, we do not monitor individual recipients.
All such analysis is carried out exclusively on the basis of our legitimate interest within the meaning of Article 6(1)(f) GDPR in identifying how our users read out emails and in targeting the content of our emails and the times we send our emails accordingly.
7. Google Analytics
When you visit our website, your browsing behaviour may be analysed statistically, primarily using cookies and analysis software. Your browsing behaviour is usually analysed anonymously and cannot be used to track you. You can object to such analysis or prevent analysis of this kind by not using certain tools.
This website uses Google Analytics, a web analysis service. It is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google is certified under the EU-US Privacy Shield and therefore guarantees an adequate level of data protection for the processing of personal data in the USA (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google Analytics cookies are stored exclusively on the basis of your consent under Article 6(1)(a) GDPR.
We have enabled the IP anonymisation feature on this website. This means that your IP address will be truncated by Google within the European Union or other parties to the Agreement on the European Economic Area before it is sent to the USA. Your full IP address will only be transferred to a Google server in the USA in exceptional cases and truncated there. On our behalf and, where applicable, for its own purposes, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide us with other services relating to website and internet usage. The IP address sent by your browser for Google Analytics is not combined with other Google data.
You can prevent cookies from being stored by selecting the appropriate settings in your browser. However, please note that by doing so you may not be able to use all the features of this website. You can also prevent the data generated by the cookie about your use of the website (including your IP address) from being passed to Google and being processed by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Google Analytics demographic data
This website uses the Demographics feature provided by Google Analytics. This allows us to create reports that contain statements about the age, gender and interests of visitors to our website. This data comes from interest-based advertising by Google and visitor data from third-party providers. This data cannot be linked to a specific person. You can disable this feature at any time via the ad settings in your Google account.
Google Analytics Remarketing
Our website uses the Google Analytics Remarketing features together with the cross-device features provided by Google AdWords and Google DoubleClick.
This function allows us to link the advertising target groups created with Google Analytics Remarketing to the cross-device features provided by Google AdWords and Google DoubleClick. This makes it possible to display interest-based, personalised advertising messages that have been customised for you based on your previous usage and browsing behaviour on one device (e.g. mobile phone) on another of your devices (e.g. tablet or PC).
If you have given your consent, Google links your web and app browsing history to your Google Account for this purpose. This means that the same personalised advertising messages can be displayed on every device that is logged in to your Google account.
To support this feature, Google Analytics collects the Google-authenticated IDs of users, which are temporarily linked to our Google Analytics data to define and create target groups for cross-device advertising.
You can permanently object to cross-device remarketing/targeting by disabling personalised advertising in your Google account, using the following link: https://www.google.com/settings/ads/onweb/.
The data that is collected in your Google account is combined exclusively on the basis of your consent (Article 6(1)(a) GDPR).
Google AdWords and Google conversion tracking
This website uses Google AdWords.
As part of Google AdWords, we also use conversion tracking. When you click on an ad that has been placed by Google, a cookie is created for conversion tracking. These cookies expire after 30 days and are not used to identify users personally. If the user visits certain pages on this website and the cookie has not yet expired, we (and Google) can identify that the user has clicked on the ad and been redirected to the page.
Each Google AdWords customer has a different cookie. The cookies cannot be tracked across the websites of AdWords customers. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have decided to use conversion tracking. Customers are told the total number of users who have clicked on their ad and been redirected to a page that has a conversion tracking tag. However, AdWords customers do not receive any information that can be used to personally identify users. If you do not want to be included in tracking, you can opt out by easily disabling the Google conversion tracking cookie in your browser settings. You will then not be included in the conversion tracking statistics.
Conversion cookies are stored on the basis of Article 6(1)(a) GDPR.
We also use Google reCAPTCHA (hereinafter referred to as "reCAPTCHA").
The purpose of reCAPTCHA is to determine whether data entered on the website (e.g. information entered into a contact form) is being provided by a human user or by an automated program. reCAPTCHA analyses the behaviour of the website visitors for this purpose based on a range of different parameters. This analysis begins automatically as soon as the website visitor enters the site. For analysis purposes, reCAPTCHA assess a variety of data (e.g. IP address, time spent by the website visitor on the website and cursor movements made by the user). The data collected during the analysis is forwarded to Google.
reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.
The data is processed on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its website against being misused to obtain information automatically and illegitimately and in preventing spam.
We integrate YouTube features and content into our website. YouTube is a service provided by Google LLC (see above).
Youtube needs to be able to process your IP address for the integrated features and content. The data is only processed in order to deliver the content.
The processing is based on our legitimate interest in making our website as user-friendly and informative as possible (Article 6(1)(f) GDPR).
If you are logged in to your YouTube account, YouTube allows you to link your browsing history directly to your personal profile. You can prevent it being linked by logging out of your YouTube account.
C. Your rights
You have the following rights regarding the processing of your personal data. You may ordinarily assert these rights free of charge. However, where requests relating to the rights under section 2(b) to (e) below are manifestly unfounded or excessive, in particular because of their repetitive character, pursuant to Article 12(5) GDPR, we may either:
(a) charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or
(b) refuse to act on the request.
Please contact our data protection officer to exercise your rights.
1. Right to object
Pursuant to Article 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data, insofar as this is carried out on the basis of Article 6(1)(e) or (f) GDPR. You can withdraw your consent by simply sending our data protection officer an informal email. Withdrawal does not affect the lawfulness of any data processing before you have withdrawn consent. If you object, we will no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is for the establishment, exercise or defence of legal claims.
2. Other rights
(a) Withdrawal of consent
You have the right at any time to withdraw any consent you have given to us, with effect for the future.
(b) Right of access
You have a right of access with regard to the processing of your personal data. You also have the right to be provided with the information listed in Article 15 GDPR.
(c) Rectification and erasure (correction and deletion)
You also have the right in accordance with Article 16 GDPR to request that inaccurate personal data concerning you is rectified (corrected) and that incomplete personal data is completed and the right in accordance with the conditions of Article 17 GDPR for your personal data to be erased (deleted).
(d) Right to restriction of processing
Subject to the conditions of Article 18 GDPR, you have the right to request the restriction of the processing of your personal data.
(e) Right to receive data and right to data portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to instruct us to transmit your personal data directly to another controller, where technically feasible. The right to have data transferred only applies to personal data where the processing is based on consent pursuant to Article 6(1)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out by automated means. The right to have data transferred to another controller does not apply if it adversely affects the rights and freedoms of others.(e.g. personal data of third parties, our business and trade secrets and copyrights).
3. Right to lodge a complaint with the competent supervisory authority
If you believe that we are not properly fulfilling our data protection obligations, you can lodge a complaint with the competent data protection supervisory authorities at any time.
D. Obligation to provide data
There is no legal or contractual obligation for you to provide us with personal data. However, where data is identified under part B above as necessary to provide the applicable service, the data must be provided, if you wish to make use of the service.
E. SSL and TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transfer of confidential content, such as orders or enquiries you send to us as the site operator. You can see whether a connection is encrypted, as the address in your browser's address bar changes from "http://" to "https://" and the lock icon is displayed in your address bar.
Last updated: January 2020