We believe you should always know exactly what kind of data we collect from you, how we use it, and that you should be empowered to make the best decisions about the information that you share with us.

At Carrier Ltd. (hereinafter referred to as “Carrier”, “we”, “our”, “us”) the following data protection information aims to inform our business partners about the scope and purpose of processing your data as well as your rights as a data subject. Do bear in mind that by using our website, contacting us by telephone or providing information to us in person, by way of email, post and social media, you agree to its terms.

Persons who provide personal data of others to us must ensure that the data subjects agree to the provision and are informed about how personal data may be processed by us as well as their rights as a data subject.

 

Purposes and legal basis of the processing of personal data

Establishing contact within the scope of a business relationship

For the initiation or implementation of a business relationship, we will process your contact data (name, address, telephone number and email address), communication data (e.g. correspondence by email) and, if applicable, location data (IP address).

The legal basis for this processing of your personal data is Art. 6 (1)(a) GDPR (your consent) and Art. 6 (1)(b) GDPR (pre-contractual measures, performance of contract) if we receive the data directly from you or enter into a direct contractual relationship with you.

If you are not an existing or potential business partner yourself, we have usually received your contact details from our business partner who has named you as a contact person. In this case, the processing of your data is based on Art. 6 (1)(f) GDPR (balancing of interests, based on our legitimate interest in contacting existing or potential business partners).

The provision of personal data about you for the purpose of contacting you in the context of a business relationship is on a voluntary basis. Insofar as your contact data is absolutely necessary for the initiation and fulfilment of a contract, you must disclose your contact data, otherwise the contract with you cannot be concluded.

Establishing contact within the framework of our public relations work

We also maintain databases with contact details of media and press representatives, among others, in order to be able to contact them on relevant issues, events, etc. as part of our public relations work. 

The processing of your personal data is based on your consent (Art. 6 (1)(a) GDPR), which you can give to us in personal contact (e.g. by handing over your business card, by email or via online form). For your right to withdraw consent, please see point 5.8.

We also collect contact details from public sources and enter them in our databases. The legal basis for the data processing described is Art. 6 (1)(f) GDPR (weighing of interests, based on our legitimate interest in contacting political, media and press representatives, among others, as part of our public relations work).

 

Recipients of personal data

As a general rule, your data collected by us will not be disclosed to unauthorised persons. 

However, in some cases we use service providers to process personal data, including for sending emails, chats and video telephony. Your data (contact data, communication data, location data (IP address) is stored in a secure data center and databases. 

All service providers have been carefully selected and are subject to data protection agreements with us. The service providers are only given access to your data to the extent and for the period required to provide the services or to the extent that you have consented to the data processing and use. 

Your personal data may be stored, used and otherwise processed within the UK and/or any other country(ies) of the European Economic Area (EEA). For operational reasons, your personal information may also be stored or processed by some of our service providers, which operate outside of the EEA. Some of the data protection and security laws for these countries operate differently and may not be to the same level we have under EU legislation, however we shall take care to ensure that they have appropriate security measures in place and will take the steps necessary for compliance with the General Data Protection Regulation. With service providers in countries outside of the EEA, we conclude the data protection contract (standard contractual clauses) provided by the Commission of the European Union for the processing of personal data in such countries or implement other permissible guarantees or legally permissible exceptions from Art. 49 GDPR. This provides appropriate safeguards for the protection of your data. You can request a copy of these guarantees using the contact details below.

 

Storage period; deletion periods

Unless a longer retention period is required or permitted by law, we will only hold your personal information on our systems for the period necessary to fulfil the purposes set out in this Privacy Policy, or until you request for it to be erased.

We will periodically review the information we hold and delete it securely, or in some cases anonymise it, when there is no longer a legal, business or customer need for it to be retained.

 

Automated decision-making; profiling

We do not use your personal data for automated decision-making or profiling.

 

Your data subject rights

As the data subject, you are entitled to the following data subject rights, subject to the requirements of data protection law: 

• Information 
  • You can request information about your personal data processed by us (Art. 15 GDPR).
• Correction 
  • If your information is not (or no longer) accurate, you can request that your data be corrected. If your data is incomplete, you can request that it be completed (Art. 16 GDPR).
• Deletion 
  • You have the right to request the deletion of your data. Please note that a right to erasure depends on the existence of a legitimate purpose. In addition, there must be no regulations that oblige us to retain your data (Art. 17 GDPR).
• Restriction of processing 
  • You have the right to request the restriction of the processing of your data. Please note that a claim to restriction of processing depends on the existence of a legitimate purpose (Art. 18 GDPR).
• Objection
  • If data is collected on the basis of Art. 6(1)(f) GDPR (data processing to protect overriding legitimate interests), you have the right to object to the processing of your data on grounds relating to your particular situation. In the event of an objection, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the assertion, exercise or defence of legal claims (Art. 21 GDPR).  
• Right of appeal
  • You have the right to lodge a complaint with the Information Commissioner’s Office (https://ico.org.uk/) if you do not agree with the processing of your data (Art. 77 GDPR).
• Data portability 
  • You have the right to receive personal data that you have provided to us in an electronic format (Art. 20 GDPR).
• Revocation of your consent
  • You have the right to revoke consent (Art. 6 (1)(a) GDPR) to the processing of your data which you have given to us at any time. Your personal data will be deleted on the basis of your consent as soon as the purpose has been fulfilled or until revocation and when prior-rating retention periods have expired.
  • The easiest way to revoke consent you have given is to send an email to the contact details below. The revocation of consent does not affect the lawfulness of the processing of your data carried out until the revocation.

 

Contact details of the data protection officer

For any information requests, notification of incorrect data, questions or comments concerning your data protection, please contact us at:

FAO: The Company Secretary
Carrier Ltd
One Didsbury Point
2 The Avenue
Didsbury, Manchester
M20 2EY

or by email at [email protected]

 

About us

Carrier Ltd. is one of four specialist companies operating independently within the DER Touristik UK group. The company is registered in England and Wales under company number: 2671002. For our registered address please refer to the “Contacting Carrier” details above.

Under EU and UK data protection laws, Carrier is considered the “data controller” of the personal information that we collect, use and process in connection with our Privacy Policy.