Privacy Policy

1. Protection of your data is important to us.
Advantage Catering Equipment, referred to later in this document as ACE, takes your privacy seriously. Data protection is therefore the highest priority for us. In order to operate our website and provide the services on the website we require certain information which may include some personal data. In this Privacy Policy, we wish to inform you specifically about which personal data we collect, process and use in relation to the operation of the website online service, and the purposes for which they are used. We guarantee that we use your data in accordance with all the applicable data protection regulations only to offer you the optimal service.

The terms defined in our Terms of Use have the same meaning in this Privacy Policy, unless expressly stated otherwise in the Privacy Policy. We use specialist terms relating to data protection, such as “personal data”, “processing” and “pseudonymization”, always within the meaning specified by the European General Data Protection Regulation 2016/679 (“GDPR”).

2. Who is responsible for your data?
ACE is responsible for lawful processing of your data.


3. Which data do we collect and for what purposes?

3.1 Usage data
When you use the ACE website, servers automatically save certain information about

  • the end device you are using (iPhone/iPad, smartphone, tablet, desktop PC). This includes information about the device type, the device ID (e.g. IMEI, Android Device ID, Open UUID), the web browser used, the operating system and certain settings,
  • the domain name or IP address,
  • the date and time of use.

We require these usage data to make our services available to you (e.g. to adapt our service to the end device you are using), to detect and rectify any technical problems that arise and to recognise and prevent any misuse of our services. If the above usage data are personal data, the legal basis for their processing is Art. 6 (1) sub-paragraph 1 (f) GDPR. We also make use of usage data in anonymised form, i.e. without any possibility of identifying you as the user, for statistical purposes and to improve our service.
If you make use of the ACE website, certain information about the end device you are using is sent to an external service provider, in the form of log data about the app in question, an error report, language, storage profile, call hierarchy, IP address, device ID (e.g. MEI, Android Device ID, Open UUID). The service provider helps us to determine the cause of the crash and to rectify any technical problems. If the above usage data are personal data, the legal basis for their processing is Art. 6 (1) sub-paragraph 1 (f) GDPR.
Apart from this, ACE will only use your usage data in combination with your identity and possibly associate them with other information about you if you have first given us your express consent to do so. The legal basis for processing in this case is Art. 6 (1) sub-paragraph 1 (a) and (f) GDPR.


3.2 Registration data
You have to register to be able to use certain functions offered through the ACE website. Certain information is required for registration, depending on the function required (e.g. name of the company, email address, product used, etc.). We require this information to set up and manage your user account, to identify authorised users and to offer you the function you require. The legal basis for processing the data described in this section is Art. 6 (1) sub-paragraph 1 (b) and (f) GDPR.

3.3 Contact details
You have the option to contact us, to ask us questions for example, through the ACE website by means of the contact form. We request your contact details through the contact form (e.g. first name and surname, address, email address and department). You may also provide information about your company, your telephone and fax number. We use this data exclusively to respond to the questions you send to us.
The legal basis for processing the data described in this section is Art. 6 (1) sub-paragraph 1 (b) and (f) GDPR.

3.4 Data in relation to the use of additional functions and services
we may collect additional data that are required to provide and use the function in question. Depending on the function in question, this may include, for example, information about
•    devices you use (e.g. type designations, serial numbers, Mac address, etc.)
•    the location of the devices you use
•    any malfunctions in the devices you use.

ACE has the right to process and use the data collected in the context of the use of the functions provided via the ACE website in anonymised form for its own commercial purposes (e.g. for statistical evaluations and to improve the functions, quality and products).

3.5 Use of your data by ACE
ACE uses the data collected in accordance with sections 3.1 to 3.4 for the purposes explained therein.
Only if you have given us your express consent to do so will we also use your data to send you information about selected products and offers by email. In this case, the legal basis for processing is Art. 6 (1) sub-paragraph 1 (a) GDPR. You may revoke your consent at any time, with effect from that point forward, by sending an email to sales@aceq.co.uk

4. When do we pass on your data to third parties?
We call on the support of external service providers for certain technical processes of data analysis, processing and storage (e.g. to obtain aggregated, non-personal statistics from our databases, to store backup copies or to rectify technical problems). These service providers are carefully selected and meet high data protection and security standards. They are obliged to maintain strict confidentiality and process data only on our behalf and in accordance with our instructions. The legal basis for collaboration with these service providers is Art. 28 GDPR.
Apart from the cases explained in this Privacy Policy, we only pass data on to third parties without your express consent if we are compelled to do so by law or by an official or court order.

5. Cookies and Google Analytics
Our ACE website uses cookies. “Cookies” are small text files that are saved on your data carrier and exchange certain settings and data with our system via your browser. A cookie usually contains the name of the domain from which the cookie data were sent, information about the age of the cookie and an alphanumerical identification code. Cookies make it possible for us to present the ACE website in an appealing way for you and make your use of it easier by, for example, storing certain inputs made by you so that you do not have to re-enter them repeatedly. We use two types of cookies:
Session cookies: Session cookies are erased when you close your browser.
Permanent cookies: Permanent cookies remain on your computer’s hard drive for a certain period. When you visit our website again, the fact that you have previously visited us and the inputs and settings you prefer are recognised.
The information saved in the cookies is not used by us to identify you and is not associated with any other personal data that we have saved about you.
The ACE website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics also uses cookies. The information generated by the Google Analytics cookie about your use of the ACE website is usually transmitted to a Google server in the USA, where it is stored.
The ACE website uses Google Analytics with the extension “anonymize IP”. This means that your IP address, which is collected by the Google Analytics cookie, is truncated by Google within Member States of the European Union or in other countries that are signatories to the Agreement on the European Economic Ares before it is transferred to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
Google uses the information generated by the Google Analytics cookie on our behalf to analyse your use of the website, to compile reports about website activities and to provide other services to us relating to use of the website and the internet. Google will not associate the IP address transmitted by your browser in the context of Google Analytics with any other data held by Google. Depending on the browser you use, you can prevent Google from collecting the data generated by the cookie regarding your use of the ACE website (including your IP address) and prevent processing of those data by Google by downloading and installing the browser plugin available at the following link http://tools.google.com/dlpage/gaoptout?hl=en. If you are using a mobile end device (smartphone or tablet), you can do this via the following link: Deactivate Google tracking on mobile end device
Further information regarding terms of use and data protection can be found at http://www.google.com/analytics/terms/gb.html and https://support.google.com/analytics/answer/6004245?hl=en. Please be aware that the code “gat._anonymizeIp();” has been added to Google Analytics on this website to ensure that any IP addresses collected are anonymised (so-called IP masking).
If you do not wish cookies to be used (including the Google Analytics cookie), you can set your browser in such a way that storage of cookies will not be accepted. Please note, however, that in this case you might only be able to use the ACE website to a limited extent, if at all. If you wish to accept our cookies only and not the cookies of our service providers and partners, you can select the settings “Block cookies from third-party providers” in your browser.
The legal basis for processing personal data using cookies is Art. 6 (1) sub-paragraph 1 (f) GDPR.


6. Where is my data stored?
ACE does not store you data directly. Your data is kept secure within the Shopify website platform on secure servers. 


7. For how long is my data stored?
We save the usage data described under 3.1 permanently for you. Otherwise, your data is erased when knowledge of it is no longer required for the purposes described, unless statutory provisions specify a longer storage period.

B) INFORMATION ABOUT OTHER DATA PROCESSING PROCEDURES
1. Specific information about the application procedure
The data concerned are all information that you have provided to us for the purpose of processing your application (Art. 6 (1) (b) GDPR and Art. 88 GDPR).

2. Specific information about processing of customer/potential customer data
The data concerned are all information that you have provided to us to execute contracts (Art. 6 (1) (b)); we collect any additional data for processing only on the basis of your express consent (Art. 6 (1) (a) GDPR).
The data are used, among other things, to draw up quotations, for orders, sales and invoicing, and for the purposes of quality assurance.
Other recipients may include external service providers or other contractors who require the data, among other things, for data processing relating to shipping, transport and logistics.
Other external bodies may also be recipients if the data subject has given his/her consent (Art. 6 (1) (a) GDPR) or transmission is permitted on the basis of an overriding interest (Art. 6 (1) (f) GDPR), including for information about creditworthiness in the case of purchase on account, electronic transmission of information and quality assurance purposes. If statutory regulations take precedence, the data may also be passed on to public bodies including the tax office and customs agency (Art. 6 (1) (c) GDPR).
In the context of execution of contracts, commissioned data processors from outside the European Union may also be used.
The duration of data storage is determined by the statutory storage obligations and is usually 10 years.
3. Specific information about processing of employee data
We process data in the context of employment in order to execute contracts (Art. 88 GDPR); any additional data is processed only on the basis of your express consent (Art. 6 (1) (a) GDPR).
Possible recipients of the data include public bodies if there are overriding legal regulations, among them the tax office, social insurance agencies and professional associations.
If the data subject has given his/her consent or transmission is permitted on the basis of an overriding interest, other external bodies may be recipients, including for order acquisition and insurance services. Transmission to a third country does not take place.
The duration of data storage is determined by the statutory storage obligations and is usually 10 years.
4. Specific information about processing of supplier data
The data concerned are all information that you have provided to us for execution of contracts (Art. 6 (1) (b) GDPR); any additional data is processed only on the basis of your express consent (Art. 6 (1) (a) GDPR).
The data are used, among other things, for enquiries, purchasing and quality assurance.
Other recipients may include external service providers or other contractors who require the data for data processing, bookkeeping and processing of payments, among other things.
Other external bodies may also be recipients provided that the data subject has given his/her consent (Art. 6 (1) (a) GDPR) or if transmission is permitted on the basis of an overriding interest, including for information about creditworthiness in the case of purchase on account, for electronic transmission of information and for quality assurance purposes. If legal regulations take precedence, public bodies such as the tax office and customs agency may also be recipients.
In the context of execution of contracts, commissioned data processors from outside the European Union may also be used.
The duration of data storage is determined by the statutory storage obligations and is usually 10 years.

C) WHERE CAN I OBTAIN INFORMATION ABOUT MY DATA AND HOW CAN I CHANGE OR ERASE DATA?
On request, you can obtain information about the data that ACE has stored about you at any time. Please send an email to sales@aceq.co.uk. If the relevant statutory requirements apply, you also have the right to rectification, erasure or restriction of processing.
You can alter your registration data at any time. Please note that you will not be able to use areas of the ACE website that are protected by a log-in if you erase your registration data.
If you wish to delete your log-in details permanently, please notify us by email at sales@aceq.co.uk. We shall erase or anonymise all of the information held about you within 14 days of receipt of your application for erasure, unless we are obliged to retain the data by law.
You may also obtain the data that you have provided to ACE in a structured, standard and machine-readable format.
If processing of personal data for the purposes specified above is on the basis of Art. 6 (1) sub-paragraph 1 (f) GDPR, you may object to it at any time if the legal requirements are met. Informing sales@aceq.co.uk of this is sufficient.
You also have the right to consult the Regional Data Protection Officer about any complaint.

D) CONTACT
If you have any questions about this Privacy Policy, please contact us at sales@aceq.co.uk or by post or fax.
We may revise this online privacy policy from time to time. If we make any material changes, we will notify you by posting a prominent announcement on the Web site. If we are going to use your personally identifiable information in a manner different from that stated at the time of collection we will notify you via e-mail and will not proceed until we have your express permission.