Introduction

We are delighted that you have shown interest in our enterprise. Data protection is a particularly high priority for the management of ToughMuck Extreme Cleaning. The use of the Internet pages of ToughMuck Extreme Cleaning is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data may become necessary. If the processing of personal data is necessary, and there is no statutory basis for such processing, we generally obtain consent from the data subject.

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to ToughMuck Extreme Cleaning. Utilizing this data protection declaration, our enterprise would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed through this data protection declaration, of the rights to which they are entitled.

As the controller, ToughMuck Extreme Cleaning has implemented numerous technical and organisational measures to ensure the complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, e.g. by telephone.

Name and address of the controller

Controller for the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:

ToughMuck Extreme Cleaning
63 Maclean Road, Bournemouth, BH11 8EN – Dorset, United Kingdom
Email: [email protected]
Website: www.toughmuck.uk

Name and address of the Data Protection Officer

The Data Protection Officer of the controller is Zoe Bath, ToughMuck Extreme Cleaning, 63 Maclean Road, Bournemouth, BH11 8EN – Dorset, United Kingdom. Email: [email protected].

Any data subject may, at any time, contact our Data Protection Officer directly with all questions and suggestions concerning data protection.

Cookies

The Internet pages of ToughMuck Extreme Cleaning use cookies. Cookies are text files that are stored in a computer system via an Internet browser. Many cookies contain a so-called cookie ID — a unique identifier consisting of a character string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored.

Through the use of cookies, ToughMuck Extreme Cleaning can provide the users of this website with more user-friendly services that would not be possible without the cookie setting. By means of a cookie, the information and offers on our website can be optimised with the user in mind.

The data subject may, at any time, prevent the setting of cookies through our website employing a corresponding setting of the Internet browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an Internet browser or other software programs. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be entirely usable.

Collection of general data and information

The website of ToughMuck Extreme Cleaning collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files. Collected may be the browser types and versions used, the operating system used by the accessing system, the website from which an accessing system reaches our website (so-called referrers), the sub-websites, the date and time of access, an Internet protocol address (IP address), the Internet service provider of the accessing system, and any other similar data and information that may be used in the event of attacks on our information technology systems.

When using these general data and information, ToughMuck Extreme Cleaning does not draw any conclusions about the data subject. Rather, this information is needed to deliver the content of our website correctly, to optimise the content of our website as well as its advertisement, to ensure the long-term viability of our information technology systems and website technology, and to provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

Contact possibility via the website

The website of ToughMuck Extreme Cleaning contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.

Routine erasure and blocking of personal data

The data controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage, or as far as this is granted by the European legislator or other legislators in laws or regulations to which the controller is subject.

If the storage purpose is not applicable, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data are routinely blocked or erased in accordance with legal requirements.

Rights of the data subject

Each data subject has the following rights granted by the European legislator. If you wish to exercise any of them, you may at any time contact our Data Protection Officer or another employee of the controller.

Right of confirmation — to obtain confirmation as to whether or not personal data concerning you are being processed.
Right of access — to obtain free information about your personal data stored at any time, a copy of that information, and details of the purposes of processing, the categories of data concerned, the recipients, the envisaged storage period and the source of the data.
Right to rectification — to obtain without undue delay the rectification of inaccurate personal data, and to have incomplete personal data completed.
Right to erasure (right to be forgotten) — to obtain the erasure of personal data without undue delay where the data is no longer necessary, consent is withdrawn, the data has been unlawfully processed, or erasure is required for compliance with a legal obligation.
Right of restriction of processing — to obtain restriction of processing where the accuracy of the data is contested, the processing is unlawful, the data is no longer needed by us but is required by you for legal claims, or you have objected to processing pending verification.
Right to data portability — to receive the personal data you provided to us in a structured, commonly used and machine-readable format, and to transmit it to another controller without hindrance.
Right to object — to object, on grounds relating to your particular situation, to processing based on points (e) or (f) of Article 6(1) of the GDPR, including profiling, and to object at any time to processing for direct marketing purposes.
Rights concerning automated individual decision-making — not to be subject to a decision based solely on automated processing, including profiling, except in the limited circumstances permitted by the GDPR.
Right to withdraw data protection consent — to withdraw your consent to the processing of your personal data at any time.
Right to file a complaint with a supervisory authority.

Google Analytics (with anonymisation function)

On this website, the controller has integrated the component of Google Analytics (with the anonymiser function). Google Analytics is a web analytics service — the collection, gathering and analysis of data about the behaviour of visitors to websites, used mainly for the optimisation of a website. The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.

For the web analytics through Google Analytics the controller uses the application “_gat._anonymizeIp”. By means of this application the IP address of the Internet connection of the data subject is abridged by Google and anonymised when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area.

Google Analytics places a cookie on the information technology system of the data subject, which is used to store information such as the access time, the location from which the access was made, and the frequency of visits. With each visit, such data, including the IP address of the Internet access used, will be transmitted to and stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties.

The data subject may prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used. In addition, the data subject may object to the collection of data by Google Analytics by downloading and installing the browser add-on available at https://tools.google.com/dlpage/gaoptout. Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/.

YouTube

On this website, the controller has integrated components of YouTube, an Internet video portal. The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, United States, a subsidiary of Google Inc.

With each call-up to one of the individual pages of this Internet site on which a YouTube component was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding YouTube component. During this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.

If the data subject is logged in on YouTube at the time of the call to our website, YouTube and Google will receive this information regardless of whether the person clicks on a YouTube video or not. If such a transmission is not desirable, the delivery may be prevented if the data subject logs off from their own YouTube account before a call-up to our website is made. YouTube’s data protection provisions are available at https://www.google.com/intl/en/policies/privacy/.

Facebook

On this website, the controller has integrated components of the enterprise Facebook. The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, United States. If a person lives outside of the United States or Canada, the controller is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

With each call-up to one of the individual pages of this website into which a Facebook component (Facebook plug-in) was integrated, the web browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding Facebook component. During the course of this technical procedure, Facebook is made aware of what specific sub-site of our website was visited by the data subject.

If the data subject is logged in at the same time on Facebook, this information is collected through the Facebook component and associated with the respective Facebook account of the data subject. If such a transmission of information to Facebook is not desirable for the data subject, then he or she may prevent this by logging off from their Facebook account before a call-up to our website is made. The data protection guideline published by Facebook is available at https://facebook.com/about/privacy/.

Legal basis for the processing

Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, the processing is based on Article 6(1) lit. b GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our services.

Where our company is subject to a legal obligation by which processing of personal data is required, such as for the fulfilment of tax obligations, the processing is based on Art. 6(1) lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person, in which case the processing would be based on Art. 6(1) lit. d GDPR. Finally, processing operations could be based on Article 6(1) lit. f GDPR, where processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

The legitimate interests pursued by the controller

Where the processing of personal data is based on Article 6(1) lit. f GDPR our legitimate interest is to carry out our business in favour of the well-being of all our employees and the shareholders.

Period for which the personal data will be stored

The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfilment of the contract or the initiation of a contract.

Provision of personal data as a statutory or contractual requirement

We clarify that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual provisions (e.g. information on the contractual partner). Sometimes it may be necessary to conclude a contract that the data subject provides us with personal data, which must subsequently be processed by us. The non-provision of the personal data would have the consequence that the contract with the data subject could not be concluded.

Before personal data is provided by the data subject, the data subject must contact our Data Protection Officer, who clarifies whether the provision of the personal data is required by law, by contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and the consequences of non-provision.

Existence of automated decision-making

As a responsible company, we do not use automatic decision-making or profiling.

Our privacy policy.