Privacy policy
Introduction
Graft Design and Innovation Management respects the privacy of its customers, suppliers and partners. We have therefore formulated and implemented a policy on complete transparency regarding the processing of personal data, its purpose(s) and the possibilities to exercise your legal rights in the best possible way. For employees, we have formulated a separate privacy policy, available upon employment and upon request.
Definitions
- Party responsible for processing personal data: Graft Design and Innovation Management; with registered address at 2 Gillespie Street in United Kingdom and company registration number SC527023 (the “Controller”).
Data Protection Authority: The Data Protection Authority of United Kingdom. - Data Protection laws:
— For European citizens or residents, the EU GDPR 2018; the EU e-privacy directive 2002 (soon to be replaced by the EU e-privacy regulation);
— For UK citizens or residents, the UK GDPR 2020 and the UK Data Protection Act 2018
and/or the national laws of United Kingdom.
Collection of data
Your personal data will be collected by Graft Design and Innovation Management and its data processors.
Personal data means any information relating to an identified or identifiable natural person (‘data subject’).
An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
The types of personal data we may process:
Business process
- Website
- Storage and exchange of documents
- Delivery of goods and services
- Financial and business administration
- Marketing
Type
- Identification, Location
- Identification, Financial, Educational and employment history, Copy of ID, Contracts
- Not applicable
- Identification, Financial
- Identification, Financial
- Identification
Data subject
- Customers
- Customers, Employees, Contractors, Suppliers, Partners
- Not applicable
- Customers
- Customers, Employees
- Customers
Legal Basis
- Consent
- Legitimate interest
- Legitimate interest
- Performance of a contract
- Legitimate interest
- Consent
Purposes
Graft Design and Innovation Management processes personal data for one or more of the following purposes:
- Customer, employee, contractor, partner or supplier management
- Business and financial administration
- Direct marketing
- Delivery of goods or services
- Work planning
How we collect, store or otherwise process your data:
The following business processes describe how we may collect, store or otherwise process the types of personal information set out in the table above:
- Collection of cookies, subscription to newsletter or filling out the contact form on the website(s);
- Analyse trends and profiles, for our legitimate interest to aim to enhance, modify, personalise and improve our services and communications for the benefit of our customers;
- Process and respond to support requests, enquiries and complaints received from you through use of business email;
- Provide services and products requested and/or purchased by you and to communicate with you about such services and/or products. We do this as necessary in order to carry out a contract with you and in accordance with our legitimate interest to operate a business;
- Carry out administrative activities such as invoicing and collecting payments either locally on devices or using cloud-services;
- Store and exchange personal information contained in documents through email and cloud-services;
- Marketing and customer acquisition through email or using cloud-services.
Sign-up for our latest insights.
Privacy Policy
©2023 Graft Design & Innovation Management Ltd