1 How do we handle personal data?
We attach great importance to the protection and security of personal data. We will process your personal data in connection with this website in compliance with the relevant data protection regulations. We are most notably subject to the provisions set out within the retained EU law version of the General Data Protection Regulation ((EU) 2016/679) (UK GDPR) and the Data Protection Act 2018 (DPA 2018) insofar as we process personal data.
We would like the users of our site to feel assured and this is why we wish to disclose our personal data handling practices and to provide you with detailed information about the processing of your data and about your rights under Art. 12, 13, 14 and 21 UK GDPR. This website data privacy statement outlines which personal data are collected on visits to our website and how we manage these data and information.
2 Who is responsible for data processing and who is available for you to contact?
The party responsible for data processing, referred to as the controller in the UK GDPR and in other data protection regulations, is as follows:
MEWA UK Textile Services Limited
Unit 5 Roman Park
Roman Way
Coleshill, Birmingham, England, B46 1HG
Tel. (main office): 0121 752 58 50
Email: info@mewa.co.uk
Contact details for our company data protection officer:
MEWA UK Textile Services Limited
Data Protection Officer
Unit 5 Roman Park
Roman Way
Coleshill, Birmingham, England, B46 1HG
Email: data.protection@mewa.co.uk
3 What are personal data?
Personal data are pieces of information relating to an identified or identifiable natural person.
4 For what purposes do we process your personal data? And on what legal basis?
We process personal data for specific purposes, as explained in detail below for your information. The extent to which, and the way in which, your data are processed will essentially depend on the specific services and functions offered on our website which you use. We mainly process data for the following purposes:
· so that you can access and visit our website and we can protect our website and other systems from security risks;
· so that you can contact us (contact form/email inquiries);
· so that we can optimise our website content, making it user-friendly and tailoring it to your needs (including displaying advertisements in line with your interests here and on other websites).
Further processing of your personal data beyond the cases mentioned in this data privacy statement will only take place in circumstances where it is our express entitlement or obligation under a statutory provision or where you have explicitly consented to the data processing. We will inform you of any changes of purpose in accordance with the legal requirements.
4.1 Accessing and visiting our website
You can visit our website purely for information purposes without communicating any further personal data. In this case, the only data which will be automatically saved when you visit our website are the technical access data transmitted by your browser, i.e. the name of your Internet service provider, the site from which you are referred to our site, the date and time of your visit, and the data identifying the browser/operating system used. The web server will also be required to save your IP address which may, under certain circumstances, allow reference to your personal identity. We also use cookies in order to provide you with our services in the best possible way and to tailor our website to your needs, even if you are only looking for information (details about this and your options are summarised below in the section “Use of cookies and associated functions/technologies”). The access data will not be merged with data from other sources, nor will the data be evaluated for marketing purposes.
The aforementioned access data will be stored in so-called server log files on our web server and will be required for technical reasons in order to provide a functional website and to ensure system security. In addition to the aforementioned purposes, we use access data for the sole purpose of improving the structure of our website and tailoring it to your needs purely for statistical purposes and without tracing your personal identity.
If you visit our website in order to find out more about our range of goods and other services or to use our services, the temporary storage of access data and log files is based on Art. 6 (1) b) UK GDPR (legal basis), especially when used to take steps prior to entering into a contract. In this respect, Art. 6 (1) f) UK GDPR also serves as the legal basis for the temporary storage of access data and log files. Our legitimate interest in this regard is to provide you with a technically functioning and user-friendly website and to guarantee the security of our systems.
The access data collected in the course of using our website are only stored for the period of time for which these data are required to achieve the aforementioned purposes. Your IP address is stored on our web server for a maximum of 35 days.
4.2 Contact form / contact requests
We collect and store personal data which you enter in the contact form provided on our website and send to us or when you contact us in any other way (e.g. by email). It is up to you to decide whether to provide us with information when making contact requests and, if so, which information. If you contact us by email, we will store the data you provide. If you use the contact form on our website, we collect the data you enter in the form (e.g. forename, surname, postal address, your individual message). The data marked with an asterisk (*) are mandatory and we need this information to answer your inquiry. The other voluntary details enable us to classify and process your request to better effect. When you use the contact form on our website, the following technical access data will also be stored at the time of sending: date and time at which you sent the request and your IP address.
If you contact us within the context of an existing contractual relationship or if you contact us in advance for information about our range of goods or other services, the data and information you provide will be processed for the purpose of processing and answering your inquiry or request in accordance with Art. 6 (1) b) UK GDPR (legal basis). The technical access data collected during the sending process will be stored for the purpose of providing contact options and in order to guarantee system security on the basis of Art. 6 (1) f) UK GDPR (legal basis), and this storage serves to safeguard legitimate interests.
We store the personal data collected when you contact us in order to process your request and for the duration of this processing. The technical access data stored in this context will only be kept for the period of time for which these data are required for technical reasons, especially for the functional provision of the contact options and in order to ensure system security. Your IP address is stored on our web server for a maximum of 35 days.
4.3 Use of cookies and associated functions / technologies
We use so-called cookies in some sections of our website in order to make it attractive to visitors and to enable the use of certain functions. Cookies are files which are stored on your hard drive or in your Internet browser cache when you visit our website. We also refer to web beacons and other comparable storage technologies for tracking user activity as “cookies”. Web beacons are mostly transparent graphic images, usually no larger than 1 x 1 pixel, which are integrated into the website and will allow the detection of cookies on your devices.
One way in which we use cookies is to store session-related information within the website. These cookies expire at the end of the session/browser session (so-called transient cookies) and are not stored permanently. Other cookies remain on your computer after the browser session and enable us to recognise your computer again on your next visit (so-called persistent/permanent cookies). Persistent cookies are automatically deleted after a specified period of time which may vary depending on the type of cookie.
Cookies can be divided into the following main categories / types:
· Essential: Cookies required to carry out specific website functions.
· Analytics: Cookies used to analyse data relating to visitors’ location, interests and similar factors, in order to obtain information about visitors to our website and the content they access.
· Marketing: Cookies used to measure the effectiveness of, and to personalise, adverts and on-site campaigns.
You can, of course, also visit our website without using cookies. You can disable the use of cookies on your computer by changing the browser settings for cookies. The procedure for deactivating cookies is routinely available through the “Help” function in your Internet browser. Please note, however, that these settings may affect the full availability and functionality of our website. For more detailed information on cookie settings and deactivation options, please see the explanatory notes below on the individual cookies specifically used when visiting our website and on associated functions/technologies.
We use the Consent Manager from the provider Usercentrics GmbH, Sendlinger Strasse 7, 80331 Munich (“Usercentrics") on our website. This is a plugin that can be used to obtain consent for the use of cookies and/or similar technologies. Usercentrics collects the following data: Date and time of visit or consent/refusal, device information. The consent data will be stored on servers in the European Union for one year. Terms and conditions for order processing have been agreed with Usercentrics. Further information on Usercentrics can be found here: https://usercentrics.com/privacy-policy
You can use the Consent Manager to change your chosen settings and revoke your consent to the use of non-essential cookies and technologies at any time. The Consent Manager can be opened via the following link:
Change cookie settings / withdraw consent
Some of the cookies we use on our website come from third parties who help us to analyse the impact of our website content and the interests of our visitors, to measure the capacity and performance of our website, to place targeted advertising and other content on our website or on other websites, or to communicate with you. We use first-party cookies (only visible from the domain you are visiting) and third-party cookies (visible across domains and routinely set by third parties) on our website.
You can view the services and their associated cookies in detail via the Consent Manager. Open the Consent Manager. Under the ‘Categories’ tab, you can expand each of the categories – ‘Essential’, ‘Analytics’ and ‘Marketing’ – and view the individual services. Click on the information icon next to the consent button for each service. Scroll down to the ‘Stored information’ row. Click on this to view an overview of the individual cookies for a service. Alternatively, you can view the complete overview of services in the Consent Manager under the ‘Services’ tab. Expand a service to get more detailed information about it. Scroll down to the ‘Stored information’ line. Click on this to view an overview of the individual cookies for a service.
The storage of information on your terminal equipment (e.g. PC, smartphone) and, if applicable, access to information stored on your terminal equipment is based on the national implementing regulation for Art. 5 (3) sentence 2 of the ePrivacy Directive, to the extent that the processing of such information is absolutely necessary to enable the use of our website that has been expressly requested by you. Any further storage of information on your terminal device is based on your consent, in accordance with the national implementing regulation for Art. 5 (3) sentence 1 of the ePrivacy Directive. The processing of data and the legal bases for the processing of data referred to in this data privacy statement apply solely to the further processing of personal data to the extent that the data were obtained through the storage of and/or access to information on your terminal equipment.
The further processing of personal data obtained via cookies, in the case of necessary cookies, is based on Art. 6 (1) b) UK GDPR (legal basis), for the purpose of providing information, and Art. 6 (1) c) UK GDPR (legal basis), for the purpose of complying with our legal obligations, in particular in order to provide you with a simple and documented option for granting or not granting your consent to cookies. The processing of data in respect of all other cookies is based on your consent pursuant to Art. 6 (1) a) UK GDPR (legal basis). Another clause which may be taken as the legal basis is Art. 6 (1) f) UK GDPR, i.e. the protection of our legitimate interests. Our legitimate interests as referred to in Art. 6 (1) f) UK GDPR most notably constitute the ability to provide you with a top-specification, user-friendly website geared to your needs and to guarantee the security of our systems.
4.4 Google Ads Conversion Tracking
We place adverts for our company’s services via the ‘Google Ads’ service. In this context, we use the ‘Website Conversion Tracking’ feature of the ‘Google Ads’ service. This is provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The data processor for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google uses cookies for this purpose, provided you have given your consent. This records whether you carry out a so-called “conversion” within a period of up to 90 days following an interaction with a Mewa Google advert on our website. A conversion could, for example, be you contacting us via our website or ordering information material. This simply tells us which of our adverts lead to conversions. This enables us to optimise our future Google adverts. We do not ourselves receive any identifying information about you as a user in this context. We use the basic functions of website conversion tracking and have configured privacy-friendly settings. Provided you have given your consent, we also use the remarketing functions provided by Google. This enables users who have visited our website or interacted with our adverts to be shown adverts for our services tailored to their interests on other websites within the Google advertising network. For this purpose, Google may process information about your interactions with our website and our adverts and link this to other information that Google processes about you. The information collected by Google via cookies regarding your conversions on our website and your IP address may be further processed by Google – possibly in aggregated form and linked to other data – and transferred to a Google server in the USA, where it may be stored. You can find information on data retention and deletion by Google here: https://business.safety.google/adsretention/. Further information is available in Google’s privacy policy: https://policies.google.com/privacy and https://policies.google.com/technologies/ads.
4.5 Social Media (SoMe) Links
Our website has integrated links to social media (SoMe) services, such as Facebook, X (Twitter), Instagram, YouTube, Xing and LinkedIn. After clicking on the various links or on the integrated SoMe icon you will be redirected to the site of the respective provider. Please note that we do not process your data in this context and that we are not responsible for the content of websites to which we publish links. If you follow a link to SoMe services, please refer to the policy on data usage and the data privacy statement issued by the respective provider.
4.6 Hotjar
We use the tool “Hotjar”, provided by Hotjar Ltd., Dragonara Business Centre, Dragonara Road, Paceville St Julian's STJ 3141, Malta (“Hotjar”) to optimise our website, the services associated with it and your experience. Hotjar is a technology service that helps us to better understand our users’ experience (e.g. how much time they spend on which pages, which links they click on, what users like and don’t like, etc.), which enables us to develop and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data about our users’ behaviour and their devices (list of cookies under (3) Use of cookies and associated functions/technologies). This includes the IP address of a device (processed during your session and saved in an anonymised form), the screen size of your device, the type of device (unique device identifiers), browser information, geographical location (only country) and the preferred language for displaying our website. Hotjar saves this information in a pseudonymised user profile on our behalf. More information can be found in the "About Hotjar" section on the Hotjar support page.
4.7 Friendly Captcha
We use the bot protection service of Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany (‘Friendly Captcha’) on this website. The verification of whether the data entry on this website (e.g. in a contact form) is carried out by a human or by an automated programme is based on our legitimate interest in protecting our website from abusive automated spying and spam (Art. 6 (1) f) UK GDPR). For this purpose, Friendly Captcha analyses the behaviour of the website visitor based on various characteristics. For the analysis, Friendly Captcha evaluates various information (e.g. anonymised IP address, referrer, visit time, etc.). The data is stored on Friendly Captcha servers within the European Union for a period of 30 days and then deleted. Further information on this can be found at https://friendlycaptcha.com/legal/privacy-end-users/.
4.8 Google Analytics 4
We use Google Analytics 4, a web analysis service from Google LLC, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). The data controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google uses cookies to collect information about your use of our website, provided you have given your consent. You can revoke your consent at any time (see above under "Use of cookies and associated functions/technologies"). The data collected includes the time spent on our website, demographic characteristics such as language and country, the browser used and your IP address, which is processed anonymously. This information helps us to improve the user-friendliness of our website. We do not receive any identifying information about you as a user in this context. The collected information and anonymised data may be further processed by Google and transferred to a Google server in the USA and stored there. Terms and conditions for order processing have been concluded with Google. Further information can be found in Google's privacy policy: https://policies.google.com/privacy
4.9 Google Tag Manager
We use Google Tag Manager, a web analysis service of Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). The data controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Tag Manager allows us to integrate and manage website tags and some of the third-party services specified on the cookie list on our website. The service itself does not set any cookies and does not store any personal data. It triggers other tags, which in turn may collect data. Google Tag Manager has no access to this data. The information and data collected may be processed further by Google, transferred to a Google server in the USA and stored there. Terms and conditions for order processing have been concluded with Google. Use of Google Tag Manager is based on your consent in accordance with Art. 6(1)(a) GDPR, provided that you have given that consent via our content banner. You may withdraw your consent at any time with effect for the future. Further information can be found in Google's privacy policy: https://policies.google.com/privacy.
4.10 Adform
We use tracking and advertising technologies provided by Adform A/S (Rosenborggade 15, 2nd Floor, 1113 Copenhagen, Denmark; “Adform”). We use tracking to display personalised adverts (including on other websites) (“retargeting”), to measure reach and to optimise campaigns. Adform processes data such as cookie IDs, browser and device information, interactions with adverts and our website, your IP address, location data (region/country), referrer URLs and timestamps. The data is used to create pseudonymous user profiles and to measure the performance of advertising campaigns. It is not possible to identify individual persons. No contact details (e.g. email address or telephone number) are transmitted to Adform. The ‘ID Fusion’ function, which would allow Adform to link various online identifiers to form a cross-device identity, is not activated. Adform cookies expire 60 days after the last interaction with our website. All cookie-based information is stored by Adform for a maximum of 13 months and is subsequently deleted. The retargeting audiences we create have a purpose-based retention period of 90 days per user; if there is no further interaction after this period has elapsed, users are automatically removed from the audience. Adform transfers data to third countries (see section 6). The use of Adform’s technologies is based on your consent in accordance with Article 6(1)(a) of the GDPR, provided you have given this consent via our Consent Manager. You may withdraw your consent at any time with future effect via our Consent Manager or directly with Adform via https://site.adform.com/privacy-center/platform-privacy/opt-out/. Adform generally acts as a data processor on the instructions of Mewa, and data processing terms have been agreed. However, in particular with regard to the collection of data and/or access to data via Adform tags – including for the creation and optimisation of interest-based adverts, as well as the creation of personalised advertising profiles and the selection of personalised adverts – Adform and we act as joint controllers. Terms have been agreed with Adform regarding processing under joint responsibility, which can be accessed here: https://site.adform.com/terms-and-conditions/adform-privacy-compliance-agreement-11/. If you have any questions or wish to exercise your data subject rights in relation to data collected via this website, we are your first point of contact. Adform also uses the data for its own purposes, including to improve its own services, as well as for fraud prevention and security purposes. Further information can be found in Adform’s privacy policy: https://site.adform.com/privacy-center/platform-privacy/product-and-services-privacy-policy/.
4.11 LinkedIn Insight Tag
We use the LinkedIn Insight Tag and the LinkedIn Conversions API provided by LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; “LinkedIn”). This tag enables conversion tracking (i.e. measuring the success of an advertising campaign), website analytics and the creation of target audiences for adverts, including on other websites (“retargeting”). To this end, LinkedIn processes data such as the URL, referrer URL, IP address (truncated or hashed), device and browser data, timestamps, interactions on the website and the LinkedIn member ID for users who are logged in to LinkedIn. No contact details (e.g. email address or telephone number) are transmitted from our website to LinkedIn. The “Enhanced Matching” feature is not enabled. LinkedIn removes information that directly identifies an individual within 7 days and deletes any remaining pseudonymised data within 180 days. The Matched Audiences created for us for retargeting use a purpose-limited membership period of 90 days per user; once this period has expired without further interaction, users are automatically removed from the target group. The information collected and the pseudonymised data are transferred to servers in the USA and stored there. Data processing agreements have been concluded with LinkedIn. Furthermore, as part of the Insight Tag, LinkedIn also processes data for its own purposes under its own responsibility, in particular to improve its services and for reporting. The use of the LinkedIn Insight Tag is based on your consent in accordance with Article 6(1)(a) of the GDPR, provided you have given this consent via our Consent Manager. You may withdraw your consent at any time with future effect via our Consent Manager or directly with LinkedIn via https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Further information is available in LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.
4.12 Meta (Facebook & Instagram) – Meta Pixel / Meta Business Tools
We use marketing tools, in particular the Meta Pixel and the Meta Conversions API provided by Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland; ‘Meta’). This enables us to analyse the behaviour of website visitors, measure conversions (i.e. the success of an advertising campaign) and display targeted advertising on Facebook and Instagram. In doing so, data such as page views and interactions (events), browser and device information, IP address, time of visit and, where applicable, Facebook cookie ID and Meta member ID for logged-in Meta users (provided you have given your consent) is processed. For logged-in Meta users, it is possible to link this data to their Meta account. No contact details (e.g. email address or telephone number) are transmitted to Meta; in particular, the ‘Custom Audiences with Customer List’ function is not used. The storage of event data on the platform is carried out by Meta under its own responsibility in accordance with the Meta Data Policy. We have set the configurable event data retention period to 90 days for this specific purpose. The Website Custom Audiences we create for retargeting have a membership duration of 90 days per user; once this period has elapsed without further interaction, users are automatically removed from the target group. The information and data collected may be transferred by Meta to servers in the USA. We have entered into data processing agreements with Meta regarding the creation of reports and analyses in aggregated form. We are jointly responsible with Meta for the processing of data for the creation and optimisation of interest-based adverts. Regarding this joint responsibility, we have concluded an agreement with Meta, which is available here: https://www.facebook.com/legal/controller_addendum. Processing carried out by Meta following the transfer of data is not covered by this joint responsibility; it remains the sole responsibility of Meta. Meta uses the data collected, amongst other things, for its own purposes relating to the security and system integrity of the Meta platforms. We have no influence over this. The use of marketing tools is based on your consent in accordance with Article 6(1)(a) of the GDPR, provided you have given this consent via our Consent Manager. You may withdraw your consent at any time with future effect via our Consent Manager or via Meta’s advertising settings https://www.facebook.com/settings?tab=ads. Further information is available in Meta’s privacy policy: https://www.facebook.com/privacy/policy/.
4.13 The Trade Desk
We use tracking technologies from The Trade Desk, Inc. (42 N. Chestnut Street, Ventura, CA 93001, USA) on our website. The data processor for users in the EU/EEA, the UK and Switzerland is The UK Trade Desk Ltd. (10th Floor, 1 Bartholomew Close, London EC1A 7BL, United Kingdom; “TTD”). We use this tracking to serve and optimise programmatic online advertising. This includes measuring and analysing campaign performance (conversion tracking), serving personalised adverts in display, video, audio and CTV environments, creating pseudonymous audiences (prospecting, retargeting) and measuring cross-channel reach. The data collected includes, amongst other things, page views, device and browser information, interaction data, IP addresses and pseudonymous IDs. TTD processes the data pseudonymously. No ID-based tracking takes place. No contact details (e.g. email address or telephone number) are collected, hashed or transmitted to TTD. The UID2 and EUID identity solutions are not used. Nor do we directly identify individual persons. TTD cookies are valid for up to 13 months and are stored for this period. According to TTD’s own information, it stores the pseudonymous data collected via the platform for up to 18 months and subsequently in anonymised or aggregated form. The retargeting audiences we create have a duration of 90 days per user; once this period has elapsed without further interaction, users are automatically removed from the audience. The information and data collected may be transferred by TTD to servers in the USA and to other third countries. Data processing agreements have been concluded with TTD. The use of TTD tracking is based on your consent in accordance with Article 6(1)(a) of the GDPR, provided you have given this consent via our Consent Manager. You may withdraw your consent at any time with future effect via our Consent Manager or via the TTD opt-out page https://www.adsrvr.org/. Further information is available in TTD’s privacy policy: https://www.thetradedesk.com/legal/privacy.
4.14 Microsoft Ads Conversion Tracking
We place adverts for our company’s services via the ‘Microsoft Ads’ service. In this context, we use ‘Microsoft Ads Conversion Tracking’. This service is provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052–6399, USA. For users in the EU/EEA, Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (‘Microsoft’) is responsible. Microsoft uses cookies and similar technologies for this purpose. Microsoft Ads Conversion Tracking is used to record whether you carry out a so-called ‘conversion’ within a period of up to 90 days after interacting with a Microsoft Ads advert on our website. A conversion may, for example, consist of you contacting us via our website or requesting information material. This enables us to determine solely which of our Microsoft Ads adverts lead to conversions. On this basis, we can measure the effectiveness of our advertising campaigns, optimise our future Microsoft adverts and, provided you have consented to this, use features to personalise advertising. The data collected includes, amongst other things, browser language, adverts clicked on, digital signature, GUID (generated by the UET tag) and IP address. We do not receive any personally identifiable information about you as a user. We use the basic functions of Microsoft Ads conversion tracking and have applied privacy-friendly settings. Provided you have consented to this, we also use the remarketing functions provided by Microsoft. This enables users who have visited our website or interacted with our advertisements to be shown advertisements for our services, tailored to their interests, on websites and services within the Microsoft advertising network. For this purpose, Microsoft may process information about your interactions with our website and our adverts and link this to other information that Microsoft processes about you. The information collected by Microsoft cookies regarding conversions on our website, as well as your IP address, may be processed by Microsoft, aggregated where applicable, linked to other data, and transferred to and stored on Microsoft’s servers in the USA. Data processing agreements have been concluded with Microsoft. The use of Microsoft Ads Conversion Tracking is based on your consent in accordance with Article 6(1)(a) of the GDPR, provided you have given this consent via our Consent Manager. You may withdraw your consent at any time with future effect via our Consent Manager. Further information on data processing, retention periods and data protection at Microsoft is available at https://privacy.microsoft.com/de-de/privacystatement.
5 How do we protect your data?
We take precautions to ensure the security of your personal data and we have appropriate technical and organisational measures in place to protect our website and other systems. Your data are most notably protected against loss, destruction, falsification, manipulation, alteration by unauthorised persons, unauthorised access and unauthorised disclosure or distribution. Any data which you provide via our website will be transmitted over the Internet in encrypted form using SSL technology.
6 Who receives your data and are they sent to a third country or to an international organisation?
The only employees who will be privy to your personal data in the first instance are our employees who are engaged in technical, commercial or editorial duties. Your data may also be forwarded to employees at other companies in the Mewa Group if they need them for these and other relevant purposes (e.g. to answer your inquiry). If you are a customer of another national company, for example, an inquiry through our contact form would also be forwarded to this national company so that it can be duly processed and answered.
We also use or instruct external service providers to perform the data processing operations outlined above. If service providers receive your personal data under commissioned data processing arrangements, they are strictly bound by our instructions when handling your personal data. The categories of external recipients are listed below:
· IT service providers, e.g. as part of their administration and hosting of our website or individual services/functions as well as for website analysis/measurement;
· logistics service providers, where applicable, in order to be able to send you ordered goods or information brochures;
· payment service providers and banks for the processing of payments;
· debt collection agencies and legal advisers for the assertion of our claims.
If you have consented to the use of cookies by Google, LinkedIn, Meta, The Trade Desk (TTD) and/or Microsoft, your personal data may be transferred to the USA. Meta’s US subsidiary is certified under the EU–US Data Privacy Framework and the Swiss–US Data Privacy Framework. The US subsidiaries of the other providers are certified under the EU-US Data Privacy Framework, the UK Extension thereto and the Swiss-US Data Privacy Framework, on which the data transfers are based. The aforementioned providers, as well as the provider Adform, may also engage third parties, including sub-processors in countries outside the EEA. Where adequacy decisions for data transfers do not exist or are not applicable, the respective data transfer is based on standard contractual clauses issued by the European Commission to ensure a comparable level of data protection, and concluded with the service provider or, through the service provider, with third parties.
We do not otherwise transfer your personal data to countries outside the EU or the EEA or to international organisations within the meaning of Art. 4 no. 26 UK GDPR.
7 What rights do you have as a data subject?
Data subjects may assert the following legal rights against us or against our data protection officer at any time in writing or in electronic format, using the contact addresses provided (see above “Who is responsible for data processing and who is available for you to contact?”):
· the right to revoke any declarations of consent which may have been issued under data protection law and to do so at any time with effect for the future (Art. 7 (3) UK GDPR),
· Right of access to information (Art. 15 UK GDPR),
· Right to rectification (Art. 16 UK GDPR),
· Right to erasure (Art. 17 UK GDPR; if data must be stored by Mewa for legal reasons, it will be blocked in accordance with data protection regulations),
· Right to restriction of processing (Art. 18 UK GDPR),
· Right to data portability (Art. 20 UK GDPR),
· Right to object (Art. 21 UK GDPR; for data processing based on our legitimate interest),
· Right to lodge a complaint with a supervisory authority (Art. 77 UK GDPR).
8 Do you have a duty to provide data?
In order to make our website available to you and to enable you to use the relevant services/functions (e.g. contact form, online purchase orders, etc.), we need you to provide the personal data required for these purposes. Without these data, it will not be possible to access our website content or to use the relevant services/functions.
9 Are your data used in the context of automated decision-making/profiling?
You have the fundamental right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or significantly affects you in a similar manner. It is important to note that these decisions may not be routinely based on special categories of personal data pursuant to Art. 9 (1) UK GDPR. We would like to point out that we do not use any such decision-making processes in the context of our website and the associated data processing operations.
10 Can changes be made to this data privacy statement?
Further development of the Internet and of our website may also affect our data privacy statement. We reserve the right to revise this data privacy statement from time to time in the future in order to ensure that it complies with the current legal requirements or to reflect additions or changes to our website. The version of this data privacy statement which is applicable at the time of your visit can be accessed on each page under the link “Data Privacy Statement”.
11 How do we handle customer data in other respects?
In addition to this website-related data privacy statement, we also refer to our general information on “Managing Personal Data” which outlines the policy governing the processing of personal customer data in other respects and is also available in digital form under the following link: please click here.
Last revised: September 2026