To be able to procure supplies necessary to conduct our business and so be able to provide our customers with expected solutions, we manage your personal data. Most such data are associated with your employment, your interest as shareholder or other interest in GTI Hoist Limited. The data concerns contact details and information needed to maintain the relation with you or your employer.
GTI Hoist is accountable (controller) for all processing we perform on your personal data. We adhere to applicable regulations for data protection and we manage personal data on the basis of such regulations as well as according to internal policies and guidelines. We assure you that we take the measures necessary to keep your personal data secure
We only collect personal data for specified, explicit and legitimate purposes. Sources of collection can vary but personal data is typically provided by you when you contact us via our websites, e-mail, social media etc., when you exercise your right as shareholder or by your employer as part of their engagement when doing business with GTI Hoist Limited.
Management and purpose
GTI Hoist process personal data for several purposes. The most common processes include purchasing and sales for the purpose of completing agreements with suppliers and customers. Related processes include marketing, aftermarket services and management of customer relations. These are necessary for the purposes of attracting potential customers as well as managing and expanding existing customer relations. Other types of processing required when conducting our business in accordance with legal obligations and good ethics include corporate management, quality management and financial audits.
We process your personal data only as long as necessary to fulfil the purpose for processing. Thereafter we will erase, pseudonymize or anonymize the personal data so it will no longer be possible to derive them to you. The length of time for which we retain the personal data is dependent on the purposes for processing including applicable legislation.
We transfer personal data cross borders (third country transfers) only if necessary to fulfil our commitment to you or your employer, to cater for the legitimate interests of GTI Hoist Limited or to comply with a legal obligation.
Any processor or third party that may process your personal data on behalf of GTI Hoist Limited is entitled to do so only according to the technical, organizational and legal requirements stated by GTI Hoist and specified in contracts with each processor, third party or any other controller.
Rights of the data subject
When you or your employer resides in the EU/EES or when your personal data is processed of a GTI Hoist Limited company within EU/EES, the General Data Protection Regulation (GDPR) is applicable for you. The regulation lays down rules relating to the protection of natural persons with regard to the processing of personal data. With this legislation comes a number of rights that you may have reason to exercise. When exercising your rights, please contact us at any of the addresses as specified below under the section “Where to turn for questions and further information”. Eventual restrictions of, or changes in, processing will apply to GTI Hoist Limited as well as for any parties processing personal data on our behalf.
Right of access
You have the right to gain information of whether we do process personal data about you and if so, it will upon your request be provided to you in a structured, commonly used format. Furthermore, it is your right to transmit those data to any third party of your choice.
Besides the personal data being processed you have the right to be informed of the purpose and legal ground for processing, any available information as to the source of the data, if possible, the period of time that we will retain the data, any recipients or categories of recipients to whom the personal data have been or will be disclosed, our safeguards for eventual third country transfers and the logic involved if automated decision-making, including profiling, is executed on your personal data.
Right to rectification
GTI Hoist Limited is responsible for the accuracy of the personal data that we process about you. Even so, if you consider any personal data that we process about you to be inaccurate, you have the right to ask for the rectification of such faulty data. After the performed rectification we will inform you of the action taken to fulfil your request.
Right to object
You have the right to object to processing when your personal data is used for marketing purposes and for the legitimate interest of GTI Hoist Limited, including when profiling is being used for these purposes. If your interests or fundamental rights and freedoms are considered to override our legitimate interests, we will end processing and inform you of the actions taken.
Right to restriction of processing
It is your right to request restriction of processing when you consider the purpose for processing to no longer be valid, when you consider that processing is unlawful, if you contest the accuracy of the personal data being processed or when objecting to processing.
When restriction is conducted upon your request, GTI Hoist Limited will inform you in the event of restriction of processing being lifted.
Right to withdraw consent
Some of the processing activities performed at GTI Hoist Limited may be based on your consent. In such case, it is your right to withdraw your consent at any time. Your withdrawal of consent will not affect the lawfulness of processing conducted prior to the withdrawal.
If you withdraw your consent, GTI will cease to process your personal data, unless we are bound to keep processing according to a legal obligation.
Right to be forgotten (erasure)
Like the right to restriction, it is your right to request erasure of your personal data when you consider the purpose for processing to no longer be valid or when you consider that processing is unlawful.
If GTI Hoist Limited need to keep process your personal data in order to comply with a legal obligation we will turn down your request and inform you about the motive.
Right to data portability
If processing of your personal data is based on consent, is carried out by automated means or is necessary for the performance of a contract to which you are part, you have the right to invoke your right to data portability. Upon your request and if feasible, GTI Hoist Limited will, in a structured, commonly used and machine-readable format, provide your personal data to a party of your choice
Where to turn for questions and further information
For any questions about this policy or your rights, please get in touch with us by e-mail at firstname.lastname@example.org or by regular mail at the address below;