PRIVACY NOTICE

1. INTRODUCTION

We, Gardin, take the protection of your personal data very seriously and strictly adhere to the rules laid out by data protection laws and General Data Personal Regulation (GDPR).

This privacy notice aims to give you information on how Gardin collects and processes your personal data through your interaction with our websites under the domains of https://www.gardin.co.uk, https://www.gardinagritech.com or https://www.gardin.ag or by entering into a relationship with us, for the delivery of our services and to comply with our legal requirements.

2. WHO YOU ARE

The types of personal data we process, our purpose and the lawful basis for processing as well as how we make use of the data depends upon the relationship you have with us.
In the sections that follow we have outlined the type of personal data we collect and how we collect it, the purposes for which we process personal data and our lawful bases for our different relationships. Please select the relevant section for you from the list below, based on the relationship you have with us:

• A. Website Visitors
• B. Marketing Recipients (B2B Customers and Their Employees)
• C. B2B Customers and Their Employees
• D. Suppliers or Staff/Representative of Suppliers
• E. Recruitment Candidates

A) WEBSITE VISITORS

2. LAWFUL BASIS OF PROCESSING PERSONAL INFORMATION

• For operational purposes such as operating our website and ensuring it is presented in the most effective manner for you and for your computer or device
• Where you have consented to be contacted for such purposes, for marketing-related purposes

1. WHY WE COLLECT YOUR PERSONAL INFORMATION

• For notifying you about the changes to our service
• For the purposes of creating and maintaining our databases, back-up copies of our databases and our business records generally
• The data subject (you) has given consent to the processing activity taking place.
• If the processing is necessary for the performance of a contract.
• If the processing in necessary for the purpose of the legitimate interest pursued by us.

3. WHAT INFORMATION DO WE COLLECT AND WHERE FROM?

We collect personal information from you when you interact with our websites under the domains gardin.co.uk, gardinagritech.com or gardin.ag through utilisation of cookies and tracking technologies or when you enquire about any of our services and/or request a copy of any marketing materials (i.e. whitepapers or other technical documentation). The categories of personal information that we may collect, store and use about you include:

• Information about your activity on our site including Information that you provide by filling in forms on our website, this includes information provided at the time of registering to use our site, subscribing to receive one of our white papers or requesting further services.
• Your details for sending out requested technical or marketing material via electronic mail or post.
• Records of your correspondence with us.
• System information related to your browsing session(s) on our website, such as browser type & version, operating system.

B) MARKETING RECIPIENTS (B2B CUSTOMERS AND THEIR EMPLOYEES)

1. WHY WE COLLECT YOUR PERSONAL INFORMATION

• To communicate with you about possible future collaborations and business opportunities
• Where you have consented to be contacted for such purposes, for the purposes of creating, targeting and sending direct marketing communications by email, SMS, post and/or fax and making contact by telephone for marketing-related purposes and lead generation

3. WHAT INFORMATION DO WE COLLECT AND WHERE FROM?

We collect your personal data when you sign up to our programs or events, through publicly available sources or referrals. We may collect and process the following information about you:

• Identification information such as name and surname
• Contact information such as email, telephone number, location
• Information available on your publicly available social media profiles, including your job title and company name

C) B2B CUSTOMERS AND THEIR EMPLOYEES

1. WHY WE COLLECT YOUR PERSONAL INFORMATION

• For the purpose of looking for new prospects such as becoming partners in the future
• For the purpose of managing sales processes and signing of contracts
• For the purpose of managing our relationships and your accounts, communicating with you (excluding communicating for the purposes of direct marketing)
• For processing of invoices and purchase orders
• For arranging your sign-up to the Gardin Platform by creating your user account

2. LAWFUL BASIS OF PROCESSING PERSONAL INFORMATION

We only collect and use personal information about you when the law allows us to. Most commonly, we use it where:

• If the processing is necessary for compliance with a legal obligation to which the controller is subject.
• If the processing is necessary for the performance of a contract.
• If the processing is necessary for the purpose of the legitimate interest pursued by us.

3. WHAT INFORMATION DO WE COLLECT AND WHERE FROM?

We collect your personal data when you enquire through our website, and throughout our relationship with you. We may collect and process the following information about you:

• Identification information such as name and surname
• Contact information such as email, telephone number
• Job title and company name and company address
• Bank details for expenses
• Your signature as apparent on the contract
• Information regarding your usage of our website and commercial product(s) that may be attributable to your unique user account for security auditing and/or continuous improvement of our services.

D) OUR SUPPLIERS AND THEIR EMPLOYEES

1. WHY WE COLLECT YOUR PERSONAL INFORMATION

• For issuing and tracking invoices and where we need to perform the contract we have entered with you such as by making payments.
• For the purpose of managing our relationships, communicating with you (excluding communicating for the purposes of direct marketing)

2. LAWFUL BASIS OF PROCESSING PERSONAL INFORMATION

We only collect and use personal information about you when the law allows us to. Most commonly, we use it where:

• Identification information such as name and surname
• Contact information such as email, telephone number
• If the processing is necessary for compliance with a legal obligation to which the controller is subject.
• If the processing is necessary for the performance of a contract.

E) OUR EMPLOYEE CANDIDATES (RECRUITMENT)

1. WHY WE COLLECT YOUR PERSONAL INFORMATION

• For the purpose of managing our relationships, communicating with you (excluding communicating for the purposes of direct marketing) by email, SMS, post, fax and/or telephone, providing support services and complaint handling.
• For the purpose of carrying out our recruitment process and determining eligibility for the advertised role.

2. LAWFUL BASIS OF PROCESSING PERSONAL INFORMATION

We only collect and use personal information about you when the law allows us to. Most commonly, we use it where:

• If the processing is necessary for the performance of a contract.
• If the processing is necessary for compliance with a legal obligation to which the controller is subject.

3. WHAT INFORMATION DO WE COLLECT AND WHERE FROM?

We collect your personal data through your application and through using recruitment agencies. We may collect and process the following information about you:

• Identification information such as name and surname including any other listed on the CVs such as nationality
• Information available on CV or cover letters
• Contact information such as email addresses, postal address & telephone numbers
• Education history such as establishments attended and qualifications.

5. SECURITY OF PERSONAL INFORMATION

Gardin takes the responsibility for protecting your privacy very seriously and we will ensure your data is secured in accordance with our obligations under the Data Protection laws. We have in place technical and organisational measures to ensure personal information is secured and to prevent your personal data from being accessed in an unauthorised way, altered or disclosed. We use computer safeguards such as firewalls and data encryption, we enforce access controls to our files, and authorise access to personal information only for those employees who require it to fulfil their job responsibilities.

6. YOUR INDIVIDUAL RIGHTS

In this Section 6, we have listed the rights that you have under data protection law.

Your principal rights under data protection law are:

• the right to access-you can ask for copies of your personal data; you or any third party acting on your behalf with your authority may request a copy of the personal data we hold about you without charge.
• the right to rectification-you can ask us to rectify inaccurate personal data and to complete incomplete personal data.
• the right to erasure-you can ask us to erase your personal data.
• the right to restrict processing-you can ask us to restrict the processing of your personal data.
• the right to object to processing-you can object to the processing of your personal data if processing relies on legitimate interests.
• the right to data portability-you can ask that we transfer your personal data to another organisation or to you.
• the right to withdraw consent-to the extent that the legal basis of our processing of your personal data is consent, you can withdraw that consent.

7. DATA TRANSFERS/THIRD PARTIES

7.1 TRANSFERS TO THIRD PARTIES

Gardin may disclose your personal data to some third parties insofar as reasonably necessary for the purposes, and on the legal bases, set out in this policy. Third parties that we use are:

• Business partners, suppliers, contractors for the performance of any contract we enter into with them or you
• Third parties that support us to provide products and services
• Marketing and customer relationship management services providers
• Banks for the purposes of making payments
• Professional advisors e.g. lawyers, auditors

7.2 TRANSFERS OUTSIDE OF THE UK

We may share personal information to third parties outside of the United Kingdom. Any personal information transferred will only be processed on our instruction and we ensure that information security at the highest standard would be used to protect any personal information as required by the Data Protection laws.

8. COOKIES

Our website uses cookies. Please see our Cookie Policy here for full details of the cookies used.

9. RIGHT TO COMPLAINT

We take any complaints about our collection and use of personal information very seriously. If you think that our collection or use of personal information is unfair, misleading or inappropriate, or have any other concern about our data processing, please raise this with us in the first instance. To make a complaint, please contact us via email at gdpr@gardin.co.uk.

11. REVIEW OF THIS POLICY

We keep this Privacy Notice under regular review.

Your trust is important to us. If you have any questions that could not be answered by this privacy policy or if you wish to receive more in-depth information about any topic within it, please contact us at gdpr@gardin.co.uk or call us.