Everfield UK Limited 
Website Privacy Notice 

 

This Website Privacy Notice ("Privacy Notice") explains the processing of your personal data by Everfield UK Limited (“we”) as the controller when using our website and our social media pages and your rights under GDPR. 

1. Purposes of processing  
1.1 Providing our website 

If you access our website some personal data is temporarily stored. In particular, the following data is collected when you visit our website: 

• IP address and host name of your computer 
• Date and time of access 
• Browser meta data, incl. your browser type and operating system, whether the access was successful, and the amount of data transferred, page visited on our website, third-party website from which you clicked on a link to our website. 

The temporary storage of this personal data is necessary to deliver the website to you. The legal basis for this processing of your personal data is our legitimate interest in corporate communications (Art. 6 (1) f) GDPR). 

1.2 Log data 

Further storage of this data takes place in log files, in order to ensure the functionality of our website and, if necessary, to check and enforce our rights, our terms of use and the rights of third parties. The log files are stored as long as necessary for the respective purpose, usually no longer than 14 days. The legal basis is our legitimate interest in providing the website securely (Art. 6 (1) f) GDPR). 

1.3 Registration, communication and contact forms 

We process personal data that you provide in the context of using certain content and functions on our website. For example, if you use the contact form, we use this personal data to respond to your queries, and/or provide the services and/or information that you have requested. The same applies to communication by other means, such as e-mail, messenger or telephone. The legal basis for this data processing is our legitimate interest in corporate communications (Art. 6 (1) f) GDPR).  

1.4 Communication with B2B contact persons 

We process contact details of the respective contact persons of our B2B business partners (e.g., address, telephone number, mobile phone number, e-mail address) and other personal data of the respective contact persons, insofar as the respective business partner makes these available to us in the context of the business relationship. 

The processing of the personal data of B2B contact persons serves the following purposes:  

• Performance of the contract: Contract negotiations, execution and processing of the contractual relationship between us and our business partners, e.g., contract and payment processing, customer, supplier and invoice management and customer backup. The legal basis for this data processing is the performance of a contract (Art. 6 (1) b) GDPR). 
• B2B Marketing: We may use e-mail addresses of contact persons of your company that we have received in connection with the sale of our goods and services to your company in order to inform the respective contact persons of your company about similar goods or services of our company. The legal basis for such B2B marketing is our legitimate interest in direct marketing (Art. 6 (1) f) GDPR). The respective contact persons of your company have the right to object to the sending of such advertising e-mails at any time in the future. If the respective contact persons consent to receiving such marketing, the legal basis is their consent (Art. 6 (1) a) GDPR). 
• Customer relationship management: The legal basis is our legitimate interest in maintaining customer relationships (Art. 6 (1) f) GDPR.) 
• Fulfilment of legal obligations: The legal basis for legally required processing of personal data is Art. 6 (1) c) GDPR. 

1.5 Google Analytics 

We use Google Analytics with your consent (Art. 6 (1) a GDPR) to better understand your interests and to continuously improve our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics allows us to analyze traffic and usage patterns of individual users (without further identifying them) or groups (which offers are used how often, how often do users return, how long do they stay, from which websites do users come, from which regions do they come, etc.). The cookies used for this purpose expire after 24 months at most. 

1.6 Google Tag Manager 

Google Tag Manager is a tag management system provided by Google that we use on our websites. Google Tag Manager allows us to add code snippets, pixels or similar to our web pages. Google processes your personal data as an independent controller. You can find more information in Google's Privacy Policy. The legal basis is our legitimate interest in providing the website effectively (Art. 6 (1) f) GDPR).] 

1.7 HubSpot 

We use HubSpot as our CMS platform as well as CRM. All of the data you provide us with when filling in the contact form will be stored at HubSpot CRM. You can find more information regarding your data protection in HubSpot privacy policy available under https://legal.hubspot.com/. The legal basis is our legitimate interest in providing the website effectively (Art. 6 (1) f) GDPR). 

1.8 Social media 

Our social media partners provide us with statistics and analytics on the use of our social media offerings. These statistics do not contain any names or other information about individual users. With the help of these services, we can analyze and improve our social media activities. The legal basis is our legitimate interest in using these statistics (Art. 6 (1) f) GDPR). 

We do not use any social media share plugins by which information is automatically transferred to the provider of social media services when you visit our website. Any forwarding to social media providers such as LinkedIn etc. takes place exclusively via a link. 

1.9 LinkedIn 

We use LinkedIn to communicate with you and to advertise our work. The legal basis is our legitimate interest in corporate communications (Art. 6 (1) f) GDPR). LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland is the controller under GDPR and therefore responsible for processing of your personal data related to your usage of the service. For more information see LinkedIn's Privacy Policy. 

LinkedIn provides us with statistics and analytics on the use of our social media offerings. These statistics do not contain any names or other identifying information about individual users. With the help of these statistics, we can analyze and improve our social media activities. The legal basis for this processing is our legitimate interest in using these statistics (Art. 6 (1) f) GDPR). 

When processing personal data on our LinkedIn page, we and LinkedIn act as so called "Joint Controllers" pursuant to Art. 26 GDPR. We have therefore concluded a separate Joint Controller Addendum delineating LinkedIn's and our responsibilities. For any further processing of your data, LinkedIn is the sole controller. If you wish to exercise your rights to information, deletion, etc., LinkedIn is responsible for the fulfillment of your rights as part of our Joint Controllership. 

1.10 Other purposes for which we process your personal data 

Furthermore, we process your personal data:  

• To fulfil contracts and in the context of existing or new business relationships. We will retain this personal data at least for the duration of our business relationship. The legal basis is the performance of a contract (Art. 6 (1) b) GDPR); 
• To meet our legitimate interests (Art. 6 (1) f) GDPR), including the following: 

• Enter into corporate transactions (e.g., restructuring, asset deals, mergers); 
• Protect our rights or property, enforce our terms of use and legal notices, and provide for the establishment, exercise, and defence of legal claims; 

• To fulfil our legal obligations, court orders or administrative decisions (Art. 6 (1) c) GDPR); 
• With your consent for other purposes (Art. 6 (1) a) GDPR), such as subscription to a newsletter; in this case, you have the option to revoke your consent at any time; 

We collect usage data when you interact with our Website. Usage data includes metrics and information regarding your use and interaction with our Website to know if you follow a certain user path, when an object (like a link) is opened and closed, and how often you visit a website. 

2 Recipients of your personal data 

In addition to the recipients of the personal data mentioned above, we also use other companies to process personal data on our behalf, for example for hosting of our website or sending newsletters. Such processors only process the data on our behalf. For example, our hosting provider is HubSpot. 

Furthermore, we transmit personal data to third parties if this is required by law, necessary for the exercise and defence of legal claims or if third parties provide certain services for us (e.g., lawyers, tax advisors). 

We operate globally. Therefore, personal data of individuals who visit our website or otherwise interact with us may be transferred and accessed from around the world, such as from countries where we or our group entities operate. Our group headquarter is based in the UK whose level of data protection has been found adequate by the EU commission (Art. 45 GDPR). If we transfer your personal data outside of the European Economic Area (“EEA”) to a country which provides a different level of data protection, we will make sure that it has arranged the same level of data protection as within the EEA. For this purpose, we mainly use Standard Contractual Clauses ("SCC") and in individual cases other appropriate guarantees. You can request a copy of the SCC or other contract ensuring the appropriate level of data protection by contacting us by the contact methods described in section 7. 

3 Cookies  

In addition to the processing purposes mentioned above, we also use cookies and similar technologies such as pixels or web storage (together: "Cookies") if they are technically necessary to offer our website or if we are obliged to do so.  

Cookies that are not technically necessary (e.g., for analytical purposes) are only processed with your consent.  

Unless otherwise stated in this Privacy Notice, cookies remain stored as long as necessary to fulfil the respective processing purposes. You can object to the storage of cookies by browser preferences and delete them manually in your browser settings. Please note, however, that some cookies may be mandatory for the use of our website or its individual functions. 

4 Privacy of children 

Our website and app are not designed for or directed to children under the age of 16 and we do not knowingly collect personal data from children. If you have reason to believe that we have inadvertently collected personal data about a child, please contact us and we will take steps to delete this data. 

5 Regular deletion of personal data 

Unless a specific duration of data storage is specified in this Privacy Notice, we will only process your data as long as this is necessary for the respective purposes or as long as there are legal retention obligations. After the respective processing purpose ceases to apply and retention obligations end, your data will be routinely deleted. 

6 Your rights 

You can request access to the personal data stored by us. If you have provided personal data on the basis of a contract or consent, you have the right to receive this personal data in a standard and machine-readable format. 

You can also request the deletion, correction or restriction of the processing of your personal data subject to certain exceptions or limitations. You can revoke your consent at any time without affecting the lawfulness of processing based on your consent before its withdrawal. 

In case of questions and in case of possible concerns about the data processing, you can also complain to a data protection authority. The data protection authority responsible for us is: 

Information Commissioner’s Office 

Wycliffe House 
Water Lane 
Wilmslow 
Cheshire 
SK9 5AF 

You can object to the data processing on the basis of our legitimate interests at any time based on grounds relating to your particular situation. 

7 Contact 

The website is owned and managed by us as the controller under GDPR. You can contact us under: 

Everfield UK Limited  

Orchard Place,  

London, England, SW1H 0BF 

Email: data.protection@everfield.com 

 

Last updated: 29 February 2024