1. We respect your privacy
1.2. We adhere to the Australian Privacy Principles contained in the Privacy Act 1988 (Cth) and to the extent applicable, the EU General Data Protection Regulation (GDPR).
1.3. “Personal information” is information we hold which is identifiable as being about you. This includes information such as your name, email address, identification number, or any other type of information that can reasonably identify an individual, either directly or indirectly.
2. What personal information is collected
2.2. You may provide basic information such as your name, phone number, address and email address to enable us to send you information, provide updates and process your product or service order.
2.3. We may collect additional information at other times, including but not limited to, when you provide feedback, when you provide information about your personal or business affairs, change your content or email preference, respond to surveys and/or promotions, provide financial or credit card information, or communicate with our customer support.
2.4. Additionally, we may also collect any other information you provide while interacting with us.
3. How we collect your personal information
4. How we use your personal information
If you withhold your personal information, it may not be possible for us to provide you with our products and services or for you to fully access our website.
4.1. Ureco Heat Pumps may use personal information collected from you to provide you with information about our products or services. We may also make you aware of new and additional products, services and opportunities available to you.
4.2. Ureco Heat Pumps will use personal information only for the purposes that you consent to. This may include to: (a) provide you with products and services during the usual course of our business activities; (b) administer our business activities; (c) manage, research and develop our products and services; (d) provide you with information about our products and services; (e) communicate with you by a variety of measures including, but not limited to, by telephone, email, sms or mail; and (f) investigate any complaints.
4.3. We may disclose your personal information to comply with a legal requirement, such as a law, regulation, court order, subpoena, warrant, legal proceedings or in response to a law enforcement agency request.
4.4. If there is a change of control in our business or a sale or transfer of business assets, we reserve the right to transfer to the extent permissible at law our user databases, together with any personal information and non-personal information contained in those databases.
5. Disclosure of your personal information
6. General Data Protection Regulation (GDPR) for the European Union (EU)
6.2. We process your personal information as a Processor and/or to the extent that we are a Controller as defined in the GDPR.
6.3. We must establish a lawful basis for processing your personal information. The legal basis for which we collect your personal information depends on the data that we collect and how we use it.
6.4. We will only collect your personal information with your express consent for a specific purpose and any data collected will be to the extent necessary and not excessive for its purpose. We will keep your data safe and secure.
6.5. We will also process your personal information if it is necessary for our legitim interests, or to fulfil a contractual or legal obligation.
6.6. We process your personal information if it is necessary to protect your life or in a medical situation, it is necessary to carry out a public function, a task of public interest or if the function has a clear basis in law.
6.7. We do not collect or process any personal information from you that is considered “Sensitive Personal Information” under the GDPR, such as personal information relating to your sexual orientation or ethnic origin unless we have obtained your explicit consent, or if it is being collected subject to and in accordance with the GDPR.
6.8. You must not provide us with your personal information if you are under the age of 16 without the consent of your parent or someone who has parental authority for you. We do not knowingly collect or process the personal information of children.
7. Your rights under the GDPR
7.2. Except as otherwise provided in the GDPR, you have the following rights: (a) to be informed how your personal information is being used; (b) access your personal information (we will provide you with a free copy of it); (c) to correct your personal information if it is inaccurate or incomplete; (d) to delete your personal information (also known as “the right to be forgotten”); (e) to restrict processing of your personal information; (f) to retain and reuse your personal information for your own purposes; (g) to object to your personal information being used; and (h) to object against automated decision making and profiling.
7.4. We may ask you to verify your identity before acting on any of your requests.
8. Hosting and International Data Transfers
8.2. We and our other group companies have offices and/or facilities in Australia. Transfers to each of these countries will be protected by appropriate safeguards, these include one or more of the following: the use of standard data protection clauses adopted or approved by the European Commission which you can obtain from the European Commission Website; the use of binding
corporate rules, a copy of which you can obtain from Ureco Heat Pump’s Data Protection Officer.
8.3. The hosting facilities for our website are situated in Australia. Transfers to each of these Countries will be protected by appropriate safeguards, these include one or more of the following: the use of standard data protection clauses adopted or approved by the European Commission which you can obtain from the European Commission Website; the use of binding corporate rules, a copy of which you can obtain from Ureco Heat Pump’s Data Protection Officer.
8.4. Our Suppliers and Contractors are situated in Australia. Transfers to each of these Countries will be protected by appropriate safeguards, these include one or more of the following: the use of standard data protection clauses adopted or approved by the European Commission which you can obtain from the European Commission Website; the use of binding corporate rules, a copy of which you can obtain from Ureco Heat Pump’s Data Protection Officer.
8.5. You acknowledge that personal data that you submit for publication through our website or services may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such personal data by others.
9. Security of your personal information
9.2. Where we employ data processors to process personal information on our behalf, we only do so on the basis that such data processors comply with the requirements under the GDPR and that have adequate technical measures in place to protect personal information against unauthorised use, loss and theft.
10. Access to your personal information
10.2. We reserve the right to refuse to provide you with information that we hold about you, in certain circumstances set out in the Privacy Act or any other applicable law.
11. Complaints about privacy
13.3. Third party sites Our site may from time to time have links to other websites not owned or controlled by us. These links are meant for your convenience only. Links to third party websites do not constitute sponsorship or endorsement or approval of these websites. Please be aware that Ureco Heat Pumps is not responsible for the privacy practises of other such websites. We encourage our users to be aware, when they leave our website, to read the privacy statements of each and every website that collects personal identifiable information.