Privacy Policy

Greenbrook Business Partner Privacy Notice

Protecting the security and privacy of personal data of contact persons (each a “Business Partner Contact”) at our customers, suppliers, vendors and partners (each a “Business Partner”) is important to Greenbrook Industries Ltd (Greenbrook), West Road, Harlow, Essex CM20 2BG. Therefore, Greenbrook processes personal data in compliance with applicable laws on data protection and data security currently the EU General Data Protection Regulations (GDPR), the Data Protection Act 2018 and any other applicable legislation as may be in force in the UK from time to time.

1. Categories of personal data processed, purpose of the processing and legal basis

In the context of the business relationship with Greenbrook, Greenbrook may processes personal data for the following purposes:

• Communicating with Business Partners about products, services and projects of Greenbrook or Business Partners, e.g. by responding to inquiries or requests;
• Planning, performing and managing the (contractual) relationship with Business Partners; e.g. by performing transactions and orders of products or services, processing payments, performing accounting, auditing, billing and collection activities, arranging shipments and deliveries, facilitating repairs and providing support services;
• Obtaining and analysing credit information;
• Administrating and performing customer surveys, marketing campaigns, market analysis, sweepstakes, contests, or other promotional activities or events;
• Maintaining and protecting the security of our products, services and websites, preventing and detecting security threats, fraud or other criminal or malicious activities;
• Ensuring compliance with legal obligations (such as record keeping obligations), Business Partner compliance screening obligations (to prevent white-collar or money laundering crimes), and Greenbrook policies or industry standards;
• Solving disputes, enforce our contractual agreements and to establish, exercise or defend legal claims.

 

For the aforementioned purposes, Greenbrook may process the following categories of personal data:

• Contact information, such as full name, work address, work telephone number, work mobile phone number, work fax number and work email address;
• Payment data, such as data necessary for processing payments and fraud prevention, including credit/debit card numbers, security code numbers and other related billing information;
• Further information necessarily processed in a project or contractual relationship with Greenbrook or voluntarily provided by the Business Partner Contact, such as orders placed, payments made, requests, and project milestones;
• Information collected from publicly available resources, integrity databases and credit agencies;
• If legally required for Business Partner compliance screenings: information about relevant and significant litigation or other legal proceedings against Business Partners.

 

The processing of personal data is necessary to meet the aforementioned purposes including the performance of the respective (contractual) relationship with Business Partners.

The lawful bases for processing are set out in Article 6 of the GDPR and as follows:

(a) Consent: the individual has given clear consent for you to process their personal data for a specific purpose.

(b) Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.

(c) Legal obligation: the processing is necessary for you to comply with the law (not including contractual obligations).

(d) Vital interests: the processing is necessary to protect someone’s life.

(e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.

(f) Legitimate interests: the processing is necessary for your legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.

Unless indicated otherwise, the legal basis for the processing of personal data is (b), (d) or (f) or if consent explicitly provided by Business Partner Contacts – then (a)

If Greenbrook does not collect the respective personal data, the purposes described may not be met by Greenbrook.