INTRODUCTION:
The General Data Protection Regulation (“GDPR”) and Data Protection Acts 1988-2018 and any amendments thereto (“Data Protection Acts”) apply to the processing of personal data. East Cork Oil Company Unlimited Company (trading as):
A. Browne Oil Company, Banner Oil, C.R.L. Oil, Clare Oil, Comeragh Oil, D Oil, Estuary Fuel Distribution, Feale Oil Products, John O'Neill Oil, Kerry Petroleum, Marina Oil Distributors, Michael O'Reilly Oil Company, Mill Oils, Ross Oil, Shreelawn Oil, South of Ireland Petroleum, South of Ireland Petroleum West Cork, Swift, Tara Oil, Unecol, Vale Oil & Wexford Oil
of (head office) Broomfield West, Midleton, County Cork (“East Cork Oil”, “we” or “us”) is committed to complying with its legal obligations in this regard.
This Privacy Policy should be read in conjunction with our Terms and Conditions and our Cookie Policy, both of which can also be accessed and viewed via our website: www.yourlocaloilcompany.ie
COLLECTON AND STORAGE OF PERSONAL DATA, REASON FOR PROCESSING AND LEGAL BASIS FOR DOING SO:
East Cork Oil processes certain data of its customers and its potential customers (including those who access and/or interact with our website) for the following reasons or purposes:
in order to complete customer orders and make deliveries, including to facilitate proof of deliveries;
for invoicing purposes;
- to process payments and refunds;
- to register customers on our website for our customer online accounts and to administer those customer online accounts;
- to provide and administer the use of customer fuel cards/fobs;
- to provide notifications regarding delivery (by email, telephone, text message);
- for security purposes relating to our premises;
- to process customer credit applications and process credit related functions, including providing customer data to third party processors for the purpose of completing credit related functions;
- to conduct prize draws which the customer has opted to enter into;
- in circumstances of non-payment or late payment, for the purpose of collection of arrears of payment, including providing customer data to third party agents and representatives for debt recovery purposes;
- to comply with legal and regulatory requirements, including anti-money laundering legislation;
- for marketing and updates relating to our products and services;
- to analyse our sales and manage customer and business relationships;
- for administrative purposes relating to our systems.
The legal bases on which we process personal data of our customers are as follows:
- where any such processing is necessary for the performance of an agreement to provide goods or services to you, or where we are proposing to enter into an agreement to provide goods or services to you;
- our legitimate interests in conducting our business in a responsible and commercially prudent manner. We will not process your personal data for these purposes if to do so would constitute an unwarranted interference with your own interests, rights and freedoms;
- to comply with our legal and regulatory obligations; and
- in limited circumstances, based on your consent (where we have sought it and you have provided it to us), and in which case, you can withdraw your consent at any time.
East Cork Oil processes certain data of persons (aside from customers and potential customers) who access and interact with our website for the following reasons or purposes:
- to respond to any queries raised via our ‘contact’ form on our website
- for marketing and updates relating to our products and services.
Please also see our Cookie Policy for information relating to non-personal technical, statistical and device related information which may be collected from you when you access and interact with our website.
The legal bases on which we process personal data of such persons who access and interact with our website are as follows:
- our legitimate interest in the administration and operation of our business; and
- our legitimate interest in marketing and providing updates in relation to our goods and services. We will not process your personal data for these purposes if to do so would constitute an unwarranted interference with your own interests, rights and freedoms.
SECURITY AND DISCLOSURE OF DATA:
East Cork Oil will take all reasonable steps to ensure that appropriate security measures are in place to maintain the security of both electronic and manual data. Security measures will be reviewed from time to time, having regard to the technology available, the cost and the risk of unauthorised access.
We may share certain parts of our customers’ personal data with third parties, including competent government and regulatory authorities and statutory bodies such as the Revenue Commissioners when requested or required by law. We may also from time to time to share certain parts of our customers’ personal data with certain service providers, including our auditors, bookkeepers and accountants, legal advisors, debt collection agents (in respect of payment arrears only), IT software, hosting and support providers and website providers, payment processing providers and distributors. In carrying out this processing, we rely on the legal bases set out above. Where such third parties are engaged by us and process your data, we will ensure that they are contractually required to use your data only to provide their service to us and are contractually barred from using it for their own purposes.
CLOSED CIRCUIT MONITORING (CCTV):
East Cork Oil has closed circuit television cameras in operation at all of our offices/depots & filling station forecourts. CCTV is monitored in house and by a third-party security monitoring provider. For customers and other persons who may visit these premises, your image might be captured on CCTV. This is necessary for health & safety purposes and in order to protect against theft or pilferage, for the security of staff and East Cork Oil property. In carrying out this processing we may rely on the following legal bases: where necessary for the performance of an agreement to provide goods or services to you, our legitimate interests and/or compliance with our legal obligations.
RETENTION OF DATA:
We may retain your data for as long as necessary in light of the purposes for which your data is processed, as set out in this Policy. We may retain customer data for the duration of the customer relationship and for a period of 7 years thereafter. This retention period for customer data may be extended in exceptional circumstances including where records are required by us to defend any legal claims taken against us or on receipt of appropriate advice. We retain CCTV footage for up to 90 days, unless there is a reason to keep it for longer in certain limited circumstances.
We will take all reasonable steps to ensure that appropriate security measures are in place to protect the confidentiality of data being destroyed in line with data retention periods.
TRANSFERS OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA:
We transfer data relating to our computer software systems to our computer software provider located in the United Kingdom. The safeguard we have put in place for this transfer is to enter into European Commission approved standard contractual clauses with the provider.
YOUR RIGHTS IN RESPECT OF PERSONAL DATA
You have the following rights under the GDPR and Data Protection Law, in certain circumstances and subject to certain exemptions, in relation to your personal data:
- right to access the data - you have the right to request a copy of the personal data that we hold about you, together with other information about our processing of that personal data. Please address any request to access your data to: Email: info@eastcorkoil.com
- right to rectification- you have the right to request that any inaccurate data that is held about you is corrected, or if we have incomplete information, you may request that we update the information such that it is complete.
- right to erasure - you have the right to request us to delete personal data that we hold about you. This is sometimes referred to as the right to be forgotten.
- right to restriction of processing or to object to processing - you have the right to request that we no longer process your personal data for particular purposes, or to object to our processing of your personal data for particular purposes.
- right to data portability - you have the right to request us to provide you, or a third party, with a copy of your personal data in a structured, commonly used machine readable format.
In order to exercise any of the rights set out above, please contact us at the contact details at the end of this privacy policy.
If we are processing personal data based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing which took place prior to its withdrawal.
If you are unhappy with how we process personal data, we ask you to contact us so that we can rectify the situation.
You may lodge a complaint with a supervisory authority. The Irish supervisory authority is the Data Protection Commission.
REQUIREMENT TO PROCESS PERSONAL DATA
For our customers or potential customers, the provision of your personal data for the purposes described in this policy may be a contractual requirement in order to allow us to provide you with goods and services and otherwise conduct our business with you.
AUTOMATED DECISION-MAKING AND PROFILING
We do not use any personal data for the purpose of automated decision-making or profiling.
REVIEW:
This policy may be reviewed from time to time to take into account changes in the law and the experience of the policy in practice. Any changes to this policy will be notified on our website and otherwise to our customers.
THIRD PARTY LINKS
The website(s) of East Cork Oil may contain links to other websites and services, which are managed and controlled by third parties. This Policy does not apply in those cases and we are not in any way responsible for the privacy practices of such third parties.
CONTACT US:
Email: info@eastcorkoil.com
or
in writing to:
East Cork Oil (Data Protection)
Broomfield West,
Midleton,
County Cork
Tel: 021 4631 206
Website: www.yourlocaloilcompany.ie