Privacy Policy

Privacy Policy sets out how we, En Route International Limited, collect, store and use information about you when you use or interact with our website, www.en-route.com (our website), and where we otherwise obtain or collect information about you. This Privacy Policy is effective from 25 May 2018.Contents1. Summary2. Our details3. Information we collect when you visit our website4. Information we collect when you contact us5. Information collected or obtained about you from third parties6. Our use of automated decision-making and profiling7. Disclosure and additional uses of your information8. How long we retain your information9. How we secure your information10. Transfers of your information outside the European Economic Area11. Your rights in relation to your information12. Your right to object to the processing of your information for certain purposes13. Sensitive Personal Information14. Changes to our Privacy Policy15. Children’s Privacy16. California Do Not Track Disclosures17. Copyright1. SummaryThis section summarises how we obtain, store and use information about you. It is intended to provide a very general overview only. It is not complete in and of itself and it must be read in conjunction with the corresponding full sections of this Privacy Policy.How we collect or obtain information about you:How we use your information: for administrative and business purposes (particularly to contact you, to improve our business and website, to fulfil our contractual obligations, to advertise our goods and services, to analyse your use of our website and in connection with our legal rights and obligations).Disclosure of your information to third parties: only to the extent necessary to run our business, to our service providers, to fulfil any contracts we enter into with you and where required by law or to enforce our legal rights.Do we sell your information to third parties: NoHow long we retain your information: for no longer than necessary, taking into account legal obligations and other legal bases described in this policy.How we secure your information: using appropriate technical and organisational measures such as secure servers, SSL encryption and restricted access.Transfers outside the EEA: information may be transferred outside the EEA to countries such as the United States, Australia and UAE with safeguards including the EU-U.S. Privacy Shield where applicable.Your rights: to access, rectify, delete, restrict processing, data portability, object to processing, withdraw consent and not be subject to automated decision-making.Data controller: En Route International Limited, Company No. 04524355, Assurant House, 6-12 Victoria Street, Windsor, SL4 1EN, United Kingdom. Contact: data@en-route.com3. Information we collect when you visit our websiteWe collect and use information from website visitors in accordance with this section and the section entitled Disclosure and additional uses of your information. Our server is located in the United Kingdom.Use of website server log information for IT security purposes:We and our hosting provider collect and store server logs to ensure network and IT security and to identify unauthorised access, distribution of malware, denial of service attacks and other cyber-attacks. We do not identify individuals from server logs unless investigating suspicious activity.Legal basis for processing: compliance with a legal obligation (Article 6(1)(c)) and legitimate interests (Article 6(1)(f)).We also use server log information to analyse website use and improve our website, based on our legitimate interests (Article 6(1)(f)).4. Information we collect when you contact usWe collect information from individuals who contact us as described here. Email: your email address and any other information in that email. Legal basis: legitimate interests (Article 6(1)(f)) and contract necessity (Article 6(1)(b)) where applicable.Transfer and storage: emails you send us are stored within the European Economic Area on third-party providers’ servers in the UK, the Netherlands and Ireland.Contact form: we collect your name, email and any optional information you provide. If mandatory fields are not supplied, submission may be blocked. Legal basis: legitimate interests (Article 6(1)(f)) and contract necessity (Article 6(1)(b)).5. Information collected or obtained about you from third partiesGenerally we do not receive information from third parties, but it may occur. We may obtain your information from third parties with or without your prior contact. Legal basis: contract necessity (Article 6(1)(b)), consent (Article 6(1)(a)) and legitimate interests (Article 6(1)(f)).Where information is received in error we will delete it.6. Our use of automated decision-making and profilingWe use profiling on our website and in marketing emails. We do not believe this has any legal effect on you. Automated decision making: decisions made by machine without human involvement. Profiling: automated processing to evaluate personal aspects. We may use profiling for web analytics and marketing emails with legitimate interests to improve our website and communications.How to object: email data@en-route.com to object to web beacons in marketing emails.7. Disclosure and additional uses of your informationWe disclose information to service providers who process data on our behalf (IT providers in Germany, mailing lists, analytics, hosting and email providers in the UK and USA). We may share with other third parties where necessary to provide services, perform contracts or for legitimate interests, including Google Analytics and internal group use. Details about specific third parties are available on request.Information about Google Analytics: data stored outside the EEA in the United States. See Google privacy policy for details.8. How long we retain your informationRetention periods include: server logs 12 months; orders six years for tax purposes; correspondence and enquiries with a 24-month post-resolution retention; marketing data while subscribed. In other cases retention is managed based on purpose, legal obligations, consent and risk considerations.9. How we secure your informationWe take technical and organisational measures to secure information, including least-privilege access, secure servers, identity verification, SSL encryption, and restricted transfers. Email transmission over the internet is not completely secure; use of information is at your own risk.10. Transfers outside the EEAWe may transfer information outside the EEA where required to comply with legal obligations. Google Analytics data may be stored in the United States. Safeguards are in place as described in this policy.11. Your rights in relation to your informationYou have rights to access, rectify, delete, restrict processing, portability, object to processing and withdraw consent. How to exercise: write to Data Information Manager, En Route International Limited, Assurant House, 6-12 Victoria Street, Windsor, SL4 1EN, United Kingdom or email data@en-route.com. See the policy for full details and ICO information.12. Your right to object to the processing of your information for certain purposesYou may object to processing for public interest/legitimate interests including profiling, and to direct marketing. Instructions for exercising these rights are provided in the policy.13. Sensitive Personal InformationWe do not knowingly collect sensitive personal information. If transmitted, you are deemed to have consented to processing, which we will delete.14. Changes to our Privacy PolicyWe update and amend our Privacy Policy from time to time. We will notify you of major changes by email or site notice and obtain consent where required.15. Children’s PrivacyWe do not knowingly collect information from persons under 18. If information about a person under 18 is received, we will delete it or obtain parental consent as required by law.16. California Do Not Track Disclosures (not separately detailed in this excerpt)17. CopyrightThe copyright in this Privacy Policy is owned by or licensed to us and protected by copyright laws. All rights reserved. #J-18808-Ljbffr