Privacy policy

1. Information about the manager

Our name is COLIBRIX LIMITED, registration number: 12578874, legal address: Warnford Court, 29 Throgmorton Street, London, England, EC2N 2AT.

You can contact us by writing to the following electronic mail address: info@colibrix.uk

 

2. Contact information for communication on personal data protection issues

If you have any questions regarding this notice or the processing of your personal data, you can contact us using the communication channels indicated in the previous point (point 1) or by contacting our personal data protection specialist by writing to the following electronic mail address: data@colibrix.uk

 

3. General characteristics of our personal data processing

This statement describes how we process the personal data of our customers, customer representatives/contact persons, cooperation partners, website visitors and other persons whose data may be at our disposal as part of our commercial activities.

We assume that before using our website or becoming our customer, you have read this statement from us and have accepted its terms. This is the current version of the announcement. We reserve the right to amend and update this notice as necessary.

The purpose of this statement is to give you a general insight into our personal data processing activities and purposes, however, please note that other documents (e.g. service contracts, cooperation agreements, website or portal use rules) may also contain additional information on the processing of your personal data.

We inform you that the personal data processing rules contained in this notice apply only to the processing of personal data of natural persons.

In addition to these regulations, you can also familiarize yourself with the following additional personal data processing notices:

• Terms of use of the website (available at www.colibrix.co.uk/terms-conditions/);
• Cookies policy (available at www.colibrix.co.uk/cookies-policy/)

We are aware that personal data is your value, and we will process it in compliance with confidentiality requirements and take care of the security of your personal data in our possession.

 

4. For what purposes do we process your personal data and what is the legal basis for processing personal data?

We will process your personal data only according to previously defined legitimate purposes, including:

of services, as well as for the fulfilment and provision of the obligations specified in the contract (including the cooperation agreement) -

 

Within the framework of this purpose, we would also need to identify you, provide an appropriate payment calculation and ensure the payment process, contact you in matters related to the provision of the service and/or the execution of the contract (including sending invoices), in certain cases also ensure the collection of unpaid payments.

For this purpose and for the sub-purposes indicated above, we may need at least the following personal data: name, surname, personal identification number, address (object address, postal address, invoice delivery address), bank account number of the customer, customer and/or cooperation partner contact person; telephone number, address (postal address, billing address), e-mail address.

The main legal bases to be used to achieve these purposes are:

• conclusion and execution of the contract with the data subject ( [1]point b of the first part of Article 6 of the General Data Protection Regulation);

Fulfilment of legal obligations (Article 6, Part One, Clause c of the General Data Protection Regulation);

The controller's legitimate interests (Article 6, Part One, Clause f of the General Data Protection Regulation), for example, identifying you as a customer, client and/or contact person of a cooperation partner, ensuring communication with you.

 

1. Fulfilment of the requirements set forth in regulatory acts regarding the provision of services or fulfilment of the requirements set forth in other normative acts

 

Within the scope of this purpose, we would need to fulfil both the requirements of financial and reporting regulatory acts, as well as the requirements of the accounting law, the requirements of the archive law and the requirements set forth in other regulatory acts.

 

For this purpose, we may need to process the following personal data: name, surname, personal identification number, address;

 

The main legal bases to be used to achieve these purposes are:

• Fulfilment of legal obligations (Article 6, Part One, Clause c of the General Data Protection Regulation).

 

1. AML, fraud prevention activities

 

Within the scope of this purpose, we would need to identify, examine, prosecute and prevent crime and fraud, as well as to verify Customer and identify his eligibility for the requested services and ability for management of the account. Scope also includes such goals as managing risk internally for the Company and externally for the Customers and providing information to authorities upon request.

 

For this purpose, we may need to process the following personal data: name, surname, personal identification number, date of birth, nationality, address, financial information, risk assessment data.

 

The main legal bases to be used to achieve these purposes are:

• Fulfilment of legal obligations (Article 6, Part One, Clause c of the General Data Protection Regulation);
• conclusion and execution of the contract with the data subject (point b of the first part of Article 6 of the General Data Protection Regulation);
• The controller's legitimate interests (Article 6, Part One, Clause f of the General Data Protection Regulation);
• The public interest (Article 6, Part One, Clause e of the General Data Protection Regulation).

 

1. Provision of marketing activities

 

For this purpose, we may send you commercial communications, e.g., publish materials from public events organized by us.

 

For this purpose, we may need at least the following personal data: name, surname, telephone number, e-mail address of the customer, customer and/or cooperation partner.

 

The main legal bases to be used to achieve these purposes are:

• consent of the data subject (point a of Article 6 of the first part of the General Data Protection Regulation);
• conclusion and execution of the contract with the data subject (point b of the first part of Article 6 of the General Data Protection Regulation);
• The controller's legitimate interests ( Article 6, Part One, Clause f of the General Data Protection Regulation), for example, to ensure communication.

 

1. Prevention of threats to security, property interests and other important legitimate interests of us or third parties

 

Within the framework of this purpose, we would need to conduct video surveillance of our territory, buildings and other properties, make recordings of telephone conversations , use personal data processors for the provision of various functions, if necessary, disclose information to courts and other state institutions, exchange information within the group of companies, use the rights granted by regulatory acts the right to ensure their legitimate interests.

 

For this purpose, we may need to process at least the following personal data: Customer's, customer's and/or cooperation partner's contact name, surname, personal identification number, facility address, declared number of residents at the address, personal appearance (picture), location and time, and other data as needed;

 

The main legal bases to be used to achieve these purposes are :

• The controller's legitimate interests (point f of the first part of Article 6 of the General Data Protection Regulation), for example, for the purposes of detecting criminal offenses, for ensuring debt collection.

 

1. To ensure the proper provision of services

 

As part of this purpose, we would need to maintain and improve technical systems and IT infrastructure, use technical and organizational solutions that can also use your personal data (for example, monitoring cookies), with the aim of ensuring proper service provision.

 

The main legal bases to be used to achieve these purposes are:

• The controller's legitimate interests (Article 6, Part One, Clause f of the General Data Protection Regulation).

 

 

5. Who could access your personal data?

We take appropriate measures to process your personal data in accordance with applicable laws and to ensure that your personal data is not accessed by third parties who do not have an appropriate legal basis for processing your personal data.

 

If necessary, your personal data could be accessed by:

our employees or directly authorized persons who need it for the performance of work duties;

personal data processors in accordance with the services they provide and only to the extent necessary, such as auditors, financial management and legal consultants, database developer/technical maintainer, other persons who are related to the provision of the administrator's services;

in cases specified in the legal acts of state and municipal authorities, for example, law enforcement authorities, municipalities, tax authorities, sworn bailiffs;

third parties, carefully assessing whether there is an appropriate legal basis for such data transfer, such as debt collectors, courts, out-of-court dispute resolution institutions, bankruptcy or insolvency administrators, third parties that maintain registers (for example, register of citizens, registers of debtors, etc.).

 

6. Which cooperation partners in personal data processing or personal data processors do we choose?

We take appropriate measures to ensure the processing, protection and transfer of your personal data to data processors in accordance with applicable laws. We carefully select personal data processors and, when transferring data, we evaluate its necessity and the amount of data to be transferred. The transfer of data to processors is carried out in compliance with the requirements of confidentiality and secure processing of personal data.

We can currently cooperate with the following categories of personal data processors:

- outsourcing accountants, auditors, financial management and legal consultants;

- IT infrastructure, database owner/developer/technical maintainer;

- other persons involved in the provision of our services;

Personal data processors may change from time to time, which we will also update in this document.

 

7. Are your personal data sent to countries outside the European Union (EU) or the European Economic Area (EEA)?

We are a company with a global reach. Your personal data may be processed locally or in another country where we or our partners operate worldwide, as permitted by law. Your personal data may be transferred from the EU/ EEA or from another country that restricts transfers of personal information to third countries.

 

8. How long will we store your personal data?

Your personal data is stored for as long as its storage is necessary according to the relevant purposes of personal data processing, as well as in accordance with the requirements of applicable legislation.

When evaluating the duration of storage of personal data, we take into account the applicable requirements of regulatory acts, aspects of the performance of contractual obligations, your instructions (e.g. in the case of consent), as well as our legitimate interests. If your personal data is no longer needed for the specified purposes, we will delete or destroy them.

 

Below we indicate the most common retention periods for personal data:

• personal data necessary for the fulfillment of contractual obligations - we will store until the contract is fulfilled and until other storage terms are fulfilled (see below);
• personal data that must be stored in order to fulfill the requirements of legal acts, we will store the terms specified in the relevant regulatory acts, for example, the Companies Act 2006 stipulates that supporting documents must be kept for a period of 6 years from the end of the financial year to which they relate.;
• In order to prove the fulfillment of our obligations, we will store the data for the general claim limitation period, in accordance with the claim limitation periods defined in the laws and regulations: Limitation Act 1980: This is the primary statute governing limitation periods for most civil claims in England and Wales. Some key limitation periods under the Limitation Act 1980 include:
  • Six years for claims based on simple contracts (e.g., debts, breach of contract).
  • Three years for claims in tort (e.g., personal injury, negligence).
  • Twelve years for claims related to specialty contracts (e.g., deeds).
• Consumer Rights Act 2015: This legislation sets out specific limitation periods for certain consumer claims, such as:
  • Six years for claims for breach of contract related to goods or services.
  • Five years for claims for faulty goods under the Consumer Rights Act.

 

 

9. What are your rights as a data subject regarding the processing of your personal data?

Renewal of personal data

If there have been changes in the personal data that you have provided to us, for example changes in the personal code, contact address, change of telephone number or e-mail, please contact us and provide us with the current data so that we can reach the relevant persons. data processing purposes.

Your right to access and correct your personal data

In accordance with the provisions of the General Data Protection Regulation, you have the right to request from us access to your personal data that we have at our disposal, to request their correction, deletion, restriction of processing, to object to the processing of your data, as well as the right to data portability in the cases specified in the General Data Protection Regulation and in order.

The company respects this right of yours to access and control your personal data, therefore, in case of receiving your request, we will respond to it within the time limits set by the regulatory acts (usually no later than one month, unless there is a special request that requires a longer time to prepared answer), and if possible, we will correct or delete your personal data accordingly.

You can obtain information about your personal data held by us or exercise your other rights as a data subject in one of the following ways:

1. by submitting a relevant application by sending it to us by mail to the following address: Warnford Court, 29 Throgmorton Street, London, England, EC2N 2AT.
2. when submitting a relevant application, sending it to our e-mail: data@colibrix.uk, it is recommended to sign it with a secure electronic signature.

 

Upon receiving your submission, we will evaluate its content and the possibility of your identification, and depending on the relevant situation, we reserve the opportunity to ask you to additionally identify yourself in order to ensure the security and disclosure of your data to the relevant person.

Withdrawal of Consent

 

If the processing of your personal data is based on your consent, you have the right to withdraw it at any time and we will no longer process your personal data, which we processed on the basis of consent, for the relevant purpose. However, we inform you that the withdrawal of consent cannot affect the processing of such personal data, which is necessary to fulfill the requirements of regulatory enactments or which is based on a contract, our legitimate interests or other grounds for legal data processing established by regulatory enactments.

 

You can also object to the processing of your personal data if the processing of personal data is based on legitimate interests or is used for marketing purposes (for example, sending commercial communications or participating in sweepstakes).

 

 

10. Where can you submit a complaint related to issues related to personal data processing?

If you have any questions or objections regarding our processing of your personal data, we invite you to contact us first.

If you still believe that we have not been able to mutually resolve the problem and you believe that we still violate your right to personal data protection, you have the right to file a complaint with the Information Commissioner's Office. You can find samples of submissions to the Data State Inspection and other related information on the website of the Information Commissioner's Office (https://ico.org.uk/make-a-complaint/).

 

11. Why do you need to provide us with your personal data?

Primarily, we collect your information to fulfill our contractual obligations, fulfill our legal obligations and to pursue our legitimate interests. In these cases, obtaining certain information is necessary for us to achieve the relevant purposes, therefore, failure to provide such information may jeopardize the initiation of business relations or the performance of the contract. If the data will not be required necessarily, but their submission could help to improve the service, or offer you favorable contract conditions and/or offers, we will indicate at the time of data collection that the provision of data is voluntary.

In addition, we would like to inform you about the main regulatory requirements regarding the processing of personal data:

- Data Protection Act 2018 (DPA 2018);

- UK General Data Protection Regulation (UK GDPR), which incorporates the principles and requirements of the EU GDPR into UK law.

- Additionally, there are specific regulations and guidance issued by the Information Commissioner's Office (ICO), the UK's independent regulator for data protection.

 

12. How do we obtain your personal data?

We can obtain your personal data in one of the following ways:

1. in the process of concluding a mutual agreement, obtaining data from you;
2. if the contract is concluded with a third party and it has indicated you as a contact person;
3. from you, if you submit any submissions, e-mails, call us;
4. from you if you sign up for our services online;
5. from you by authorizing on the website www.colibrix.co.uk
6. on the website www.colibrix.co.uk , using cookies ;
7. third party databases, for example when evaluating your creditworthiness, to achieve this purpose;
8. in relevant cases, from video surveillance recordings.

 

 

13. Are your personal data used in automated decision-making?

We do not use your data for automated decision-making.