Data Protection Officer
Barcode Warehouse has appointed a Data Protection Officer for you to contact if you have any concerns or questions about the Barcode Warehouse personal data policies and practices in relation to your data.
If you have any questions or comments please contact our Data Protection Officer using the details below:
Data Protection Officer
The Barcode Warehouse Limited
The principals for what is personal data are based on current legislation, which identifies that Personal Data is any information that relates to you whether directly or indirectly.
Under the EU’s General Data Protection Regulation:
Personal Data is defined as “any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.
Special Categories of Personal Data
Certain data is classified under the Regulation as “special categories”:
- Ethnic origin
- Political Opinions
- Religious Beliefs
- Trade-union membership
- Genetic Data
- Biometric Data
- Health Data
- Data concerning a natural person's sex life
- Sexual orientation
Consent is required for Barcode Warehouse to process any types of personal data, but it must be explicitly given. If we ever ask you for sensitive personal data we will always tell you why and how the information will be used.
Information Barcode Warehouse may need to collect and store from you
In order for us to provide you with the sale of goods and services such as labels, printers, barcoding equipment, or as part of a contract to provide a Managed Services solution, we need to collect personal data. Failure to provide the relevant personal data could mean the Barcode Warehouse is unable to provide the sale of goods or services.
Information you give us. You may give us information about you by filling in forms on our websites or by corresponding with us by phone, email or otherwise. This includes information to use our site, search for a product, place an order on our site or otherwise contact us. Such information could include (but may not be limited to) your name, your employer’s name, your business address (including your country location), telephone number(s) and your email address. If you register on our website(s), we will collect a username and password that is linked to you as an individual. We may also collect (if needed) your personal address & personal email address.
Information we receive from other sources. If you are an employee of an organisation that we provide a Managed Service to, as part of the service engagement and contract, we could have been provided with your name, your employer’s name and employee number, your work/home address (including your country location), telephone number(s) and your email address. As part of service provision, if you raise a service ticket with our service desk, a support analyst could ask if they can remotely connect to your device to carry out triage. This service could capture further personal information about you, including (but not limited to) your current location and your online identifiers.
We are committed to ensuring that the information we collect and use is appropriate for this purpose and does not constitute an invasion of your privacy.
We may also pass your personal data on to our service providers (who are contracted to Barcode Warehouse) in the course of dealing with you. Our contractors are obliged to keep your details securely and use them only to fulfil the service they provide to you on our behalf, in compliance with GDPR.
When Barcode Warehouse obtains personal data whilst acting as data processor as part of a Managed Service provision and once the service has ended, we will dispose of any personal information in compliance with GDPR.
How Barcode Warehouse uses your information
Barcode Warehouse will process – that means collect, store and use – the information you provide in a manner that is compliant with GDPR. We will endeavour to keep your information accurate and up to date and not keep it for longer than is necessary. In some instances the law sets the length of time information has to be kept but in most cases, we will use our discretion to ensure that we do not keep records outside of our normal business requirements. Our aim is not to be intrusive and we undertake not to ask irrelevant or unnecessary questions. Moreover, the information you provide will be subject to rigorous measures and procedures to minimise the risk of unauthorised access or disclosure.
We will use the information you provide for the following purposes:
- To respond to any enquiry made by you
- To complete a quotation or sale for goods or services
- To correspond with you after a sale of goods or services
- To ship your goods or complete services
- To repair and triage devices
- To improve and personalise your experience when you use our website
- To improve our products and services and for the development of future products and services
- To send you marketing information about our products and services, which you can opt out of at any time
- For internal record keeping and administration of records
Improving our service
The Barcode Warehouse does not sell, trade or rent your personal information to others. To better tailor our services to our customers' needs, we use non-identifying and aggregate information to help us make decisions on how to improve. We also share this generic information with our advertisers and other interested, reputable parties with whom we have established a formal business relationship. For example, we may tell advertisers which areas of the site have received the most customer traffic overall, or more specifically, how many customer types have visited certain pages. However, we do not disclose the identifying information of individual customers with advertisers. We also do not use or share the personally identifiable information submitted to us by any other means without providing our customers the choice to opt-out or otherwise bar such unrelated uses.
GDPR and other countries’ privacy laws provide certain rights for data subjects. A good explanation of them is available on the website of the Information Commissioner’s Office (ico.org.uk).
The Barcode Warehouse provides the following rights for individuals in regard to their personal data:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision-making including profiling
These collectively give you the right to withdraw consent at any time where relevant.
The right to be informed
The right of access
You have a right to understand what personal data is being processed and have access to this personal information.
The Barcode Warehouse will provide a copy of this information with 30 days of the request, subject to validation of your identity and your rights to have this information.
If we do not respond to your request, we will explain why to you, informing you of your right to complain to the supervisory authority and to a judicial remedy without undue delay and at the latest within one month.
The right to rectification
You have a right to have your personal data corrected if you believe there are inaccuracies or incompleteness.
The Barcode Warehouse will respond to rectification requests within 30 days of the request, subject to validation of your identity and your rights to have this information rectified.
Where we are not taking action in response to a request for rectification, we will explain why and inform you of your right to complain to the supervisory authority and to a judicial remedy.
The right to erasure
You have a right to have your personal data erased, this is also known as the right to be forgotten. This broad principle gives you the right to have your personal data removed if there is no compelling justification or legislative / regulatory reason to either retain your personal data or continue processing it.
The Barcode Warehouse will respond to erasure requests within 30 days of the request, subject to validation of your identity and your rights to have this information erased.
The right to erasure does not provide an absolute ‘right to be forgotten’. You have a right to have personal data erased and to prevent processing in specific circumstances:
- Where the personal data is no longer necessary in relation to the purpose for which it was originally collected/processed
- When you withdraw your consent
- When you object to the processing and there is no overriding legitimate interest for continuing that processing
- The personal data was unlawfully processed (i.e. otherwise in breach of the GDPR).
- The personal data has to be erased in order to comply with a legal obligation
Where we are not taking action in response to a request for erasure, we will explain why and inform you of your right to complain to the supervisory authority and to a judicial remedy.
The right to restrict processing
You have a right to block or supress processing of your personal data.
The right to block or supress processing of your personal data is allowed under certain circumstances:
- If you contest the accuracy of your personal data
- If you object to the processing and are contesting the legitimate grounds the Barcode Warehouse are using to process your personal data
- If processing is unlawful and you request restriction rather than erasure
- If personal data is no longer used, but is needed to establish, exercise or defend a legal claim
The Barcode Warehouse will respond to restriction of processing requests within 30 days of the request, subject to validation of your identity and your rights to have this information rectified.
Where we are not taking action in response to a request to restrict processing, we will explain why and inform you of your right to complain to the supervisory authority and to a judicial remedy.
The right to data portability
You have a right to data portability allowing you in certain circumstances to have your personal data ported across to another IT environment in a safe and secure way without hindrance to usability.
The Barcode Warehouse currently does not carry out any automated processing where the need for your personal data to be ported is applicable.
The right to object
You have a right to object to the processing of your personal data under certain circumstances.
The right to object to how Barcode Warehouse uses your personal data will be related to our marketing activities.
The Barcode Warehouse will respond to objection requests immediately, subject to validation of your identity and your rights to object to your personal data being used.
We will stop processing any of your personal data for marketing immediately
Transfers to third countries
Barcode Warehouse ensures that any such transfer to such countries are listed by the EU, as being recognised as providing adequate level of protection for personal data or has the provision of adequacies such as in the US (limited by the Privacy Shield Framework).
If a level of data protection applies that is not comparable to the level of data protection within the EEA it will be based on the Standard Contractual Clauses (according to EU Commission Decision 2010/87/EC or any future replacement) in order to contractually provide that your Personal Data is subject to a level of data protection that applies within the EEA. You may obtain a redacted copy (from which commercial information and information that is not relevant has been removed) of such Standard Contractual Clauses
The right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint at any time with the Information Commissioner’s Office (ICO) if you feel that Barcode Warehouse has at any time neglected to satisfactorily look after your personal data or has failed to comply with your rights under the General Data Protection Regulation.
Your complaint should be sent to The Information Commissioner’s Office:
Helpline: 0303 123 1113