Information on the Use of Your Personal Data
For all data that is obtained in connection with the conclusion, performance and termination of your contract, the controller within the meaning of Article 4, no. 7, of the EU General Data Protection Regulation (GDPR), i.e. the person or entity responsible, is STARLAB (UK) LTD, 5 Tanners Drive, Milton Keynes MK14 5BU (“STARLAB”).
Processing of your Personal Data
The personal data processed by STARLAB includes your particulars (name, gender, position, employer and comparable data), work address and contact data (telephone number, email address and comparable data) as well as information about your customer history (ordered products, points discussed in sales conversations and comparable data) and information about your product and contract interests which is deduced from that data.
Insofar as that data is necessary for the conclusion, performance and termination of the contracts, STARLAB processes it on the basis of Article 6, paragraph 1, point b, of the GDPR.
Deletion of Data
As a rule, data of accounting transactions is deleted ten years after the transaction was carried out, and all other personal data is deleted six years after the termination of all contracts of the customer with STARLAB.
Disclosure of Your Personal Data
In addition, we may also transfer your data to the appropriate national company of the STARLAB Group (see also the section “Data Transfer Abroad”) if you use offers that are provided jointly by several companies of the STARLAB Group. The legal basis of such disclosures of your personal data is Article 6, paragraph 1, point b, of the GDPR.
Besides, we disclose your personal data to the appropriate national company if it is in charge of the country in which you operate. In those cases, the legal basis of the data transmission is Article 6, paragraph 1, point f, of the GDPR. Our legitimate interest in such data transmissions lies in our business's interest in the effectiveness of its sales organisation.
In addition, we may give service providers that are bound by instruction access to your data. These socalled processors within the meaning of Article 28 of the GDPR must not process the data for their own purposes but only in the manner defined by STARLAB. They are chosen carefully and are obliged, by law and by contract, to ensure a high level of data protection. For example, an IT administrator sent by an IT service provider might maintain STARLAB databases and, in the course of this work, theoretically have the possibility to access personal data of our customers. As further examples, we may assign third parties with hosting our website, operating the different functions available on the website, sending emails, analysing data, making available search results or links and supporting us with executing your orders.
For purposes other than those mentioned in this letter, we will only disclose your personal data to third parties if we are obliged to do so by law (eg. to provide information to supervisory authorities in certain cases) or if you have given us your express consent to doing so. In addition, we may disclose your data if we are entitled to do so by law. In those cases, however, we will inform you separately (in case the disclosure is not described in this document already).
Information, deletion and porting of your personal data
Besides, you may receive the data which you have provided to us in a structured standard machinereadable format from us or require us to transfer that data to a third party named by you.
If you find that data stored about your person is incorrect or incomplete, you can require the immediate correction or completion of that data at any time.
If you have any questions about the processing of your personal data by STARLAB, please contact our Data Protection Officer at the email address DPO@starlab.co.uk or the postal address STARLAB (UK) LTD, 5 Tanners Drive, Milton Keynes MK14 5BU.
STARLAB UK’s Data Protection Officer can be contacted by email at DPO@starlab.co.uk