Information regarding the processing of personal data of customers and suppliers.

Pursuant to art. 13 of the GDPR (EU Regulation 2016/679), the following information is provided, in accordance with the principle of transparency, in order to make the user aware of the characteristics and methods of processing their personal data.
a) Identity and contact details of the Data Controller
The data controller is Pure Thermal Ltd
b) Purpose and legal basis of the processing
The processing of personal data requested from the interested party is carried out for the following purposes:
1) establishment, management and execution of the contractual relationship between the parties (including after-sales assistance to the customer);
2) creation of a position in the business Customer Portal and use of the company website;
3) execution of the contractual and regulatory obligations incumbent on the Data Controller (eg accounting and tax obligations);
4) processing of requests for commercial information on products and services;
5) publication of video footage and / or photographs of customers visiting the Company on the social channels used by the Company for promotional purposes;
6) sending advertising and promotional material;
7) management of disputes and credit recovery activities;
8) safety of people and protection of corporate assets through corporate video surveillance system (The use of images for different and further purposes is not envisaged);
9) company quality system management.
The legal bases of the processing are represented by:
• execution of the contract or pre-contractual measures (Article 6, letter b), EU Reg. 2016/679);
• fulfilment of the legal obligations incumbent on the Data Controller (Article 6, letter c), EU Reg. 2016/679);
• pursuit of the legitimate interest of the Data Controller (Article 6, letter f), EU Reg. 2016/679);
• consent of the interested party (Article 6, letter a), EU Reg. 2016/679) for the purposes referred to in point b) no. 5) and 6);
c) Recipients and any categories of recipients of personal data
The data will be processed at the legal and operational headquarters of Pure Thermal Ltd by subjects authorized to process it under the responsibility of the Data Controller and for the purposes indicated in point b).
The data may also be communicated to external data processors who have entered into specific agreements / conventions or contracts with the data controller.
The data may also be disclosed to professionals as well as to banking institutions, public and private entities, having the capacity of independent data controllers for reasons relating to the contract for the supply of goods / services, or strictly connected to it.
The images detected by the company video surveillance system may be viewed and possibly communicated within the limits and for the purposes indicated above, to the following subjects:
Security and surveillance companies, public security authorities, insurance companies as well as third parties authorized by specific provisions of law or regulations provided for by the law of the European Union or of the Member State to which the Data Controller is subject.
d) Data retention period
Personal data will be kept for the period necessary to achieve the purposes for which they were collected, and therefore for the duration of the contractual relationship, or, for the longer time required by applicable law, eg. accounting / tax legislation.
The images detected by the company video surveillance system are subject to registration and will be kept for the time necessary to pursue the aforementioned purposes – on average 24 hours – subject to special needs of an exceptional nature that require their conservation for longer periods.
e) Data rights
It should be noted that, with reference to personal data, the interested party may exercise the following rights:
1) right of access to personal data; the right to obtain the correction or cancellation of the same or the limitation of the processing;
2) right to object to processing;
3) right to data portability (law applicable only to data in electronic format), as governed by art. 20 of the GDPR.
4) right to revoke the consent given for the purpose referred to in point b) n.4, without prejudice to the lawfulness of the treatment based on the consent given before the revocation.
The interested party may exercise the aforementioned rights by sending a communication to the address info@purethermal.co.uk
f) Complaint. The interested party is informed that he has the right to lodge a complaint with the Supervisory Authority
g) Data communications
The communication of data is a necessary requirement for the conclusion of the contract and to allow the Data Controller to fulfil its legal obligations. Therefore, failure to communicate such data will not allow the conclusion of the contract between the parties.
h) Different purpose of the treatment
The Data Controller who intends to further process personal data for a purpose other than that for which they were collected, before such further processing, will provide the interested party with information regarding this different purpose and any further relevant information.
i) Profiling
The Owner does not use automated processes aimed at profiling.
The undersigned provides consent to the processing of data for the purposes referred to in point b) number 5 and 6

Ref: January 10th 2025.