As a leading provider of EPOS and Retail Management Solutions, we are committed to ensuring the data compliance of both our solutions and the services that we provide, as well as ensuring compliance as a business entity in our own right. Eurostop is committed to ensuring that your privacy is protected. Should we use, or ask you to provide certain information by which you can be identified, then you can be assured that it will only be used in accordance with this privacy statement.
The purpose of this statement is to provide information regarding what, how and why Eurostop collect, process and store data, as well as providing the appropriate contact information should you wish to withdraw from processing or request deletion of any data we hold about you.
What information do we collect and hold?
The personal data we collect is limited to:
- first name
- last name
- email address
- business IP address
Other business related data may also be processed including business name, job title, contact telephone number, business address, banking details and other technical information (such as login credentials) for carrying out our Support and Accounting services under the terms of the contract. However we will never collect further personal data such as those classed under ‘Special Category Data’.
Our typical segmentation includes Customers, Prospects, and those who have a likely interest in a particular product, service or associated subject matter. As Eurostop is an international Company, we may also segment by geographical location. We will only ever collect, process and store the essential information required for making contact with the data subjects within a business environment.
What do we do with the information we gather?
The data collected will be used to contact individuals or companies to communicate marketing and sales messages relating to Eurostop products and services. Eurostop only sends messages to those we believe are likely to be interested in Eurostop products, services and associated content based upon the organisation they are employed at or their job function.
Eurostop will also need to contact individuals or companies in order to support the products that it sells, provide the associated services and invoice as per the terms of its contracts with its customers.
How will we contact you?
Messages from Eurostop could be delivered via email, social media, via telephone, mail or any other business to business (B2B) marketing methods that may be relevant.
How have we collected your information?
When you send Eurostop an enquiry via our website you will be asked to provide your contact details. We will use the data you provide to process your request and may use it to inform you by email, telephone or mail about other Eurostop products and services that we feel may be of interest to you, it is deemed that as you have visited the Eurostop website and/or provided us with your contact information that you are legitimately interested in our products and services. You have the right to object from any method of correspondence at any time, using the unsubscribe button on an email, by informing the telephone operator or by contacting us via any of the methods below.
All data has been collected in line with the lawful basis of ‘Legitimate Interests’. If you have received correspondence from us, we will have collected your data in one of the following ways:
- You have requested information from Eurostop on a previous occasion
- Someone has sent us your e-mail address requesting information about our articles and/or services be sent to you
- You or someone else has expressly shared your contact details with us for the purpose of receiving information now and/or in the future
- We have previously met at an event and your business card or contact details were handed to us willingly
- You or a business colleague has visited our website and we believe that there is a genuine legitimate interest in our services
- You have previously connected with a member of our team via LinkedIn and discussed our services
- A member of our team has found your business and your contact details online, believing that your business would genuinely be interested in Eurostop’s products, services or associated marketing content, based upon your job function and business
What is our Lawful Basis for Processing?
As an organisation that processes business related data, Eurostop has assessed all six grounds for lawful processing of personal data under the GDPR 2018, and has selected ‘Legitimate Interests’ as the most suitable lawful ground for the processing of data for the purposes of Eurostop marketing, sales and providing its products and services.
Eurostop collects, processes and stores data relating to business contacts in the retail industry. We believe that the individuals that we process the data of, are likely to have an interest in Eurostop products and services, and associated subject matter related to the retail industry.
Legitimate Interest Assessment (LIA)
Eurostop has carried out Legitimate Interest Assessments (LIAs), as advised by the ICO, both for holding personal data for marketing and sales, and the processing required in the course of providing its products and services. Based upon that assessment it is deemed that the rights and freedoms of the data subjects would not be overridden when processing this data for either purpose, and that in no way would a data subject be caused harm by our correspondence.
Based upon our processing of personal data within the context of a business environment, we believe that any individual that receives correspondence from Eurostop in a direct marketing or sales capacity could be legitimately interested in the Eurostop solution and associated marketing content. It is also deemed that direct marketing and sales is necessary in the context of promoting Eurostop to business professionals in order to increase awareness of our solution and services in the marketplace.
It is also in the legitimate interest of our customers for us to use their personal data to provide contracted support services.
As per the ICO guidance, Eurostop can confirm:
- We have checked that legitimate interests is the most appropriate basis
- We understand our responsibility to protect the individual’s interests
- We have conducted a legitimate interests assessment (LIA) and kept a record of it, to ensure that we can justify our decision
- We have identified the relevant legitimate interests
- We have checked that the processing is necessary and there is no less intrusive way to achieve the same result
- We have done a balancing test, and are confident that the individual’s interests do not override those legitimate interests
- We only use individuals’ data in ways they would reasonably expect
- We are not using people’s data in ways they would find intrusive or which could cause them harm
- We do not process the data of children
- We have considered safeguards to reduce the impact where possible
- We will always ensure there is an opt-out / ability to object
- Our LIA did not identify a significant privacy impact, and therefore we do not require a DPIA
- We keep our LIA under review every six months, and will repeat it if circumstances change
- We include information about our legitimate interests in our privacy notice
How long do we keep data for?
Eurostop is committed to ensuring that the data that we hold is up-to-date and accurate. Eurostop continually cleanse the data held within our CRM system, completing a full cleanse cycle at least once every 12 months.
The data held for providing support and ancillary services is maintained as up to date and accurate during the continued process of providing this said support service.
We will take all reasonable steps to destroy or erase from our systems all data which is no longer required. We will keep your personal data for the duration of the account being active and for 5 years after our contract with you has terminated.
How do we store data, is it secure?
The data is processed and stored in the EU within a secure environment.
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have established suitable physical, electronic and managerial procedures to safeguard and secure the information we collect.
How can you object to processing of your data?
Request to Object
In all correspondence with you we will give you the right to object from receiving further marketing correspondence from Eurostop. On any emails you receive from Eurostop there will be the option to ‘unsubscribe’ from receiving any further email marketing correspondence of that nature. If you receive a telephone call from us, you have the right to request not to receive any further marketing calls. Your request to object will be logged within our system to ensure that you do not receive any further marketing calls.
Should you wish to object to receiving marketing communication from Eurostop, you can do so in a variety of ways:
- Please click the ‘unsubscribe’ link at the bottom of every email to stop receiving such marketing emails.
- If you have received a call, please tell the representative that you do not wish to receive any further marketing calls.
- Please call 0208 991 2700 and ask to speak with the GDPR Data Protection Team
You can also make your request by emailing:
Or by writing to:
Data Protection Team
West Africa House
London W5 3QP
All requests will be processed within one calendar month. Your details will be updated to ensure that your details cannot be processed by the Eurostop CRM system in the future. Please note this applies only to the processing of your personally identifiable data, not that of the business data which does not fall under the remit of GDPR.
Request for Erasure
It is important to understand the difference between a right to object and a request for deletion. If you make a request for deletion, we will remove any data we hold about you from the Eurostop CRM system. This will also mean that we will remove your details from the ‘objection to processing list’. If you are removed from this list, there is a risk that your data may be processed again in the future if your details are re-added to our CRM system by a member of our team who genuinely believes that your business would benefit from our software and services. If you do not wish for us to contact you again we would recommend you request to object rather than a request for deletion, as this will ensure that your details are always suppressed from processing.
The option however is yours, and in either case we will process your request within one calendar month.
You can request your information be erased by emailing:
Or by writing to:
Data Protection Team
West Africa House
London W5 3QP
Controlling your personal information
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so.
For questions relating to this policy, please contact firstname.lastname@example.org
Links to other websites
Our website may contain links to enable you to visit other websites of interest easily. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
Eurostop may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 18th May 2018.