Privacy Policy

This policy explains what personal data we process when you visit www.mapiholding.co.uk or write to us, why we process it, and what rights you have. It is written under the UK GDPR and the Data Protection Act 2018.

Who we are

The data controller is:

What data we process

This is an informational website. It has no registration, no user accounts, no comments and no newsletter. In practice we process the following.

• Technical log data. Like any web server, ours records the IP address of visitors along with the date and time of the request, the page requested, the browser and operating system in use, and the referring page. This happens automatically, whether or not you interact with the site.
• Correspondence. If you write to us at the address above, we process your email address, your name if you give it, and whatever you choose to include in your message.
• Consent preferences. A single cookie records the choice you make about cookies. It stores no personal information. See our Cookie Policy.

Why we process it, and on what legal basis

• Log data is processed for the security, stability and correct operation of the site, on the basis of our legitimate interests (Article 6(1)(f) UK GDPR) in keeping the site available and protecting it from abuse.
• Correspondence is processed in order to answer you, on the basis of our legitimate interests in responding to enquiries, or of steps taken at your request before entering into a contract (Article 6(1)(b)) where that applies.
• The consent cookie is processed on the basis of our legal obligation to record your cookie choice.

We do not use your data for automated decision-making or profiling, and we do not send marketing.

Who we share it with

We do not sell or trade personal data. It is accessible to the suppliers who operate the site and our email on our behalf, acting as processors under contract:

• Aruba S.p.A. (Italy), which hosts the website and operates our email service;
• Google Ireland Ltd., whose font service delivers the typefaces used on these pages. Loading them passes your IP address to Google. No cookie is set. See Google's privacy policy.

We may also disclose data where we are required to do so by law, or to establish or defend a legal claim.

Transfers outside the UK

Our hosting and email are provided from Italy, and the font service is operated from Ireland. Both are in the European Economic Area, to which personal data may be transferred from the United Kingdom under the adequacy regulations made by the Secretary of State. No further safeguard is required for these transfers.

How long we keep it

• Server logs: for the period applied by our hosting provider, [confirm the exact retention with Aruba].
• Correspondence: for as long as needed to deal with your enquiry, and afterwards for as long as a business or legal reason requires.
• Consent cookie: one year, or until you clear it.

Your rights

You have the right to ask us for access to your personal data, and for its rectification or erasure; to ask us to restrict how we use it; to object to processing carried out on the basis of legitimate interests; and, where it applies, to receive your data in a portable format. Where we rely on consent, you can withdraw it at any time without affecting what was done beforehand.

To exercise any of these, write to info@mapiholding.co.uk. We will reply within one month.

Complaints

If you believe we have handled your data improperly, we would rather hear from you first. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk.

Changes to this policy

If we change how the site handles personal data, we will update this page and the date shown at the top.