[email protected] +44(0)1709 559 668 Apply for Account
Linkedin-in
Quick Links

Privacy Policy

1. General Information

Below we inform you about the details of data protection when visiting our website.

The use of our website is generally possible without providing personal data.

If personal data is collected when you visit our website, we process it exclusively following the Swiss Federal Act on Data Protection (FADP), the General Data Protection Regulation of the European Union (GDPR) and the UK Data Protection Act, to the extent applicable.

The processing of personal data is carried out exclusively as per this privacy policy.

This privacy policy applies to the use of the websites at the addresses https://www.wolffonsite.co.uk and the various subdomains. For linked content from other providers, the privacy policy on the linked website is authoritative.

We would like to point out that security gaps may occur during data transmission via the Internet, which cannot be prevented by the technical design of this website. A seamless protection of personal data is not possible when using the Internet.

 

2. Responsible Bodies

Responsible for the processing of personal data in the context of the use of this website:

WOLFF Onsite Ltd.
Board of Directors: Duncan Salt, Richard Coughtrey and Florian Berthoud

Address: Grange Mill Lane, Sheffield, South Yorkshire, S91HW
Phone: +44 1709 55 96 68
Email: [email protected]

 

3. Hosting

Our website is hosted by Cloudflare, with servers and hosting infrastructure located in London, United Kingdom. The website domains are also registered with Cloudflare, which ensures robust routing and security for web traffic. The hosting server is provided by DigitalOcean via Cloudways, operating from a London-based data center. All traffic is routed through Cloudflare Enterprise, which acts as a Web Application Firewall (WAF) and provides enhanced security features, including load balancing to manage site traffic efficiently and safeguard user data.

 

4. SSL encryption

This site uses SSL encryption (via Cloudflare) to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. When SSL encryption is activated, the data you transmit to us cannot be read by third parties (end-to-end encryption). The protocols authenticate the communication partner and ensure the integrity of the transmitted data.

 

5. When might we collect your personal data?

 

a) When you visit our website

We use the following google products: GA4, Google Tag Manager, Google Search Console, to collect standard internet information and details of visitor behaviour patterns. We do this so that we can find out things such as how many people have visited our websites and which parts of the websites they looked at and interacted with. We only process this information in a way that does not directly identify anyone. If we do need to collect your personal data through our website, for example if you enter your details and ask us to contact you, we will be very clear about what information we are collecting and what we intend to do with it.
When accessing our website, we will process data in server log files. This data derives from your computer equipment and may include personal data. We process the following data:

This processing activity is necessary to ensure the operation of our website, to optimise the content and deliverability of our website, and to provide the necessary information to public bodies in case of a cyber-attack. The legal basis for processing this data is our legitimate interest.

 

Information on Google services

We use various services of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland on our website.

As a result, Google may receive information from you. It cannot be ruled out that Google will also transmit the information to a server in a third country.

We have concluded an order processing agreement with Google for the transfer of personal data. If data is transferred to third countries in which an adequate level of data protection cannot be guaranteed, we have concluded EU standard data protection clauses with Google in accordance with Art. 46 GDPR.

Google has undertaken to comply with the standard contractual clauses for the transfer of personal data to third countries in accordance with Directive 95/46/EC (Standard Contractual Clauses - SCC).

You can find more information on this at: https://policies.google.com/privacy/frameworks?hl=en

We cannot influence what data Google collects and processes. Google states that the following information (including personal data) may be processed:

If you are logged into your Google account, Google may link the processed information to your account depending on your account settings. You can find further information on this from Google at https://policies.google.com/privacy?hl=en-GB

You can prevent this by logging out of your Google account or by making the appropriate account settings in your Google account. Furthermore, you can prevent the installation of cookies - if Google sets any - by making the appropriate settings in your browser; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent.

You can find more information in Google's privacy policy, which you can access here: https://policies.google.com/privacy?hl=en-GB

 

Tracking and Cookies

Our website uses cookies and similar technologies to improve functionality, support eCommerce features, and gather valuable analytics insights. To respect user privacy, we have implemented CookieYes, a consent management tool that displays a cookie consent bar when you visit the site. This ensures no cookies are loaded onto your device without your approval. The cookie consent bar includes a link to our detailed cookie policy, where you’ll find a comprehensive list of all cookies in use, their purposes, and their impact on your browsing experience.

Cookies support essential site features such as:

For analytics and personalisation, cookies help us understand how visitors interact with our site, enhancing the user experience. Our legal basis for processing this data is your consent, which you can manage or withdraw anytime through your tracking settings or browser options.

 

b) When contact us via contact forms/email

You can contact us on our website using the contact form or by e-mail.

In this context, your details from the corresponding form or e-mail, including the contact details you provide there, will be stored and processed by us to process the enquiry and in the event of follow-up questions. This data (e.g. surname, first name, email address, IP address) will not be passed on to third parties without your consent. The data will not be merged with other data collected on this website.

The data may be stored as part of customer relations management (CRM) if you are already a customer of our company.

The contact form is sent encrypted using SSL technology. The encryption serves to prevent unauthorised access to your personal data by third parties.

This data is processed based on Art. 6 para. 1 sentence 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us.

The data you provide will remain with us until you ask us to delete it, you object to the processing or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.

 

c) When you apply for a credit account on our website

To create a credit account with WOLFF Onsite, you will need to complete a credit application form. This form collects essential business information, including:

Please be assured that this information is solely for conducting the credit check and will not be merged with any other data collected on this website. The data collected through the credit application will be stored and processed strictly to evaluate credit eligibility, address any follow-up questions, and complete the account setup process. We will not pass this information to third parties without your consent, ensuring your data is handled securely and responsibly.

 

d) When you buy products or services from us over the phone

We will only collect the personal data that we need to complete the transaction with you and the bases for processing your personal data would be because there is a contractual need to do so, and it is in our legitimate interests.

 

e) When you respond to any of our social media postings or campaigns

We rely on consent and legitimate interests for processing your personal data in this situation. If you follow us or interact with us on any of our pages on social media platforms such as LinkedIn, any information you provide will be subject to our privacy notice as well as the privacy notice of the social media platform. We strongly advise you to check the privacy policies of the social media platforms to ensure that you know what they can do with any personal data you provide them with.

 

f) When any of our suppliers or business partners share your information with us

This might be in situations such as when our delivery partners asks you to sign to accept delivery of something that you have ordered from us. We would ask for your personal data to be shared with us because it would be in our legitimate interests.

 

g) If you have contacted us asking for information about any of our products or services

We rely on consent for processing your personal data when you have contacted us.

 

h) If you apply to work with us

We will collect personal information about candidates from a variety of sources including you, recruitment agencies, your referees, and any DBS background check provider (if you are applying for a role where we require a DBS check).

For this purpose, we accept digital applications, regardless of whether you are applying for a position advertised by us or whether it is an unsolicited application. The separate data protection information for applicants can be found at this link: https://www.wolffkran.com/website/en/ch/company/career/jobs.

 

6. The types of personal data we collect

We will never ask you for information that is not essential. The personal data we might ask for includes:

We may also ask for the following “special categories” of more sensitive personal information including:

 

7. What will we use your data for?

To be able to maintain our relationship with you we might need to store or process the personal data you have provided us with, or we might need to pass it on to one or more of our business partners so that we can meet your requirements more effectively. We may also use your data to improve our products or to inform you of special offers. Your personal data will only ever be used for the purposes of customer management, product surveys or marketing to the appropriate degree. We will not sell your data in any way to third parties. If we do have to use the services of third parties, e.g. for marketing and advertising products, we will make sure that they have security measures in place to keep your data safe.

The sorts of organisations we might share your personal data with include:

Where we do share your data, we provide only the information that is needed for the specific purpose and the person that we share your information with will only be able to use your data for that specific purpose. The third parties will be people we trust to ensure that your privacy is respected at all times and if we stop working with them, they will be expected to delete your data or make sure that it is anonymised.

We will only pass your data to third parties for their own purposes if you have expressly given us permission to do so unless we have a legal obligation to share information such as with the police or other regulatory or Government bodies.

Where we have your personal data as part of our recruitment process, we will use your personal data to assess your skills, qualifications, and suitability for the role you have applied for and to carry out checks and references. We will also use it during this process to communicate with you, to keep records about the hiring process and to comply with legal or regulatory requirements. During the recruitment process we rely on legitimate interests as a reason for processing your personal data. If we ask you to provide sensitive personal information during the recruitment process this will be used only in the following ways:

 

8. The legal reasons for collecting your personal data

Data protection laws allow companies to collect your personal data for several different reasons. We will only collect your personal data if we have a legal reason for doing so. This might be one or more of the following:

 

9. How we keep your personal data safe

We will always treat your personal data with absolute respect and care. We will make sure that our websites and apps are secure by using appropriate technical and organisational
measures across all brands including up-to-date encryption, restricted access to the data that we hold and conducting regular software updates.

All our employees have been briefed on data protection laws and are contractually obliged to protect your personal data. We have made sure that all our suppliers and business partners have a legal obligation to be as diligent as we are about protecting your personal data.
We will never keep your personal data for any longer that we need to. We have reviewed our processes to make sure that when we no longer need your personal data for the purpose for which it was collected, we will delete it from our systems.

 

10. Transferring your personal data outside the UK

We transfer the data within the EEA and to Switzerland, for which an adequate level of data protection has been confirmed. A transfer takes place exclusively to fulfil the purposes for which the data was collected. We may share your data in the following situations:

 

11. Social Network Profiles

Our presence on social networks and video platforms, which we mention below, serves the purpose of active and up-to-date communication with our customers, and interested parties. We use them to provide information about our services, products and interesting special offers relating to our company and our services.

In the following, we provide you with the data protection information for the social media sites operated by us:

LinkedIn (company profile)
We use the professional and career network "LinkedIn" for recruitment purposes and to maintain a company profile there. LinkedIn is operated by LinkedIn Corporation, 1000 W. Maude Ave, Sunnyvale, California 94085 USA, or if you have your registered office or place of residence in the EU, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn").

When you visit our company profile on LinkedIn, your data may be automatically collected and stored by LinkedIn for market research and advertising purposes as well as for the placement of job offers that may be of interest to you. This data is used to create so-called usage and interest profiles using pseudonyms. Cookies are generally used on your end device for this purpose.

You will be informed about the function of cookies as part of LinkedIn's privacy policy and cookie policy, so please refer to the relevant information there. Visitor behavior and user interests are stored in these cookies.

We also use the data collected to statistically analyse which groups of people are interested in our company website. The data is processed in such an anonymised form that it cannot be traced back to individual people for statistical evaluations, which may contain information on the approximate geographical location or age group and other summarised characteristics.

If LinkedIn asks you for your consent to data processing, e.g. using a checkbox, the legal basis for data processing is your consent.

You can revoke your consent at any time with effect for the future, whereby you must contact LinkedIn to do so. Data processing carried out up to the time of revocation remains lawful.

For detailed information on the processing and use of data by LinkedIn as well as a contact option and your rights in this regard and setting options to protect your privacy, please refer to LinkedIn's data protection information, which you can find at the following link: https://www.linkedin.com/legal/privacy-policy?src=li-other&veh=de.linkedin.com%7Cli-other

You can find LinkedIn's cookie policy at the following link: https://www.linkedin.com/legal/cookie-policy?

Data processing is carried out based on an agreement between jointly responsible parties, which you can view here: https://legal.linkedin.com/pages-joint-controller-addendum

Irrespective of the internal responsibilities agreed between us and LinkedIn, you can contact us or our data protection officer as well as LinkedIn with all data protection enquiries.

We have concluded standard data protection clauses with LinkedIn within the meaning of Art. 46 para. 2 lit. c GDPR.

 

12. Your rights and assertion of rights

You are entitled to the rights listed below. You can assert these rights against us. To assert your rights, please contact us by email at [email protected].

 

a. Information

You have the right to request information about your data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to complain, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.

 

b. Correction

You have the right to demand the immediate correction of incorrect or incomplete personal data stored by us.

 

c. Cancellation

You have the right to request the erasure of your data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or the establishment, exercise, or defence of legal claims.

 

d. Restriction of processing

You have the right to demand the restriction of the processing of your data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing under Art. 21 GDPR.

 

e. Data portability

You have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.

 

f. Revocation of your consent

You have the right to revoke your consent at any time. The consequence of this is that we may no longer continue the data processing that was based on this consent in the future. The revocation of consent does not affect the lawfulness of processing based on consent before its revocation.

 

g. Right of objection

You have the right to object, on grounds relating to your situation, at any time to the processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.

The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

If your data is processed for direct marketing purposes, you have the right to object at any time to the processing of your data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

Notwithstanding Directive 2002/58/EC, you have the option of exercising your right to object in connection with the use of information society services using automated procedures using technical specifications.

 

h. Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for the conclusion or performance of a contract between you and the controller, is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or is based on your explicit consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a) or g) GDPR applies, and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

 

i. Complaint to a supervisory authority

You have the right to complain with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

 

13. Status of data protection notes

 The constant development of the Internet makes it necessary to adapt our privacy policy from time to time. We reserve the right to make corresponding changes at any time.