| Data Processing Type |
Purpose |
Other Parties |
Risk
Level |
Safety Precautions & Consent (if applicable) |
Deletion Policy |
1. Cookies delivered on our
website, linked to Google Analytics, Google 360, Criteo, Adroll, Wired Marketing, Cloud-IQ, PayPal (see
cookie policy) |
Aggregated customer and behaviour analysis to improve website and content. Aggregated profiling for targeting |
Proprietory third party scrips are applied to the website for Google, Criteo, Adroll, Wired Marketing, PayPal and Cloud-IQ |
Low |
Cookies are not personnally identifiable through the interfaces.
A data protection policy / cookie
policy with implied consent is in place. Data collected is purely for processing transactions of packaging, and therefore not of a sensitive personal nature |
Remarketing cookies set to 30 - 90 days. Analytics set to 26 weeks |
| 2. Contact information within transactions, name, job role, telephone, email. For the purpose of completing the transaction, including delivery by third party |
Order and enquiry processing. Customer deliveries |
DX freight, PMB, drop ship suppliers |
Low |
Information exchanged is limited to fulfilling the transaction. Our terms and conditions of supply include relevant data protection conditions. Data is not of a sensitive personal nature and used only for transactional purposes |
After the transaction is completed, except when required for accounting/ legal reasons |
| 3. Payment information |
To complete transactions |
Verifone |
Low |
Card data is encrypted and not
stored in the 3ex system. Verifone
is compliant on processing security. Data is soley for transactional purposes |
Not applicable, as not stored |
4. Queries of customers based on transaction history to extract names and email addresses for email marketing. Both manual
and automated processing. |
Keeping customers informed about products, offers and reminders. Delivery of incentives of benefit to repeat customers |
Wired Marketing, Cloud-IQ & PayPal |
Low |
Data is only processed for customers who have provided consent via our double opt in procedure and been made aware
of our data protection policy. Data processing is limited to authorised users. Processing is logged and
stored and password protected in
a folder with restricted access |
Within 30 days of the campaign / live records are stored securely in the Wired Marketing database for the purposes of managing consent and opt-out. Our terms and conditions of supply include relevant data protection conditions |
5. Processing customer data for recent transactions in order to gain feedback and reviews, which are openly published on
Trustpilot (automated) |
Providing information to customers from other customers on their purchasing experience |
Trustpilot |
Low |
Information is limited to contact details and transaction reference.
Our terms and conditions of supply include relevant data protection conditions. Data is not of a sensitive personal nature |
Within 30 days / except when required for accounting/ legal or contractual reasons |
6. Completing customer enquiries, using contact information
provided on online chat |
To complete enquiries, or follow up suggestions and quotations to ensure that the customer has all information needed / an adequate solution |
Intercom |
Low |
Information exchanged is limited
to fulfilling the transaction eqnuiry. Our terms and conditions of supply
include relevant data protection conditions. Data is not of a sensitive personal nature and used only for enquiry management purposes |
Within 9 months / except when required for accounting/ legal or contractual reasons |
7. Queries of customers based on transaction history to extract names and addresses for mailing, primarily catalogues. Both
manual and automated processing. |
Keeping customers informed about products, offers and reminders. Delivery of incentives of benefit to repeat customers |
GD Web Offset |
Low |
Data is processed only for company customers (not private individuals)
to support transactions under
legitimate interest targeting companies with an established or likely recurring need for packaging. Information is limited to contact name, job and company address. Data is not of a sensitive personal nature |
60 days / once returns and gone-aways have been processed |
8. Queries of customers based on transaction history to extract names and contact information
for account management by our sales team |
To assign customers the appropriate service support and establish personal contact where appropriate |
|
Low |
Data is processed only for company customers (not private individuals)
to support transactions or under legitimate interest to offer companies with an established or likely recurring need for packaging, improvement solutions |
Deleted and reprocessed every 12 months or earlier |
| 9. Ratioform cube extract of companies, contacts and transactions |
Group reporting purposes |
Ratioform (parent company) |
Low |
Processed for reporting purposes
only under legitimate interest, and
to support financial controlling and reporting. Ratioform shares the same TAKKT Data Protection Guidelines as Davpack |
After 6 years / or as required by law and compliance purposes |
| 10. Working files for quotes and tenders |
Produce tailor-made products and supply arrangements. Retain a documented reference point for complex orders |
|
Low |
Files are stored in locked cabinets/filing systems. Data is not
of a sensitive personal nature |
Files are destroyed if the customer has not ordered for 2 years |
| 12. Credit reports and references |
To approve and renew company customers' credit account applications |
|
Low |
Stored in a restricted access locked cabinets/folders with restricted
access |
After 24 months unless the account is still active |
| 13. Auditing and legal compliance |
Samples of transactions for auditors, tax inspectors or compliance reasons |
Auditors,
authorities |
Low |
Comply with our Supplier
Management Policy and/or are official authorities |
At the end of the purpose required, e.g. upon completion of the audit or minimum retention period required by law |