Privacy Policy

Corporate Rewards Limited (“we”), NetApp and Arrow ECS are committed to maintaining your privacy and protecting your information when you visit and/or use this site. This Privacy Policy explains how we will use and protect your information.

Who is the Data Controller?

The Data Controller for this program is Arrow ECS, with registered office at Nidderdale House, Beckwith Knowle, Otley Road, Harrogate HG3 1SA (“Arrow ECS”)

The contact details for the Data Protection Officer are:

Dr. Gregor Scheja, Scheja & Partner Rechtsanwälte
Attorneys at Law and External Data Protection Officers
Adenauerallee 136
53113 Bonn
Germany
tel.: +49 228 227 226-0
fax: +49 228 227 226-26
e-mail: info@scheja-partner.de
Homepage: http://www.scheja-partner.de/

How do we use your personal data

Personal data is only collected on this website with your prior permission, and is used for the execution of the contract of services. Your name, email address and other relevant information will be used to create a user account and enable us to provide you with the program services. Your DOB and address will be collected in order to issue prepaid card prizes, check eligibility and to expedite shipment. 
Personal data will only be used to fulfil the specific purposes of the program and associated activities, including but not limited to account management, fulfilment of rewards and communications.

We may change this policy from time to time by updating this page. You are advised to check it from time to time in order to ensure that you are aware of any changes and that they are acceptable to you.

What do we do with your information?

We may use information about you only for any of the following purposes:

  • To register you on our website and to administer the program website and services;
  • For assessment and analysis of the program performance and reporting to Arrow ECS and NetApp;
  • To enable us to monitor, review and improve the products and services which we offer; and
  • For internal statistical user reporting

We will never share your personal information with any other third party, unless we have informed you of the need to do so and obtained your specific written consent.

How do we collect that information?

We collect information about you using various methods including:

  • When you submit it through this website;
  • From information held and supplied by Arrow ECS; and
  • When you telephone us or correspond with us by means other than through this website.

We may combine information that we collect about you through this website with information that you provide to us by other means.

How long do we keep your personal information for?

We will retain your personal information for the period that you are registered with this program.  Thereafter your data will be retained for 6 months to enable an orderly close of the program for Arrow ECS and your transactional data for a period not exceeding 2 years.  Thereafter, your personal information and data will be irretrievably deleted.

We will retain personal data essential for legal or regulatory purposes for the duration of the relevant requirements.

To whom do we disclose your information?

We will not disclose to any third parties, personal information data which relates to you without your prior consent, except:

  • To Arrow ECS and NetApp as defined above;
  • Where it is necessary to enable any of our staff, employees, agents, contractors, suppliers or commercial partners to provide a service to us or to perform a function on our behalf (including fulfilling orders for products or services, supplying products or services that we provide on behalf of Arrow ECS and as part of this program, and in the case of scratchcards);
  • Where we have justifiable reason to consider disclosure of your information to other businesses, financial organisations or law enforcement agencies to be necessary or desirable with a view to the prevention or detection of fraud, or if we are required to or are permitted to by law.

Your information will be stored and processed within the EU. In the event that any of the above involve the transfer of your personal information to a country outside of the EU, or to a non-EU-approved country, we will ensure commercially reasonable safeguards are in place with that third-party to protect your data to a level at least commensurate with that provided under the GDPR.

What rights do you have?

You have the following rights:

  • The right to be informed. This privacy policy meets those rights;
  • The right of access. You have the right to access the personal data that we hold about you;
  • The right of rectification. You have the right to inform us of any changes to your personal information if it is inaccurate or incomplete;
  • The right of erasure. You have the right to request the deletion or removal of personal data where there is no compelling reason for its continued processing;
  • The right to restrict processing. You can request that we continue to store your personal data, but not to further process it;
  • The right to data portability;
  • The right to object. You have the right to object to processing on legitimate interests; and
  • The right to lodge a complaint with a supervisory authority. The supervisory authority for the UK is the Information Commissioners Office (ICO). www.ico.org.uk / 0303 123 1113.

To exercise any of these rights, or in the event of a complaint, please contact the Data Protection Officer, Corporate Rewards Limited, 20 Timothy's Bridge Road, Stratford-upon-Avon CV37 9BF, or email DPO@corporaterewards.co.uk. We will verify your identity and will not be able to provide information until we are satisfied that you have a right to this information. Any information will be provided to you within 30 days unless in exceptional situations where we may advise you of an extension of up to 60 days.

Cookies

What are cookies?

Cookies are text files containing small amounts of information which are downloaded to your device when you visit a website. The website that created the cookie can then access it at a later time to recover the information, for example for use on a different page.

Our use of cookies

We use our own and third-party cookies to enable you to experience the website, for functionality purposes, and for reporting purposes to Arrow ECS.

Cookies are used both pre- and post-log in and the cookie is given a life based on system requirements, after which it expires.

Further information can be found at https://ico.org.uk/for-the-public/online/cookies.​