Legal
Privacy notice
How Liwathon Group uses personal information when you visit this website, contact us or apply for a job with us, and the rights you have.
Last updated:
This privacy notice explains how Liwathon Group collects, uses and protects your personal information when you use this website, send us an enquiry or apply for a job with us. It also tells you about your privacy rights and how the law protects you.
We use personal information only to deal with your enquiry or application and to run this website safely. We do not sell it, and we do not use it for advertising.
Key terms
In this notice:
- Liwathon Group, we, us, our
- Liwathon Group Limited and its subsidiaries, including the Group companies listed on our Company information page.
- Group company
- Liwathon Group Limited or any of its subsidiaries.
- Personal data
- Any information that relates to an identified or identifiable individual. We also call it personal information.
- Website
- This website, accessible from www.liwathon.com.
- Usage data
- Information collected automatically when you use the website, such as your IP address and the pages you visit.
- Cookies
- Small files that a website places on your computer, phone or other device.
- Service provider
- A company that processes personal data on our behalf, for example to host the website or run our email.
- You
- The individual using the website or contacting us, or the company or other organisation on whose behalf that individual is acting.
Who is responsible for your data
Liwathon Group Limited, the parent company of Liwathon Group, operates this website. It is the controller of the personal data collected through the website, which means it decides how that data is used and is responsible for protecting it.
Each Group company is also the controller of the personal data it handles for its own business, such as enquiries about its services and applications for its own vacancies. For example, if you ask about oil storage in Estonia, AS Liwathon E.O.S. is responsible for your details.
The details of each company are on our Company information page. For any question about your personal data, write to info@liwathon.com and we will pass your message to the right company.
Information we collect
When you contact us
If you use our contact form or email us, we collect your name, your email address and your message. If you choose to give them, we also collect your organisation, your phone number, the type of enquiry and anything you attach.
When you apply for a job
Our job adverts ask you to apply by email. We collect what you send us, usually your CV, a cover letter and your contact details. If you go further in our selection process, we also keep interview notes and, where the law requires it, the results of checks such as your right to work.
When you visit the website
Like any website, our web server automatically records technical information each time a page or file is requested. This usage data includes your device’s IP address, your browser type and version, your operating system, the page requested, the page you came from, and the date and time of the request.
We do not use tracking pixels, advertising tools or social media plug-ins on this website.
Sensitive information
Please do not send us sensitive information, for example about your health, unless we ask for it.
How we use your information
We use your personal data only for the purposes below. Data protection law requires us to have a lawful basis for each one.
To answer your enquiry
We use your details to reply to you, follow up and keep a record of our correspondence.
Lawful basis: our legitimate interest in responding to people who contact us and in running our business; or, where you ask about a service or contract, taking the steps you request before a contract is made.
To consider your job application
We use your application to assess whether you suit the role, to arrange interviews and to make a decision.
Lawful basis: taking the steps you request before an employment contract is made; our legitimate interest in recruiting the right people; and our legal obligations as an employer.
To run and protect the website
We use usage data to keep the website working and secure, to find and stop misuse, and to produce anonymous visitor statistics, such as how many times a page was viewed.
Lawful basis: our legitimate interest in providing a secure, working website.
To meet legal obligations and protect our rights
We may use personal data to comply with the law, to respond to authorities and to establish or defend legal claims.
Lawful basis: legal obligation; our legitimate interest in protecting our business.
With your consent
For example, if you agree that we may keep your CV on file for future vacancies.
Lawful basis: your consent, which you can withdraw at any time.
Where we rely on legitimate interests, we have weighed them against your interests and rights. You can object at any time (see Your rights).
International transfers
Liwathon Group companies are based in several countries, including the United Kingdom, Estonia (in the European Union), Guernsey, The Bahamas and Brazil, and our service providers may be based elsewhere. Your personal data may therefore be processed outside the country where you live, where data protection laws may differ from those in your country.
When we transfer personal data, we make sure it stays protected as the law requires. We transfer it only to countries recognised as giving adequate protection, or with appropriate safeguards in place, such as contract terms approved for this purpose. We will take all steps reasonably necessary to make sure your data is treated securely and in line with this notice.
How long we keep it
We keep personal data only for as long as we need it for the purposes in this notice, and as long as the law requires.
- Enquiries: for as long as we need to deal with your enquiry and any follow-up, and then in line with our normal record-keeping. If your enquiry leads to a contract, we keep the contract records for as long as the law requires.
- Job applications: if you are not successful, we keep your application only as long as the law allows. In Estonia, this is no more than one year after the recruitment ends, unless you agree in writing that we may keep it longer. If you join us, your application becomes part of your employee record.
- Server records (usage data): for a short time, and then deleted, unless we need them longer to investigate a security problem. The visitor statistics we produce from them are anonymous.
Your rights
Depending on where you live and which law applies, you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct personal data that is wrong or incomplete;
- ask us to delete your personal data;
- ask us to restrict how we use your personal data, or object to our use of it, including where we rely on legitimate interests;
- ask us to send the personal data you gave us to you, or to another organisation, in a common electronic format;
- withdraw your consent at any time, where we rely on consent. This does not affect anything we did before you withdrew it.
To use any of these rights, write to info@liwathon.com. We may need to confirm your identity first. We will reply within the time the law allows, normally one month.
Please note that we may need to keep certain information when we have a legal obligation or lawful basis to do so.
Complaints
If you are unhappy with how we have used your personal data, please tell us first at info@liwathon.com, so that we can try to put it right. We will acknowledge your complaint within 30 days and tell you the outcome.
You also have the right to complain to a data protection authority, in particular in the country where you live or work, or where you think the problem happened. For example:
- United Kingdom: the Information Commissioner’s Office (ICO), ico.org.uk
- Estonia: the Data Protection Inspectorate (Andmekaitse Inspektsioon), aki.ee
- Guernsey: the Office of the Data Protection Authority, odpa.gg
- The Bahamas: the Office of the Data Protection Commissioner
When we must disclose information
Business transactions
If a Group company is involved in a merger, reorganisation or sale of assets, personal data may be transferred as part of it. We will give notice before your personal data is transferred and becomes subject to a different privacy notice.
Law enforcement
In some circumstances, we may have to disclose personal data if the law requires it, or in response to valid requests from public authorities, such as a court or a government agency.
Other legal requirements
We may disclose personal data in the good-faith belief that this is necessary to:
- comply with a legal obligation;
- protect and defend the rights or property of Liwathon Group;
- prevent or investigate possible wrongdoing in connection with the website;
- protect the personal safety of users of the website or the public;
- protect against legal liability.
Security
The security of your personal data is important to us. We use appropriate technical and organisational measures to protect it, and we limit access to the people who need it. However, no method of sending data over the internet, or of storing it electronically, is completely secure, so we cannot guarantee its absolute security.
Links to other websites
Our website contains links to websites that we do not operate, such as map services. If you follow one of these links, you will go to that website, and its own privacy notice applies. We advise you to read the privacy notice of every website you visit.
We have no control over, and accept no responsibility for, the content, privacy notices or practices of other websites or services.
Changes to this notice
We may update this privacy notice from time to time. Changes take effect when we publish them on this page, and the date at the top of the page shows when the notice was last updated. Please check it from time to time.
Contact us
If you have any questions about this privacy notice or about your personal data, please contact us by email at info@liwathon.com.
You can also write to Liwathon Group Limited at its registered office, shown on our Company information page.