Controller

Phorest Diagnostics LTD
Department Of Physics University Of York
Heslington, York
North Yorkshire
England
YO10 5DD

The controller determines, alone or in cooperation with others, the purposes and means of processing personal data (e.g., names, contact details, etc.).

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You can withdraw consent at any time. The legality of the data processing carried out until the withdrawal remains unaffected.

Right to Object to Data Collection in Special Cases and to Direct Marketing

If data processing is based on legitimate interests (Article 6(1)(f) UK GDPR), you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes. If you object, your personal data will no longer be used for direct marketing purposes.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the UK GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, workplace, or the place of the alleged infringement.

Right to Data Portability

You have the right to receive data that we process based on your consent or in the performance of a contract in a commonly used, machine-readable format, or to request that the data be transferred to another controller, where technically feasible.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the lock symbol in your browser bar. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Access, Deletion, and Correction

Within the framework of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients, and the purpose of the data processing, and, if necessary, the right to correct or delete this data. You can contact us at any time at the address provided in the legal notice for further questions on the subject of personal data.

Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time at the address provided in the legal notice. The right to restrict processing applies in the following cases:

1. If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.

2. If the processing of your personal data was unlawful, you may request the restriction of data processing instead of deletion.

3. If we no longer need your personal data, but you require it for the establishment, exercise, or defense of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.

4. If you have objected, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data – apart from its storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person, or for reasons of important public interest.

Hosting

We use Webflow as the hosting provider for our website. Webflow is a service provided by Webflow Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA.
‍
Webflow provides us with storage space and processing capacity and processes personal data of visitors to our website on our behalf. This is done based on a data processing agreement with Webflow, as well as a contract using the EU Standard Contractual Clauses.
‍
Webflow uses a global network of servers to deliver our website quickly and securely. The servers are located, among other places, in the USA.
‍
Webflow has joined the EU-US Privacy Shield and has thus committed to maintaining an adequate level of data protection. Further information on Webflow's data protection can be found here: Webflow EU & Swiss Privacy Policy.

Cookie Notice

This website uses a cookie (__cf_bm) provided by Cloudflare. This cookie is essential for the security of our website and is used to distinguish between humans and bots. It helps protect our website from harmful traffic and ensures the proper functioning of our services. The cookie does not store personal data and expires after 30 minutes.

Contact Form

If you send us inquiries via the contact form, your details from the form, including the contact details you provide, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
‍
The processing of this data is based on Article 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, the processing is based on your consent (Article 6(1)(a) GDPR) and/or our legitimate interests (Article 6(1)(f) GDPR), as we have a legitimate interest in the effective processing of inquiries addressed to us.
‍
The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions, especially retention periods, remain unaffected.