Privacy Policy

PRIVACY POLICY – GREG CORCORAN IP

This privacy policy statement summarises when and how your personal data is collected, used, secured and disclosed in connection with services of Greg Corcoran IP (‘we’ or ‘us’), including the use of our website.

We take your privacy very seriously and we ask that you read this privacy policy carefully as it contains important information on:

• the personal information we collect about you;
• what we do with your information; and
• who your information might be shared with.

We may change this privacy policy from time to time. You should check this policy occasionally to ensure you are aware of the most recent version that will apply during the supply of our services. The most recent version of this privacy policy will be on website).

1) Who we are

Greg Corcoran IP are a ‘data controller’ for the purposes of the applicable data protection legislation. Greg Corcoran IP operates from the Netherlands and has business activity in the UK. As such, the applicable data protection legislation for:

• data subjects in the UK, includes the Data Protection Act 2018, the General Data Protection Regulation (EU) 2016/679 as transposed into UK law pursuant to the European Union (Withdrawal) Act 2018 (“UK GDPR”), and any subsequent UK data protection legislation; and
• data subjects in the European Economic Area (including those in the Netherlands) includes the General Data Protection Regulation (EU) 2016/679 (“EU GDPR”) and any subsequent data protection legislation, as well as any applicable local law in the relevant member state.

We are responsible for, and control the processing of, your personal information.

Any enquiries about our use of your personal data should be addressed to the contact details below (see ‘How to contact us’).

2) Who does this privacy policy apply to?

This privacy policy applies to any individuals whose personal information we process during the course of business, which includes:

• Website visitors;
• Our prospective clients and recipients of our marketing communications;
• Our clients;
• Our suppliers, service providers, agents, and subcontractors;
• Individuals whose details are available from third party sources, including the national and transnational intellectual property offices and related public databases; and
• any individuals whose data we may receive from any of the above for the purposes of operating our business and providing our services.

If you are unsure how this policy applies to you, please contact us (see ‘How to contact us’ below).

3) What information do we collect and process?

a) Personal information provided by you

During the course of accessing our website, using our services, contacting us, providing services to us, or otherwise dealing with us, you may provide us with a range of personal data which we will use in the course of our business. This personal information may include:

• Your name or another unique identifier (or to the extent in which the same is included within your business name, business contact details or other commercial identifier);
• Your address and correspondence details;
• Your contact details (which may include your landline telephone number, mobile number, and/or email address);
• Payment or other financial details for your business (e.g. payment card information, bank information, VAT number and invoice address); and
• Other related information.

b) Information we collect automatically

Our website and services may collect certain information about you automatically (such as your IP address, geographical location, browser type and version, operating system).

c) Personal information provided by third parties

Occasionally we may receive information about you from other sources (such as our suppliers, national or transnational intellectual property offices or clients), which we will add to the information we already hold about you in order to help us operate our business effectively and provide our services to our clients.

There are occasions where we are supplied with personal data from third parties which we do not hold or process as a controller. This would be where we are given information about an individual for a specific purpose as a processor – for example, where we are given details pertaining to the inventor for the purposes of a patent application being made on our client’s behalf. As we are, in those circumstances, acting as a processor, those individuals are not covered under the scope of this policy. If you are unsure whether this policy applies to you, please contact us (see ‘How to contact us’ below).

d) Sensitive personal information

We do not routinely process sensitive personal information or data but to the extent we may be required to do so for professional conduct purposes (in either the UK or the EEA or both), we will only do so with your prior consent.

4) How we use your data and our legal basis for processing your data

We may process your data for a variety of reasons, including because:

• we are legally obliged to e.g. to confirm your identity (for example to confirm your UK resident status) and such data is not retained beyond the legal purposes for which we are required to meet. If you are based in the Netherlands, we may be required by Dutch accountants to review social security numbers and identity documentation to represent you before the Dutch tax office;
• the processing is necessary for the performance of the contract with you to provide our services according to your instructions in particular in order to apply for patents on your behalf and thus to arrange, manage and maintain patent registrations; or
• it is in our legitimate business interests to do so, such as to maintain contact with you and to send correspondence relating to the services.

In some instances, we will rely on your consent to process personal data and where we do this, it will be flagged to you at the time.

Our main processing activities for personal data, and the legal basis on which we perform those activities are:

• Prospective clients/marketing recipients:

We will process your personal data in order to contact you in relation to marketing our services and keep a record of our communications (e.g. quotations and offers).

Our legal basis for doing so is consent, which you will have given when you provided the personal data to us or one of our suppliers. You can withdraw this consent at any time by following the instructions in our communications or by contacting us. We may also process personal data based on our legitimate interests, which allows us to market our services to individuals provided there is a business case for doing so and our interests do not override the rights of the individuals in question. If you wish to object to direct marketing, you may do so by contacting us.

• Clients, website visitors and other third parties:

We will process your personal data in order to provide our services to you and to provide you with information and updates regarding the same. Where we provide patent application related services, we may need additional data to fulfil country specific requirements. This may include government issued identification. Where the patent owner is a corporate entity, certain corporate information may be required, including company information held at public registers.

Our legal basis for doing so is that the processing is necessary for the performance of a contract such as our services according to our Terms and Conditions of service. We will also keep a record of your data and use it for related purposes, including account management, client support, and audit purposes, on the basis that we have a legitimate interest in doing so.

• Suppliers, service providers etc.:

We will process your personal data in order to receive services from you and to manage our relationship, including making payments to you, dealing with accounts issues, instructing you and otherwise placing orders etc. Our legal basis for doing so is that the processing is necessary for the performance of a contract.

5) Other processing activities

Monitoring and recording communications

We may monitor and record communications with you (such as emails) for the purpose of training, fraud prevention, and/or quality assurance. We may also retain copies of such communications and details provided to us by you, for example support requests, account queries, complaints, for internal account management and auditing purposes. This is done on the basis of legitimate interests.

Credit checking

We may do a credit check on you so that we can make credit decisions about you and members of your household/business; and to prevent and detect fraud and money laundering.

Our search will be recorded on the files of the credit reference agency.

We may also disclose information about how you conduct your account to credit reference agencies and your information may be linked to records relating to other people living at the same address with whom you are financially linked.

Other credit businesses may use your information to:

• make credit decisions about you and the people with whom you are financially associated
• trace debtors, and
• prevent and detect fraud and money laundering.

If you provide false or inaccurate information to us and we suspect fraud, we will record this.

6) Storage of your information and who your information might be shared with

We store your personal data on third party servers based in the EU. We may also use cloud-based servers also based in the EU.

We may disclose your personal data to:

• our suppliers, agents and service providers, to the extent that they require access to the data in order to provide services to us, in which case they will be bound by a contract requiring them to process personal data in accordance with the requirements prescribed by data protection law;
• national and transnational intellectual property offices for the purposes of filing, prosecuting and maintaining registered intellectual property rights, such as filing and prosecuting patent applications and maintaining granted patents;
• law enforcement agencies in connection with any investigation to help prevent unlawful activity; and
• a third party purchaser if we sell our business, in which case, client and user information will be a transferred asset.

7) Keeping your data secure

We will use technical and organisational measures to safeguard your personal data, for example where we store your personal data on secure servers and share information with our offices located within the UK.

We will use technical and organisational measures to safeguard your personal data. However, whilst we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that are transferred from you or to you via the internet. If you have any particular concerns about your information, please contact us (see ‘How to contact us’ below).

What can I do to keep my information safe?

If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses within the UK.

8) Transfers of your information out of the UK and EEA

We may transfer your personal data to locations outside of the UK and/or EEA (as applicable) where we have a lawful basis for doing so. Any transfer of your data will be subject to an approved contract or other legal mechanism that will safeguard your privacy rights and give you remedies in the unlikely event of a security breach.

9) How long do we keep your personal information?

We keep your personal information for as long as we need to for the purposes for which it was collected or (if longer) for any period for which we are required to keep personal information to comply with our legal and regulatory requirements.

10) What rights do you have?

You are responsible for ensuring that information you provide to us is accurate, complete and up-to-date. You can review and change your information by contacting us.

You have a number of rights in relation to your personal data, these include the right to:

• find out how we process your data;
• request that your personal data is corrected if you believe it is incorrect or inaccurate;
• obtain restriction on our, or object to, processing of your personal data;
• if we are relying on consent, you can withdraw your consent to our processing of your personal data (including any direct marketing);
• if we are relying on legitimate interests for direct marketing, you can object to receiving such direct marketing;
• obtain a copy of the personal data we process concerning you. We will take steps to verify your identity before responding to your request. Once we have verified your identity we will respond as soon as possible and in any event within one month.
• lodge a complaint with the relevant supervisory body:
- – the UK supervisory body – the Information Commissioner’s Office (the ICO) here: https://ico.org.uk/; or
- – the Netherlands supervisory authority – the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) here: https://www.autoriteitpersoonsgegevens.nl/en.
• If you have a concern or complaint about the way we handle your data, we ask that you contact us in the first instance to allow us to investigate and resolve the matter as appropriate.

If you would like to exercise any of your rights or find out more, please contact us.

11) Changes to this Privacy Policy

We may change this Privacy Policy from time to time, and if we do so we will post an updated version on this page. If you continue to access or use our services after these changes have come into effect, you will have agreed to the revised policy.

12) How to contact us

Please contact us, if you have any questions about this privacy policy or the information we hold about you.

If you wish to contact us, please send an email to privacy@gregcorcoranip.co.uk.

13) Use of cookies

Our website uses very limited cookies. A cookie is a small text file which is placed onto your computer (or other electronic device) when you use our website. These include the following:

Cookie	Description
yith_wcwl_products	This is functionality cookie.
wpSGCacheBypass=1	This is functionality cookie.
Consent and preference Cookies	This stores your cookie consent preferences. The cookie is set when you respond to the cookie pop-up that appears at the bottom of the screen and is also used to keep the pop-up hidden while you have an active preference stored.