GDPR Policy

Handles at Heart / CBS (Midlands) LTD


European General Data Protection Regulation (GDPR)

CBS (Midlands) Ltd processes personal data in compliance with the provisions of the European General Data Protection Regulation (GDPR). The EU General Data Protection Regulation has been in force since 25 May 2018 and ensures the standardisation of data protection across the EU when processing personal data. Personal data are data by which a natural person can be identified, such as name in combination with date of birth, residential address, contact details, etc.

CBS (Midlands) Ltd is committed to the principles of the European General Data Protection Regulation, which are summarised below:

Lawfulness and transparency

Personal data must be processed lawfully, fairly and in a transparent manner.

Purpose limitation

Personal data must be collected for specified, explicit and legitimate purposes and must not be processed in a manner that is incompatible with those purposes.

Data minimisation

Personal data must be adequate for the purpose and limited to what is necessary for the purposes of processing.


Personal data must be accurate and, where necessary, kept up to date. Inaccurate data must be erased or rectified without delay.

Storage limitation

Personal data must be kept in a form that permits identification of the data subjects for no longer than is necessary for the purposes for which the personal data are processed. "As little as possible and as much as necessary".

Integrity and confidentiality

Personal data must be processed in a manner that ensures appropriate security of data.


Data processing at CBS (Midlands) Ltd

CBS (Midlands) Ltd processes personal data (e.g. name, contact data, etc.) to fulfil contractual obligations (Art. 6(1)(b) of GDPR), in the context of legitimate interest assessment (Art. 6(1)(f) of GDPR), due to legal requirements (Art. 6(1)(c) of GDPR) and on the basis of consent (Art. 6(1)(a) of GDPR).

CBS (Midlands) Ltd gains knowledge of personal data through various channels. This primarily involves data received from partners/prospects and their respective contact persons in the context of a business relationship, as well as the data generated due to service provision, such as first name, surname, e-mail address, address and phone number. Other personal data include that which is disclosed by the visitors of the Handles at Heart website, for example, in the contact form. Furthermore, it should be pointed out that personal data are also recorded automatically by our IT systems during visits to the website. In all cases, CBS (Midlands) Ltd takes adequate technical and organisational measures to safeguard the security and integrity of personal data.

With regard to the data transfer inside and outside the company, the access to personal data is given to those persons who require them for the fulfilment of contractual and legal obligations.

CBS (Midlands) Ltd stores personal data until the applicable legal statute of limitations and retention periods expire.


Rights of data subjects

According to the provisions of the GDPR, data subjects have the following rights:

  • • To access the processed data (Art. 15 GDPR)
  • • To rectify or complete inaccurate or incomplete data (Art. 16 GDPR)
  • • To restrict the processing (Art. 18 GDPR)
  • • To justifiably erase the data concerning themselves (Art. 17 GDPR)
  • • To receive or transmit the data concerning themselves and provided by themselves (Art. 20 GDPR)
  • • To object with regard to the stored personal data (Art. 21 GDPR)
  • • Not to be subject to a decision based solely on automated processing, including profiling (Art. 22 GDPR)
  • • To receive communication on a breach of personal data protection (Art. 34 GDPR)
  • • To lodge a complaint with the supervisory authority, if they consider that CBS (Midlands) Ltd's processing of data related to themselves infringes upon the data protection provisions (Art. 77 GDPR).
  • • For queries or assertion of the above-mentioned rights, the data subjects can send an e-mail to e-mail:


Data collection on the Handles at Heart website

To analyse the user behaviour of the visitors to our website, we use the Google Analytics web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies, text files that help to collect usage information, including the IP address of the user. The information generated by cookies is transferred in an anonymised form to a server of the web analysis service in the USA and is stored there.

It is processed according to Art. 6(1)(f) of the GDPR based on our justified interest to improve the user-friendliness and efficiency of our website. By selecting an opt-out cookies option in the settings of the browser used, you can prevent the use of cookies and collection of data.


More information on data protection at Google

Videos from the YouTube platform of provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, are embedded on our website. When a website featuring a YouTube video is called up, a connection to the server of the provider is created. YouTube uses cookies that collect information about user behaviour and can associate the visit to our website with a user account. More information on data protection at YouTube:

The "Custom Audience" remarketing function of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, makes it possible to provide the website visitors who have a user account on Facebook with interest-related advertising (the so-called "Facebook Ads") in the context of visiting the social network. The "Custom Audience" function can be deactivated at any time in the personal settings of the Facebook account. More information about data protection on Facebook:

It is possible to contact CBS (Midlands) Ltd through our Contact Us forms. The data collected on the contact form is necessary to ensure that the request can be forwarded to the proper contact person at CBS (Midlands) Ltd. The data are used on the basis of an agreement (consent on the contact form according to Art. 6(1)(a) GDPR) and only for processing the request.

Registered Handles at Heart customers gain access to current orders, product information, media files in print quality, sales literature, etc., through our Login / Create Account - Handles At Heart & Login. To register on the customer portal, the customer must provide their express consent (Art. 6(1)(a) GDPR). The customer data stored on the portal are processed on the basis of pre-contractual measures or to fulfil contractual obligations (Art. 6(1)(b) GDPR).

Our website contains links to other websites; we recommend taking note of the relevant information about data protection on the corresponding websites. CBS (Midlands) Ltd accepts no liability for the content of the external websites.


Modifications to our data protection notice

CBS (Midlands) Ltd can update this data protection notice as needed, to address the changing legal, regulatory or operational requirements. If visitors of the website do not accept the updates to this data protection notice, they are asked to stop using this website.