This Privacy Notices to Business Contacts (“Notice”) describes the processing of personal data by Toptech Systems, Inc. (“Toptech”), 1124 Florida Central Parkway, Longwood, Florida 32750 (“Company”, “we” or “us”), part of IDEX Corporation (“IDEX” or “IDEX Group and Affiliates”) (please see https://www.idexcorp.com/affiliates-list/ for all companies involved) of business contacts. Company is committed to the protection of the Personal Data that we process about you in line with the data protection principles set out in the Applicable Data Protection Law. This Notice informs you how we Process your Personal Data if you are one of our business contacts. Concerning the Processing of Personal Data of website users, please see our Website Privacy Statement, which you may access at https://toptech.com/privacy-statement/
This Notice applies exclusively to residents of a country belonging to the European Economic Area or the United Kingdom. It does not apply to any other business contacts and the rights listed in this document do not apply to such business contacts from other countries.
With regard to the Processing of Personal Data of website users, please see our Website Privacy Notice, which you may access here
This Notice may be amended from time to time. We will post any change to this Notice a reasonable period of time in advance of the effective date of the change.
Capitalised terms used in this Notice are defined in Section 2 of this Notice.
The following terms used within this Notice and defined as follows:
|Applicable Data Protection Legislation||All applicable data protection laws, which apply to the Processing of your Personal Data; in particular the GDPR as well as potential local laws, which may apply in your country.|
|Business Contacts||All Consumers, Corporate Partners or employees of a Corporate Partner or any other person, which IDEX Group and Affiliates contacts or interacts with in the context of establishing, developing, maintaining, servicing or otherwise furthering the business relationship.|
|Consent||Any freely given, specific, informed and unambiguous indication of the Data Subject’s wishes by which he/she, by a statement or by a clear affirmative action, signifies agreement to the specific processing of his/her Personal Data. It has to be a clear affirmative act (“Opt-In”). Silence or inactivity are not sufficient. Consent may be withdrawn at any time with effect for the future.|
|Consumer||A person that buys goods or services mainly for personal purposes.|
|Corporate Partner||Persons or organisations that buy goods or services from IDEX Group and Affiliates, mainly for their own business purposes, or other business partners with which we have a contractual or commercial relationship with, like subcontractors and suppliers; this includes existing as well as prospective Corporate Partners.|
|Data Controller||The natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the Processing of Personal Data; where the purposes and means of Processing are determined by national or EU laws or regulations, the controller or the specific criteria for his nomination may be designated by national or EU law.|
|Data Processing||Any operation, or set of operations, which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.|
|Data Processor||A natural or legal person, public authority, agency or any other body which processes Personal Data on behalf of the Data Controller.|
|Data Protection Officer||The person, which is appointed by the Company to protect the data subjects’ rights and to acts as an interlocutor between the Company and you in order to ensure that the Company complies with all Applicable Data Protection Legislation.|
|Data Subject||Any person to whom the respective Personal Data refers.|
|Data Protection Supervisory Authority||Any public authority which is competent to review legitimacy of Personal Data Processing by the Company and/or enforce your data protection rights against the Company.|
|European Economic Area
|The Member States of the European Union, plus Norway, Iceland and Lichtenstein.|
|Filing System||Any structured set of Personal Data, which are accessible according to specific criteria, whether centralised, decentralised or dispersed on a functional or geographical basis.|
|GDPR||EU General Data Protection Regulation 2016/679.|
|Personal Data||Any information relating to an identified or identifiable natural person (also referred to as ‘data subject’); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.|
|Special Categories of Personal Data||Personal Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purposes of identifying an individual, data concerning health or data concerning a natural person’s sex life or sexual orientation.|
|Any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.|
The Company is responsible for Processing your Personal Data and is the Data Controller.
If you have any questions about this Notice, please contact us at
Toptech Systems, Inc.
1124 Florida Central Pkwy
Longwood, Florida 32750
+1 (407) 332-1774
Toptech Systems NV
Nieuwe Weg 1 – Haven 1053
B-2070 Zwijndrecht / Belgium
+32 (0)3 250 6060
You can contact our Data Protection Officer at privacy@IDEXcorp.com
We Process a different categories of Personal Data of our Business Contacts. This includes:
Most of the Personal Data we Process, you have provided directly to us, other Personal Data may have be provided by your employer, our Corporate Partner or other instances involved in the initiation and execution of the contracts with our Corporate Partner. In addition, we may process personal data that we permissibly obtain from publicly accessible sources (such as LinkedIn) or that are legitimately transmitted to us by third parties (such as credit agencies).
The Company Processes Personal Data of Business Contacts for various business purposes, including:
The Company Processes Personal Data relating to its Business Contacts on different legal bases:
The GDPR provides you with certain rights in relation to the Processing of your Personal Data, including to:
These rights are not absolute and are subject to various conditions under: (a) Applicable Data Protection Legislation; and (b) other laws and regulations to which we are subject.
You may exercise the rights accorded by the Applicable Data Protection Legislation, for example, by contacting us at the contact details given above.
You also have the right to lodge a complaint with a Data Protection Supervisory Authority.
As a member of a multinational enterprise operating under a matrixed management structure, Company may share Personal Data of Business Contacts with other IDEX Group and Affiliates listed in the Annex for the purposes set out in this Notice. Please note that Company only shares Personal Data of Business Contacts with those listed companies where this is covered by a lawful basis for such Processing.
These transfers are protected by the obligations set out in intra-group agreements that we will enter into among and between the various legal entities comprising the IDEX Group and Affiliates. International transfers within the IDEX Group and Affiliates are governed by EU Commission-approved Standard Contractual Clauses for Controllers and, where relevant, for Processors. You may receive a copy of these Standard Contractual Clauses used in our intra-group agreements by contacting us at the contact details given in Sec. 3 above.
Company may share Personal Data with external vendors that we engage to perform services or functions on our behalf and under our instructions. Where applicable, their Processing of your data will be subject to the GDPR requirements. Company will also ensure that its contracts with these parties ensure that they only Process Personal Data in accordance with our instructions and in order to provide the agreed services and protect the integrity and confidentiality of the Personal Data entrusted to them, in line with the GDPR requirements.
For the purposes set out in this Notice, we may also disclose your Personal Data to our IT service providers, auditors, lawyers, consultants, law enforcement and other public authorities (such as tax and social security bodies), the police, prosecutors, courts and tribunals. Some of these recipients are themselves responsible to determine the purposes and means of the Processing and for the lawfulness of the Processing on their end. Where necessary, we will ensure that appropriate contractual measures are in place to ensure the protection of your Personal Data.
Some of the third parties that we engage to Process your Personal Data are located outside the European Economic Area. We will ensure that these transfers are either
Company will keep and Process your Personal Data only for as long as is necessary for the above-mentioned purposes for which they were collected or for legal obligations. Such legal obligations may arise particularly under tax and commercial law. If your data is no longer necessary for the fulfilment of contractual or legal obligations or for the fulfilment of the above-mentioned purposes, they will be deleted; unless they are needed to secure, assert or enforce legal claims. In this case, we will retain them in accordance with the regular limitation period. During this period, this data is blocked and is no longer available for any other use.
In certain cases, you may choose to not provide us with your Personal Data and/or provide incomplete Personal Data. However, please be aware that we may not be able to engage in or continue a business relationship as your Personal Data is required for administrative purposes and/or to fulfill statutory requirements.
Your Personal Data will not be used for automated decision-making and/or profiling.