Privacy policy

Introduction

Generator Solutions UK processes personal data as part of our business. We are the controller for the processing described in this notice. Below we explain what personal data we hold, how we use it, and the rights you have under the UK GDPR and the Data Protection Act 2018.

Contact us

You can exercise your rights (or ask questions about this notice) by using our contact form or writing to:

Email: enquiries@generatorsolutions.co.uk

If you have questions about this privacy notice or our role as controller, we will respond without undue delay and within one month. Your rights are described in a separate section below.

When does Generator Solutions collect personal data about you?

We process information about you in the following situations:

• You visit our website generatorsolutions.co.uk, or you have ordered goods from our online shop.
• You have sent us an enquiry.
• You have applied for a job with us, or a job applicant has named you as a referee.

Processing of personal data on Generator Solutions websites

Generator Solutions markets and sells our products and services exclusively to business customers, both directly and through partners/distributors. In that context we store personal data about employees of customers, partners/distributors, and organisations that contact Generator Solutions to evaluate our products and services. Personal data we store includes:

• Contact details: name, job title, telephone number and email address.
• Email correspondence relating to marketing, sales and use of our products.
• Username, password (one-way hashed and not recoverable) and mobile number for contact persons who have registered in our product and knowledge portals.
• Orders in the online shop are also stored with information about who placed or registered the order.

Web analytics

Generator Solutions does not use Google Analytics or other third-party page-view analytics tools. Engagement time (how long the tab is visible) and linkage to a visitor ID / Ads keyword are stored only after you accept marketing cookies. Campaign and conversion tracking is described under cookies.

Cloud services we use

Generator Solutions uses cloud services as part of our operations. Below we list the systems we use that contain personal data about employees of our customers and distributors/partners.

• Product and knowledge portal: our customers can register with name, email and mobile number. This is the main channel for training and ordering Generator Solutions products and services. Generator Solutions also registers customers and contact persons as part of establishing a new customer relationship where they have not registered themselves. This is a prerequisite for being a customer and user of Generator Solutions products.
• CRM / sales support: Generator Solutions operates a sales support system in which we register customers and contact persons who request quotations for Generator Solutions products and services. We can delete or anonymise data here on request. We also store email correspondence relating to the purchasing process.
• Email correspondence between Generator Solutions staff and our customers and partners.
• Operational notices: the responsible contact person at our customers is registered with name and email address on a list used to send operational notices.

Cookies

Cookies are small text files placed on your computer or device when you visit a website.

Strictly necessary cookies are set so the website can function (session, language preference and the consent choice itself). Marketing cookies are set only after you give consent in the cookie banner, in line with the Privacy and Electronic Communications Regulations (PECR) and the UK GDPR. You can change your choice at any time via “Cookie settings” in the footer.

• Laravel session; a strictly necessary session cookie that enables the basket, login, security token (CSRF) and temporary form confirmations. The cookie is httpOnly and is deleted after inactivity (default 120 minutes) or when the session expires.
• locale_preference; a strictly necessary functional cookie that remembers a manual language preference (Norwegian/English) for up to 365 days.
• gs_cookie_consent; a strictly necessary cookie that stores your consent choice (necessary / marketing) for up to 180 days, so we do not ask again on every visit.
• Visit / campaign tracking (gs_acq / gs_acq_last / gs_vid); optional first-party cookies that are set only when you accept marketing. They are stored for up to 180 days. gs_acq stores the first entry (first-touch): which page you landed on, and any referring website (referrer), for example a Google search or a link from another site. If you arrive via a marketing link (UTM parameters or a Google Ads click ID), campaign parameters are also stored. gs_acq_last is updated on later campaign clicks (last-touch). gs_vid is an anonymous visitor ID that links later form submissions to the visit. The cookies are used to understand which channels generate enquiries. Content is limited to source/medium, landing page, referring URL and any campaign parameters/click ID. Without consent, campaign parameters may be held temporarily in the session until you make a choice, so we do not lose the attribution if you accept on the same visit.
• Engagement measurement (<code class="text-xs">gs_asid</code>); an optional first-party session cookie set in the browser only when you accept marketing. It identifies the tab/session so we can measure engagement time and link it to search phrases and, where applicable, gs_vid. The cookie is removed when you close the browser or reject marketing.
• Google Ads / Google tag (gtag) and Consent Mode v2; when Google Ads is configured, Google’s conversion tag is loaded to measure form submissions and document downloads as conversions. The tag is loaded with Google Consent Mode v2: storage of advertising cookies (ad_storage, ad_user_data, ad_personalization) is denied by default and enabled only if you accept marketing. Without consent, Google may receive limited cookieless pings for modelled measurement. With consent, the tag may set Google-related cookies (typically _gcl_*). When you submit a contact or product form and have consented to marketing, a SHA-256 hashed version of the email address (and telephone number if provided) is also sent to Google with the conversion (Enhanced Conversions). This is used to attribute the conversion to the right user when the browser restricts cookies. We do not send email or telephone numbers to Google in clear text. The purpose is to optimise advertising and measure the effect of paid campaigns in the United Kingdom (and, where relevant, Norway). We do not use Google Analytics or a Google Tag Manager container on this website.

Security certificate (SSL/TLS)

It is safe to visit this website. The site uses an SSL/TLS security certificate that confirms the site’s identity and encrypts communication between your browser and our servers.

The purpose of encryption is to keep data in transit secure between the server (our website) and the client (your browser). This includes a digital certificate that helps verify that the website and its publisher are genuine.

Your rights

Under the UK GDPR and the Data Protection Act 2018, you have rights in relation to personal data we hold about you. These include the right to:

• be informed about how we use your personal data (this notice)
• access the personal data we hold about you
• have inaccurate or incomplete personal data rectified
• request erasure of your personal data in certain circumstances
• restrict or object to certain processing, and (where applicable) data portability
• withdraw consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal

Requests from data subjects are handled free of charge and we aim to respond within one month. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO).

For more information about your rights, see the ICO website: ico.org.uk.