Effective Date: 25 May 2018
1. PERSONAL DATA COLLECTED
|When Personal Data is collected||What Personal Data is collected|
|We collect Personal Data when you register for Artec Service and when you purchase one of our products or services and when we communicate with you.||
We collect Personal Data through the use of your user name and passwords for certain services provided by third parties (each, a “Third Party Service”).We may provide an option to access or register for Artec Service through the use of your Facebook, Twitter, OpenID or Google account.
2. ON WHICH LEGAL BASIS AND FOR WHICH PURPOSES IS THE PERSONAL DATA COLLECTED?
We may process your Personal Data:
- For the purposes of entering or performing a contract with you
We process your Personal Data for the purpose of concluding and fulfilling our contractual obligations under the contract concluded with you when you purchase Artec Services via the Website, as well as for processing and delivering contest or sweepstakes entries and rewards.
- For the purposes that are in our legitimate interest, such as to:
- identify you properly and enable you to access and use Artec Service;
- create and manage your account with us and customize your online experience;
- process and complete transactions by taking payment or refunding you, and for the detection and prevention of fraud;
- provide customer service and support and send you related notices;
- send you promotional communications;
- help us to administer, evaluate and improve our business and our products and services we offer, including market research and analysis to improve our existing products and services, or learn the products and services you wished we provided (including performing data analytics and performing accounting, auditing and other internal functions);
- monitor and analyze trends, usage, and activities in connection with Artec Service and for marketing or advertising purposes;
- the establishment, exercise and defense of legal claims;
- assure the safety and continuity of our IT services and systems;
- in connection with any business reorganization, transfer, disposal, merger or acquisition on the level of Company; and
- monitor and assess compliance with our policies and standards.
- For compliance with our legal or regulatory obligations
We can process your Personal Data where it is necessary for compliance with legal or regulatory obligations that we are subject to, notably data retention obligations or when responding to requests from competent authorities.
- With your consent
Insofar as you have given us your consent for the processing of your Personal Data, such consent will serve as a legal basis for the referred processing.
3. HOW WE SHARE THE PERSONAL DATA THAT WE COLLECT
We may share your Personal Data with
- third-party service providers such as IT service suppliers (including hosting and maintenance services), archiving storage providers, background checking services, financial, tax or legal advisors or institutions or accountants appointed by us, that process your Personal Data on our instructions. We do not permit third-party service providers to use Personal Data for their marketing purposes or for any other purpose than in connection with the services they provide to us. Appropriate safeguards to ensure the integrity and security of your Personal Data when engaging such service providers will be implemented;
- government, courts, law enforcement authorities, regulators or attorneys and supervisory authorities;
- any third party to whom we assign or novate any of our rights or obligations, or that acquires all or substantially all of our business, stock or assets, or with whom we merge;
- shareholders, agents, employees, consultants, representatives, auditors and business partners; and
- other companies belonging to the same group as the Company (and if necessary, their respective shareholders, agents, employees, consultants, representatives, auditors, service providers and business providers).
4. DO YOU HAVE THE OBLIGATION TO PROVIDE THE PERSONAL DATA?
Personal Data required to comply with Company’s legal requirement or to perform the contract with you are mandatory.
Without the provision of these Personal Data we are not able to enter into or continue the performance of the contract concluded with you and you will therefore not be able to purchase any of our product or service.
5. HOW LONG DO WE RETAIN YOUR PERSONAL DATA?
|Personal Data collected when you register and/or purchase a product of Company and conclude subsequently a contract||
As far as necessary, we will keep your Personal Data for the duration of our contract with you.
In addition, we are subject to various retention and documentation obligations, which inter alia follow from the commercial code (Code de Commerce). The retention period provided by the commercial code is 10 years after closing of the financial year to which the relevant documents containing your Personal Data relate.
Finally, the retention period will also be determined by the legal prescription periods that can, for example, be set forth by the commercial code and amount up to ten years after the end of the contractual relationship with you.
6. WHERE IS YOUR PERSONAL DATA TRANSFERRED TO?
For the purposes listed above, your Personal Data may be transferred to any of the aforementioned recipients and service providers in countries located in or outside of the European Economic Area (EEA).
Personal Data may be transferred to countries located outside of the EEA, including the United States of America, Canada, Korea, and the countries of origin of Artec’s distributors (resellers).
Personal Data may be transferred to a country outside of the EEA on the basis of the fact that the European Commission has decided that such country ensures an adequate level of protection. Certain countries in which recipients and data processors may be located and to which Personal Data may be transferred may however not have the same level of protection of Personal Data as the one afforded in the EEA. Personal Data transferred to countries outside of the EEA in such case will be protected by appropriate safeguards, such as standard contractual clauses approved by the European Commission. You may obtain a copy of such safeguards by contacting us at firstname.lastname@example.org.
7. TO WHAT EXTENT DO WE USE AUTOMATED DECISIONS MAKING OR PROFILING?
In general, we do not use automated individual decision-making or profiling in the course of the relationship with you. If we should rely on such processing in a particular situation, we will inform you separately, insofar we are legally required to do so.
8. WHAT ARE YOUR RIGHTS?
a. Right to information, rectification and restriction of processing
This is your right to request a copy, at no costs, of the Personal Data that we hold about you. Please contact us if you would like a copy of some or all your Personal Data, we will respond to your request within thirty days of receipt of the request.
We want to make sure your Personal Data is accurate and up to date: you may contact us to correct or remove Personal Data you think is inaccurate.
In cases where the accuracy of the Personal Data is contested, the processing is unlawful, or where you have objected to the processing of your Personal Data, you may ask for the restriction of the processing of such Personal Data. This means that Personal Data will, with the exception of storage, only be processed with or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of an EU Member State. In case a processing is restricted, you will be informed before the restriction of processing is lifted.
b. Objections to processing of Personal Data
You may object to processing of your Personal Data which is based on the legitimate interests pursued by us or by a third party.
The only reasons we will be able to deny your request is if we can show compelling legitimate grounds for the processing, which override your interest, rights and freedoms, or the processing is for the establishment, exercise or defense of a legal claims.
You have also the right to object at any time to processing of your Personal Data for marketing purposes, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, your Personal Data will no longer be processed for such purposes.
Your right to object is not bound to any formalities.
c. Right to withdraw your consent
You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. This also applies to any consent given before the coming into force of the General Data Protection Regulation (GDPR) on 25 May 2018. The withdrawal only affects future processing.
d. Data Portability
It is also your right to receive the Personal Data which you have given to us, in a structured, commonly used and machine-readable format and have the right to transmit that Personal Data to another controller without delay from the current controller if:
- the processing is based on consent or on a contract, and
- the processing is carried out by automated means.
e. Right to be forgotten
You may request the deletion of Personal Data held about you, without undue delay when the use or other processing of such Personal Data is no longer necessary for the purposes described above, and notably when consent relating to a specific processing has been withdrawn or where the processing is not or no longer lawful for other reasons.
f. Right to lodge a complaint
In the event that you wish to make a complaint about how we process your Personal Data, please contact us in the first instance at the email addresses indicated above and hereunder, and we will endeavour to deal with your request as soon as possible. This is without prejudice to your right to file a complaint with the Luxembourg data protection authority, the Commission nationale pour la protection des données, or another European data protection authority (e.g. in your country of residence), in the event you have concerns on the processing of your Personal Data.
9. POLICY REGARDING CHILDREN
Artec Services is not directed to children under the age of thirteen and we do not knowingly collect Personal Data from children under the age of thirteen as part of Artec Services. If we become aware that we have inadvertently received Personal Data from a User under the age of thirteen as part of Artec Services, we will delete such Personal Data from our records. If we change our practices in the future, we will obtain prior, verifiable parental consent before collecting any Personal Data from children under the age of thirteen as part of Artec Services.
11. CONTACTING US
In order for us to take the appropriate action please describe in reasonable detail the nature of your request or inquiry.
To protect your privacy and security, we may take steps to verify your identity before complying with the request.