9.1. Our Role as a Controller or Processor
If you are located in one of the European Countries, we act as a “controller” as defined in the
GDPR when processing your
“personal data”. We may also act as a “processor” as defined in the GDPR to the extent that we
process your
“personal data” on behalf of and at the instruction of another party.
9.2. Legal Basis of Processing
If you are located in the European Countries, we collect and process your “personal data” based
on the following legal
basis:
- Performance of a Contract / Entry into a Contact
- Legitimate Interests
- Compliance with a Legal Obligation
- Protection of Vital Interests
- Performance of a Task for Public Interest
- Consent
Please refer to 5. above for more details.
9.3. Automated Individual Decision-Making, Including Profiling
We do not use a decision based solely on automated processing, including profiling, which
produces legal effects
concerning you or similarly significantly affects you.
9.4. Your Rights
If you are located in the European Countries, regarding your “personal data” which we collect
and store, you have the
rights to:
- access to your “personal data” and related information, such as categories of recipient,
envisaged retention period,
source of acquisition, and obtain a copy of your “personal data” in our possession
- rectify your inaccurate “personal data”
- erase your “personal data”
- restrict on processing of your “personal data”
- receive your “personal data” which you provided to us and request us to transmit those
data to another controller (data portability)
- object to the processing of your “personal data”
- withdraw the consent which you have given to us at any time (your withdrawal of consent
will not affect the lawfulness of procession made prior to such withdrawal)
-
not be subject to a decision based solely on automated processing, including profiling,
which produces legal effects concerning you or similarly significantly affects you,
except where:
- the decision is necessary for entering into, or performance of, a contract
between you and us;
- the decision is authorized by Union or Member State law to which we are subject,
and which also lays down
suitable measures to safeguard your rights, freedoms, and legitimate interests;
or
- the decision is based on your explicit consent.
Those rights may be subject to a certain condition as set forth in the GDPR.
9.5. Data Transfers
We transfer your “personal data” to any of our Affiliates or third-party service providers
outside of the European Countries. When we transfer your “personal data” to such entity outside
of the European
Countries, we ensure that appropriate safeguards and protections are took in place pursuant to
the GDPR. For example, we
enter into agreements including standard data protection clauses adopted by the European
Commission or other
appropriate arrangements with various entities located outside the European Countries with whom
we share your “personal
data”. However, please acknowledge that some countries that we transfer your “personal data”
might not have appropriate
safeguards and protections under the GDPR. If we transfer your “personal data” to any of such
countries, we
will notify you of the possible risks of such transfer for you due to the absence of an
appropriate safeguards and
obtain your consent with such transfer. If you wish to receive a copy of documentation related
to these safeguards,
please contact us.
9.6. Complaints
If you are located in one of the European Countries, you may file a complaint with the Data
Protection Supervisory Authority of the Member State of your habitual residence, place of work,
or place of the alleged
infringement.
9.7. Contact
If you are located in one of the European Countries, you may contact us through the following
representative for EU area or the contacts set out in 10. below.
