Privacy Policy 

Updated: 24 May 2018

 

1 Purpose and Scope

Efecte Plc (business ID 1509667-4) (“Efecte”) and its affiliates are committed to protecting the privacy of customers, business partners and visitors to Efecte’s website (collectively hereinafter “Data Subject(s)”).

This Privacy Policy outlines how Efecte handles information that can be used to directly or indirectly identify a Data Subject (the “Personal Data”) and describes the processing practices in relation to the use of Efecte’s website and the services offered by Efecte (collectively, the “Services”). This Privacy Policy also explains how Data Subjects can exercise their rights such as use, access and rectification of Personal Data.

Efecte acts as a controller with respect to the information that is processed in connection with our business relationships. For example, Efecte is the controller in relation to Data Subjects’ contact details and other commercial Personal Data. On the other hand, Efecte also acts as a processor of Data Subjects’ Personal Data in connection with the provision of the Services. When Efecte acts as the processor, Personal Data is processed in line with applicable data protection laws and data processing agreement entered into with the controller, where applicable. In such a case, please refer to the privacy policies of controllers for further information on the processing of Personal Data.

Unless otherwise expressly stated herein, the terms used in this Privacy Policy shall have the meaning set forth in the General Data Protection Regulation (EU) 2016/679 (the “GDPR”).

2 Processing of Personal Data

Efecte processes Personal Data of Data Subjects to manage business relationships and to offer the Services. In this context, Personal Data may be processed for market and customer analysis, reporting and statistical purposes, marketing purposes such as customised marketing, administration notices, database management and maintenance, product suggestions and offers and newsletters. Personal Data may be used for direct marketing, including, where applicable, by electronic means unless objected by the Data Subject.

Further, Personal Data may be used for invoicing and to send important information to the Data Subject e.g. to contact the Data Subject and provide information on customised Services based on their profile and preferences.

Efecte processes Personal Data on the following basis:

  • for the performance of the contract between Efecte and the Data Subject (Article 6.1(b) of the GDPR);
  • for the purposes of Efecte’s legitimate interests related to the customer and business relationships between Efecte and the Data Subjects (Article 6(f) of the GDPR);
  • to comply with legal obligations applicable to Efecte (Article 6(c) of the GDPR, such as corporate and accounting).

Efecte may ask for the Data Subject’s consent for the processing of certain type of Personal Data (for example for a campaign). When collecting such consents, Efecte informs the Data Subject of the respective purposes of processing and such processing is conducted only when appropriate consent is received.

3 Collection and Use of Personal Data

Personal Data is mainly obtained directly from the Data Subject. Personal Data may be updated and supplemented by collecting data from private and public registers. Information is also collected from browsers to customise and improve Efecte’s website and make it more user-friendly.

Efecte collects the following types of Personal Data: name, phone number, e-mail, street address, role in the company and/or towards Efecte, IP address, usage data and cookies.

Efecte does not collect sensitive information (special categories of Personal Data).

4 Disclosure of Personal Data

For the purposes stated in this Privacy Policy, Personal Data may be disclosed, when necessary, to authorities, other companies within the same group of companies, companies which the group cooperates with and to other third parties, such as third party service providers used in connection with our Services and services related thereto.

Personal Data is primarily not transferred outside the European Union and the European Economic Area (“EU/EEA”). If any such transfers are needed, they are performed subject to appropriate safeguards such as European Commission adequacy decision, other appropriate safeguards or standard data protection clauses adopted or otherwise approved by the EU Commission in accordance with the GDPR (“Standard Data Protection Clauses”).

5 Retention Period

Efecte may retain the Data Subject’s Personal Data for five 5 years from the Data Subject’s latest purchase or contact with us. Personal Data may be, wholly or in part, retained for longer or shorter term if required by applicable law or if there is other justified reason to retain or delete them. In such a case, the Data Subject’s Personal Data shall be erased with no further delay after there is no longer any need for such a retention.

Efecte evaluates the necessity and accuracy of the Personal Data on a regular basis.

6 Data Subjects’ Rights

Data Subjects have a right to request:

  • access to and rectification or erasure of their Personal Data;
  • for restriction of processing concerning the Data Subject or to object to processing; and
  • to receive, under certain preconditions, the Data Subject’s Personal Data in a structured, commonly used and machine-readable format and to transmit those data to another controller.

Data Subjects may exercise the aforementioned rights by sending a written request to Efecte. Where the processing is based on consent, the Data Subject has a right to withdraw such consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

In case the Data Subject considers that its rights under the data protection laws are infringed, the Data Subject may lodge a complaint with the supervisory authority of the Data Subject’s residence in the EU.

7 Security Safeguards

Efecte has taken adequate technical and organisational measures in order to keep Personal Data safe and to secure it against unauthorised access, loss, misuse or alteration by third parties, such as encryption, access controls, and firewalls. However, data transmission over the internet is inherently insecure, and Efecte cannot guarantee that the security measures will prevent illegally and maliciously operating third parties from obtaining access to Personal Data and the absolute security of that data during its transmission or its storage on Efecte’s systems.

8 Cookies

Efecte uses cookies and similar technologies on the website. Data Subjects can set their browser to reject all or some cookies, or to alert when websites set or access cookies. If Data Subjects choose to reject cookies, website (and Services) may still be used, however, the access to some functionality and areas of the website may become inaccessible or not function properly. These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information in order to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media.

9 Other

Efecte keeps this Privacy Policy under review and may update it from time to time by posting a new version on the website. Data Subjects are recommended to check this page occasionally to ensure they are happy with any changes.

10 Contact information of data controller

Data controller: Efecte Plc (business ID 1509667-4) and its affiliates.

All contacts and inquiries related to this Privacy Policy should be addressed to gdpr@efecte.com.