Type of information | Purpose | Legal basis of processing |
---|---|---|
Data about your use of our Website. IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views, website navigation paths, timing, frequency, pattern of your service use. | To analyse the operation of our Website and services. | Legitimate interests in monitoring and improving our Website and services. |
Profile data. Your name, address, telephone number, email address, gender, date of birth. | Operating our Website, providing our services, communicating with you. Fulfilment of KYC/AMLprocedures. | Legitimate interests in the proper administration of our Website. Performing the contract we have with you. |
Publication data. Information that you post for publication on our Website or through our services. | The publication data may be processed for the purposes of enabling such publication and administering our Website and services. | Legitimate interests for the proper administration of our Website and business. Performing the contract we have with you. |
Inquiry data. | The inquiry data may be processed for the purposes of fulfilment of our KYC and AML obligations. The proper performance of our payment obligations to you. | Performing the contract we have with you. |
Transaction data. The transaction data your contact details, your card details and the transaction details. | The transaction data may be processed for the purpose of payments and keeping proper records of those transactions. | Performing the contract we have with you. |
Notification data. | The notification data may be processed for the purposes of sending you the relevant notifications and/or newsletters. | Consent. Performing the contract we have with you. |
Correspondence data. The communication content and metadata associated with the communication. | The proper performance of our contractual obligation before you. | Consent. Performing the contract we have with you. |
Any of your personal data identified in this policy. | Exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure, the protection and assertion of our legal rights, your legal rights and the legal rights of others. | Our legitimate interests. |
Any of your personal data identified in this policy | The obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice. | Our legitimate interests. |
We may disclose your personal data to the third parties listed below. When we do so, we require those third parties to have appropriate technical and organisational measures in place to protect your personal data. We will not share any of your personal data for any purpose other than the purposes described in this privacy policy, nor will we sell your personal data to anyone.
4.1 Any member of our group of companies (this means our subsidiaries, our ultimate holding company and all its subsidiaries) insofar as reasonably necessary for the purposes, and on the legal bases, set out in this privacy policy.
4.2 To our insurers and/or professional advisers insofar as reasonably necessary for the purposes of managing risks, obtaining professional advice, or the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
4.3 Payment services providers we have chosen to support us with financial transactions relating to our Website. We will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds.
4.4 Governmental and regulatory bodies, including law enforcement authorities, in connection with enquiries, proceedings or investigations by such parties or in order to enable NOTIX to comply with its legal and regulatory requirements.
4.5 Partners, contractors and/or vendors in order to perform contract we have with you.
5. Your Data Protection Rights
You have the following rights in terms of the personal data we hold about you:
The right to be informed. | NOTIX is publishing this privacy policy to keep you informed as to what we do with your personal data. You can ask us for information regarding any data of yours that we keep at any time. This information concerns, among other things, the data categories we process, for what purposes we process them, the origin of the data if we did not acquire them directly from you and, if applicable, the recipients to whom we have sent your data. |
The right to access. | This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. You can obtain a copy of your data from us free of charge. If you are interested in other copies, we reserve the right to charge for the additional copies. |
The right to correction (rectification). | You can request that we correct your data. We will initiate appropriate measures to keep the data of yours that we continuously process correct, complete, and up to date, based the latest information available to us. |
The right to erasure (The right to be forgotten). | You can request that we delete your data provided the legal requirements have been met. In accordance with Article 17 the GDPR, this can be the case if: • the data are no longer required for the purposes they were acquired or otherwise processed • you revoke your consent, which is the basis of the data processing, and there is no other legal basis for the processing •you object to the processing of your data and there are no legitimate reasons for the processing or you object to data processing for the purposes of direct advertising •the data have been processed illegally. Where the processing is not necessary: •To ensure adherence to a legal obligation that requires us to process your data •In particular with regard to legal retention periods •To assert, exercise or defend against legal claims |
6. International Transfers Of Your Personal Data
6.1 We may transfer your personal data to our offices in the Isle of Man, where the European Commission has determined that the territory provides adequate protection for the privacy rights of individuals. We will only do so when it is necessary for one of the purposes set out in this Privacy Policy.
6.2 We do not envisage that any of your personal data will be transferred to any other countries outside the European Economic Area (EEA) as our offices, facilities, subcontractors and other third parties with which we work are all located within the EEA.
6.3 In the event that this changes in the future and one or more recipients of your personal data are located outside the EEA, where data protection laws may be of a lower standard than in the EEA, we will impose the same data protection safeguards that we deploy inside the EEA to ensure that your personal data are always protected.
7. Retaining And Deleting Personal Data
7.1 We will keep your personal data for as long as is necessary for the purpose for which we initially collected them. Once such period has ended, we will keep your personal data for the longest of the following periods: a) any retention period set out in our retention policy which is in line with regulatory requirements relating to retention; or (b) the end of the period in which legal action or investigations might arise in respect of the services provided.
7.2 Once the retention period of your personal data lapses, we will ensure that your personal data are either irreversibly anonymised or securely destroyed.
8. Confidentiality And Security
8.1 We deploy various security measures such as encryption and authentication tools in line with the current state of the art to protect and maintain the security, integrity and availability of your personal data.
8.2 100% protection against unauthorised access in the case of data transfers across the internet or a website cannot be guaranteed, but we and our service providers and business partners do our utmost to protect your personal data in line with the prevailing data protection legislation by means of physical and electronic physical precautions. Among other things, we use the following measures:
- Strict criteria for authorisation to access your personal data on a “need-to-know” basis only and exclusively for the specified purpose;
- Transfer of acquired data in secured form;
- Storage of confidential data in our secure servers;
- Firewall safeguarding of IT systems to provide protection against unauthorised access, and
- Continuous monitoring of access to IT systems to detect and prevent the misuse of personal data.
9. Cookies
9.1 Our Website uses cookies to distinguish you from other users of the Website and provide contractual obligations in a high quality level. This helps us to ensure its smooth operation in order to improve your experience. For detailed information on the cookies we use and the purposes for which we use them, please see our Cookies Policy at https://notix.co/cookies/.
10. Changes To This Privacy Policy
10.1 We may update this privacy policy from time to time by publishing a new version on our Website.
10.2 We will notify you appropriately when we make changes to the privacy policy and we will amend its revision date so that you know when we last amended it. We do however encourage you to review this statement periodically so as to always be informed about how we are processing and protecting your personal information.
10.3 We may notify you of changes to this policy by email or through the private messaging system on our Website.
11 Contacts
11.1 If you have any questions about our privacy policy or wish to obtain more details in relation to the personal data we process about you or wish to exercise any of your rights set out in Section 5, please contact us via email at: dpo@notix.co.