This simplified communication was prepared based on the principle of clarity and adequate information about data processing. Documents available and accessible on the website before registration: Terms and Conditions, Privacy Policy / GDPR and Cookies Policy.
The content of the Data Protection Communication took into account the guidelines related to clarity included in the Transparency Guidelines, thus providing comprehensive information with additional information annexes.
The communication was issued by the following company responsible for data processing:
INSIGHTFULBOOST LLP
Reg. Office: England and Wales
Proposed Registered Office Address:
85 GREAT PORTLAND STREET, FIRST FLOOR
LONDON
ENGLAND W1W 7LT
United Kingdom
Email: support@shemales-barcelona.com
Privacy Contact: If you wish to assert your rights related to your data, please send an email to support@shemales-barcelona.com and we will handle your request. For information about our data processors, please refer to the notice.
By providing your personal data or information, you declare that you have fully understood and explicitly agree to the version of the Data Processing Notice valid at the time the data or information was made available.
The legal basis for the notice is Regulation (EU) No 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing REGULATION OF THE EUROPEAN PARLIAMENT AND THE COUNCIL (EU) 2016/679 (EC) No 95/46 (hereinafter referred to as "the Regulation").
The purpose of this website is to make it possible for the Provider to place escort-related advertisements, dating partner search advertisements, reviews and reports for users. This service makes it possible for registered adult members to have access to the data sheet of other registered private persons or to get in touch with them.
We pay special attention to the protection of personal data of children. The content and information on https://shemales-barcelona.com may be for adults, so the site is only for adult visitors and users. Uploaded images and content may be offensive to some. If the user has not reached the age of 18 (21 years in some countries) or if the use of the site is illegal, please do not access the site.
Our websites are SSL security certified
Our principles regarding the management of personal data: We handle personal data lawfully and fairly and in a transparent manner for data subjects, the collection of such data may only be carried out for a specific, unambiguous and legitimate purpose, limited to the amount of data required, stored securely and for a limited duration.
For what purposes is the data processed?
On the basis of the fulfillment of its contractual obligations, the Company manages the data of the natural person with whom the contract is concluded for the purpose of concluding, executing, terminating the contract, advertising and hosting the service.
In order to fulfil the contract with the legal partner, for business contacts.
In order to increase the efficiency of the service, the user experience, to make the use of the website more comfortable, we use cookies on our website.
To create a contact account in order to distinguish users from each other and create contacts, including website and space services (such as advertising profiles).
Create advertising profile accounts to distinguish users from each other and to present services;
In order to send newsletters, advertisements and establish advertising contacts;
On the basis of compliance with legal obligations, in order to comply with tax and accounting regulations stipulated by law (accounting, tax) manages the data (defined by law) of customers, partners and suppliers relating to natural persons.
The detailed communication contains the list of processed data belonging to that purpose, the legal basis, the duration of data processing, interested parties and who could have access to the data.
We ensure the following rights related to your personal data, these are as follows:
Right of access
Right of rectification
Right of erasure
Right of erasure
Right to erasure
Right to limit data processing
Right to data portability
Right to object
Right to object in case of unsolicited marketing
Inform the data subject about a data protection incident
Right to lodge a complaint with the supervisory authority
Right to effective judicial review before the supervisory authority
Right to effective judicial review against the data processor
You have the right to bring an action for damages against the data processor and lodge a complaint with the competent supervisory authorities of the domicile in case you consider that your personal data is being processed unlawfully.
Data protection availability: In case you wish to validate your rights related to data protection, please send an email to support@shemales-barcelona.com and we will handle your request.
We would like to draw your attention to the fact that with regard to data processing carried out by us on https://shemales-barcelona.com and on subdomains for the specific countries, only the full version of the notice on data processing can be considered as Full Information .
Information on data processing.
INTRODUCTION
This information ensures that, in accordance with the provisions of the EU data protection regulation 2016/679 (with the abbreviation in English GDPR / General Data Protection Regulation) natural persons must be familiar with our principles and rules of data processing before using the services of our Company, (hereinafter referred to as: Company, Service Provider, Data Processor) .
The website https://shemales-barcelona.com is an international service with multilingual adaptations.
The purpose of the website is to provide an opportunity to place advertisements. The service makes it possible for registered members to have access to the data sheets of other persons and to get in touch with them. For this purpose, advertisers and registered members using the website must provide personal data.
By providing personal data or information, you declare that you are aware of the content of the information on data processing at the time you obtained it and explicitly agreed to the information.
At the time of registration, you as a user must check the box or indicate your consent in any other written form to agree to the lawful use and management of personal data or data available in the advertisement profile, or subject to special protection. You can unsubscribe from our newsletters at any time.
The security of information and data on our websites is important to us - our websites are SSL certified.
For us, the protection of personal data of children is of utmost importance. The content and information available on https://shemales-barcelona.com may be of an adult nature. The website was made exclusively for adult visitors and users. The photos and content uploaded may be offensive to some people. In case the user has not reached the age of 18 (21 years in some countries) or if he/she considers that the use of the website is against the rules, do not enter the website.
Documents available on the website that you can read before registering: GBC, Information on data processing and "Cookie" Regulations.
CHAPTER I
DESIGNATION OF THE DATA PROCESSOR
(Hereinafter referred to as service provider, data processor) as data processor has agreed to be bound by the content of this legal notice. The company assumes responsibility for its activities that will comply with all the requirements set out in the current national regulations and with the expectations of the legal acts of the European Union.
The drafting of the Data Protection Communication has taken into account the guidelines of the Transparency Guidelines , so the complete information was made with annexes .
This information was issued by the following company which is also the data processor:
INSIGHTFULBOOST LLP
Reg. Office: England and Wales
Proposed Registered Office Address:
85 GREAT PORTLAND STREET, FIRST FLOOR
LONDON
ENGLAND W1W 7LT
United Kingdom
Email: support@shemales-barcelona.com
CHAPTER II
Data processors
Data processor: natural or legal person, public authority, agency or other body which manages personal data on behalf of the data processor; (Rule 4, Article 8.) Recourse to the data processor does not require the prior consent of the data subjects, but it is necessary to inform them. Accordingly, we provide the following information:
1. IT service provider of our company.
Our company maintains and manages its website within the company group.
2. The accounting service provider of our company.
Our company manages accounting and bookkeeping tasks related to tax obligations within the company group.
CHAPTER III
DEFINITIONS USED IN THE INFORMATION DOCUMENT
„The definition of handling personal data” : any type of operation or sum of operations using automated or non-automated forms of personal data, including collection, recording, organization, dissection, storage, transformation or change, consultation, inspection, use, publication, forwarding, dissemination or making available by other types of methods, synchronization, connection, limitation, deletion and destruction.
„Personal data” : any type of information about an identified or identifiable natural person; A natural person is one who can be identified, directly or indirectly, on the basis of some kind of identifier, such as name, number, location data, online identifier, or on the basis of one or more identical factors, such as the person's physical, physiological, genetic, spiritual, economic, cultural or social identity.
„Specific data” - personal data concerning racial origin, nationality, political affiliation, religious or other beliefs, organisational membership of a trade federation, sexual life, health status, harmful habits and personal criminal record;
„Data processing” - any kind of operation or sum of operations, whether or not automated, on personal data, including collection, recording, organisation, dissection, storage, transformation or alteration, consultation, inspection, use, publication, forwarding, dissemination or making available by other means, synchronisation, connection, limitation, deletion and destruction.
"Controller" means a natural person, legal entity, executive authority, agency or any other body which defines the purposes and implements the processing of data, either individually or in cooperation with others; if the purposes and implements of data processing are defined by UN or Member State law, the controller or special aspects of determining the person of the controller may be defined by UN or Member State law;
"Data processor" means a natural person, legal entity, executive authority, agency or any other body which processes personal data on behalf of the controller.
"Recipient" means a natural person, legal entity, executive authority, agency or any other body with which personal data is shared, regardless of third-party status. Executive authorities which are able to access personal data in accordance with UN or Member State law in the scope of individual research are not qualified as recipients; The processing of the above-mentioned personal data by executive authorities must comply with the purpose of the data protection laws to be applicable in accordance with the data protection objectives.
“Contribution of the data subject” : the voluntary, exact and adequately understandable pronouncement of the will of the data subject based on sufficient instructions, with which the data subject announces the acceptance of the processing of personal data concerning him or her through a statement or writing expressing the confirmation in an unambiguous manner;
„Data protection incident” : a violation that causes accidental or unlawful destruction, loss, alteration, unlawful publication or unauthorized access to personal data that are transmitted, stored or otherwise handled.
Additional definitions and information: https://ec.europa.eu/info/law/law-topic/data-protection/reform/rules-business-and-organisations_en
CHAPTER IV
DATA PROCESSING PRINCIPLES
Protecting your personal data is especially important to us. We handle your personal data in a transparent, decent and legal manner. The collection of data may serve a certain, clear and legal purpose that is limited to the necessary amount of data, stored in a secure and limited manner.
„Lawfulness, decent procedure and transparency” : personal data must be processed in a lawful and decent manner in a manner that is clear and transparent to the data subject.
„Purpose limitation” : the collection of personal data shall only be carried out for a clear and legal purpose and shall not be handled in a manner that is irreconcilable for these purposes; according to the indent of Article 89 (1), data collected for general archiving purposes, scientific and historical research or further processing for statistical purposes are not considered irreconcilable for these purposes.
„Data minimization” – personal data must be relevant and adequate in terms of the purposes of data processing, and must be limited to the necessary amount.
„Reliability” – personal data must be reliable and up-to-date if necessary – all reasonable measures must be taken to ensure that data that are unreliable in terms of the purposes of data processing are deleted or corrected without delay.
„Limited storage” – personal data must be stored in such a way that the data subjects can only be identified for the time necessary to access the data in order to meet the requirements of the data processing purposes. This time limit may only be exceeded in accordance with Article no. 89. indent (1), which provides that the processing of personal data shall be carried out for the purposes of general archiving, scientific and historical research or further processing for statistical purposes, with regard to the application of appropriate technical and organizational measures to protect the rights and freedom of the data subjects included in this decree.
„Integrity and confidentiality” – personal data must be handled in a way that adequate security of personal data can be ensured with appropriate technical and organizational measures applied, including data protection against unlawful or illegal data processing, accidental loss, destruction or damage.
„Responsibility” – the controller is responsible for complying with the terms mentioned above and must also be able to justify responsibility.
CHAPTER V
INSTRUCTIONS FOR DATA SECURITY
The Organization is taking all necessary technical, organizational and security measures to ensure the protection of personal data at the highest level and also to prevent illegal modification, destruction and blocking of use.
Our websites are protected with SSL security certificates. SSL certificates are intended to create a secure and encrypted channel between the client and the server. Certain information, such as credit card data, account authorization data and other confidential information must be transferred through an encrypted channel to exclude the possibility of data leakage. By using SSL certificates, our data is encrypted before being transferred over the Internet. The encrypted data can only be translated by the destination server. This ensures that personal data entered on the website cannot be stolen. Transactions are carried out using PIN codes and other encryption methods.
The data collected by us is stored in different places within our infrastructure, including system logs, back-end databases and analytical systems. In the case of data transfers from the EEA to the United States and other countries, we follow the instructions of the European Commission and rely on the compliance provisions for individual countries defined by the European Commission.
Some of our services may provide links to other websites such as commercial banners or Facebook. Since the data protection principles and practices of these third-party websites are not controlled by us, please read the data protection principles defined there for information about their methods of collecting and using personal data. Part of our products and services can also be paid for with credit cards or electronic vouchers. In both cases, you are redirected to third parties who have fully complied with their part of the security measures.
The transfer of data via the Internet by email or text message is not completely secure. Although we are doing our best to protect your personal data, we cannot guarantee the security of your data transferred by our services or email; each data transfer is the subject of the responsibility of the owner. After entering your personal data, we implement appropriate technical and organizational measures to protect your data from loss, theft, unauthorized use, access or modifications. Protect your data with strong passwords.
CHAPTER VI
MANAGEMENT OF PERSONAL DATA
DATA PROCESSING RELATED TO CONTRACTS, TERMS AND CONDITIONS, WEBSITE
1. Management and registration of data relating to contracting persons, advertisers.
Purpose of processing personal data: the company manages the data of customers and suppliers by virtue of the conclusion, fulfillment, termination of a contract and the provision of advertising and storage space on the Internet.
Processed personal data: name, birth name, date of birth, address, seat, seat address, telephone number, email address, website address, bank account number, customer ID (customer number, order number), online ID number
Legal basis for the management of personal data: basis of the right of performance of the contract. This data processing is considered lawful even if the data processing was required at the request of the customer in order to take the necessary measures prior to the conclusion of the contract.
Recipients of personal data and categories of recipients: Company employees dealing with tasks and data processors related to customer service, accounting, bookkeeping and taxes.
Duration of storage of personal data: until the data subject withdraws his consent, in case this does not happen, the Company deletes the data 5 years after the cancellation of the Company's account. In case the Company is obliged to keep the data according to the Accounting Act, the Company will only delete the data after 8 years after the cancellation of the account, regardless of the cancellation of the account. In practice, this means if the data is part of the documents supporting the accounting, for example, if the data is specified in documents related to contracts between the Company and the Client (e.g. in orders) or in the invoices issued.
Interested parties : website customers, clients, suppliers, advertisers
2. Legal entity clients, customers, suppliers, representatives related data
Purpose of personal data management : Fulfillment of contracts concluded with companies as legal partners, business contacts.
Processed personal data : name, telephone number, email address, online ID
Legal basis for personal data management : fulfillment of the contract.
Recipients of personal data and categories of recipients: Company employees who perform tasks and data processors related to customer service, accounting, bookkeeping and taxation.
Duration of storage of personal data: for a period of 5 years from the business relationship and the existence of representation
Data subjects: commercial representatives of advertisers who are not natural persons, clients and customers.
3. Processing of data related to visitors (cookies) on the Company's website
In accordance with general practice, our company also uses cookies on its website. The cookie is a small file containing a series of characters that is downloaded to the user's computer when the user visits a web page. Cookies generally facilitate the use of the website, create a real user experience and contribute to it being an efficient source of information, in addition they ensure that the website operator can monitor the operation of the website, help prevent fraud and encourage the proper functioning of the services provided on the website at an appropriate level.
Cookies alone are not suitable for identifying the identity of the user.
Data subjects: all natural persons visiting the site.
Recipients of personal data and categories of recipients: The Company's IT provider and employees involved in the service.
Types of cookies
Technically indispensable work process (session) cookies
They help users to navigate the website smoothly, contribute to the proper functioning of the website and the full use of all its functions, the services available through the website, and, among other things, the memorization of the operations performed on the website by the user.
No user contribution is required for this type of cookies.
Use cookies and related cookies to ensure performance.
These cookies make it possible for the Company to memorize the user's choices related to the website. The user can prohibit this data processing before using the service and also during the use of the service. This data cannot be assigned to the website user's data and cannot be passed on to a third party without the user's consent.
For these types of cookies, the user's consent is required.
Cookie management on the website.
Our company's website records and handles the following data relating to the user and the navigation tool: password, IP address, language, registration date, most recent activity, automatic login cookie, operating system, browser type and other information. The system automatically tracks this data and does not link it to data provided during registration or during use. Users do not have access to this data, only the service provider.
The service provider has the right to record data from which Internet pages the User came to the website, including which were visited via the website and the date and duration of the visit. The person and identity of the user cannot be traced and disclosed with the help of this data.
Processing (session) cookies
They help users navigate the website.
PHPSESSID: technical cookie containing work process ID
Legal basis for data processing: The proper work process related to the website is guaranteed in accordance with the provisions of Act 13/A § (3) on certain issues related to ICT services and in accordance with the relevant directives of the European Commission.
Purpose of data management: ensuring the proper functioning of the website.
Duration: The duration of data processing of these cookies only concerns the actual visit of the user, when the work process is finished or when the browser is closed, the cookies are automatically deleted from your computer.
Cookies that promote usage:
These cookies make it possible for our website to track the operating mode (e.g. whether the website uses the Hungarian or English version, the accessible version, how many results appear in the browser's results list so that you do not need to enter them again on your second visit. Without the information stored in the cookies, our website can function, albeit with fewer problems.
The website uses the following cookies:
cookieconsent_dismissed : cookie required for the operation of the cookie regulation that stores the information if the visitor agrees to the cookie regulation
fixlanguage : cookie containing the ID of the language actually used
Legal basis for data processing : visitor's consent.
Purpose of data processing : increase service efficiency, increase user experience, make the use of the website more comfortable.
Duration of data processing : 12 months.
Cookies that guarantee performance:
Cookies that guarantee performance allow us to collect information about how visitors use our website (such as which pages visitors have visited, how many pages they have visited, where on the page they have clicked, how long each of the work processes took, what kind of error messages appeared, etc.).
This is done so that we can further develop our website (available services, functions, etc.) according to the needs of our visitors and provide them with a high-quality and user-friendly experience.
Third-party cookies
To measure performance, our website uses third-party cookies on each visit. By using cookies, we can track how many visitors are coming to the website and what content they are interested in. We store each piece of information anonymously to ensure a high-quality experience for our users.
The website uses analytical cookies from the following provider:
Cloudflare - detailed information about the service is available at the following link: https://www.cloudflare.com/terms/
Google Analytics - detailed information about the service is available at the following link: https://www.google.com/analytics/terms/us.html
Legal basis for data processing: visitor consent.
Purpose of data processing: to increase the efficiency of the service and user experience, to make the use of the website more comfortable.
Duration of data processing: 12 months.
For more information on third-party cookies: https://www.google.com/policies/technologies/types/ , on data protection: https://www.google.com/analytics/learn/privacy.html?hl=en
Information and deletion of cookies
Before entering our website, the user visiting our website is informed about the handling of cookies.
It is not mandatory to accept and authorize the use of cookies. You can reset your browser settings so that all cookies are disabled or the user receives an alert when the system sends a cookie. Although most browsers automatically accept cookies in the default settings, however, they can generally be changed to prevent automatic acceptance, the system always offers this option.
For more information on the settings of the most popular browsers:
Google Chrome
Firefox
Microsoft Internet Explorer 11
Microsoft Internet Explorer 10
Microsoft Internet Explorer 9
Microsoft Internet Explorer 8
Microsoft Edge
Safari
We would like to draw your attention to the fact that certain functions or services of the website will not function properly without cookies. More information in the cookie policy .
4. Registration of an advertiser profile on the Company's website.
The purpose of managing personal data : creating a contact account to distinguish between users and establish new contacts, including the use of the services offered by the website and the storage space (e.g. advertising profile), contacts, electronic contact and information about the company's services, contractual conditions, promotions.
Data subjects : natural persons advertising escort services and natural persons provided by escort agencies.
Processed personal data: email address, user type, login, IP address, registration date, IP address, most recent activity, auto-login cookie and data for advertising profiling
Legal basis for personal data management: Natural persons who register can enter their data by ticking the appropriate boxes and consenting to the management of their data.
Recipients of personal data and categories of recipients: Company employees dealing with customer service, marketing activity, employees dealing with data processing and storage activities for the IT service provider.
Duration of personal data storage: until the existence of registration/service or until the data subjects have withdrawn their consent (deletion request). Until the data subjects have withdrawn their consent, otherwise the Company will delete the data 5 years after the deletion of the account.
5. Personalized advertising profile account on the Company's website
Purpose of data processing : creating an advertising profile to distinguish between users and present the advertised services
Data subjects : natural persons advertising escort services and natural persons provided by escort agencies.
Legal basis for data processing : the consent of the data subject which is provided when the advertising account is created.
Processed personal data : nickname, age, nationality, advertising country, advertising city, sexual orientation, target group, about me, height, weight, bust, hip, waist size, hair color, eye color, languages ??spoken, favorite drink, favorite music, uploaded photo, validation photo, porn star name, hobbies, uploaded video.
Recipients of personal data and categories of recipients : Company employees dealing with customer service, marketing activity, employees dealing with data processing and storage activities for the IT service provider.
Duration of storage of personal data: until the withdrawal of consent by the data subject, for 6 months after deletion of the account.
The company informs its users that some of this data is of a special personal nature (e.g. sexual orientation), provided that such data is voluntary and completing the profile is considered as written consent. If you choose to provide this information in your profile and advertising, we will share it on the website and use it to personalize functions and services. All users who have authorized access to your account can view the personal data stored in the account, including phone number, accounts about the services, ratings, comments.
6. Data processing related to newsletter services.
Users who register to receive the newsletter agree to the management of their personal data by checking the appropriate box. The user who wishes to unsubscribe from the newsletter can do so using the "Unsubscribe" function or in writing, or by sending a statement by email at any time, this means the withdrawal of consent. In this case, all user data must be deleted immediately.
Purpose of managing personal data : sending a newsletter, marketing material related to the Company's products and services, sending personal data to chosen advertisers in order to contact them
Data subjects for personal data : all natural persons who registered for the press service by accepting the purpose, data processing and the Terms and Conditions.
Personal data processed : name of the natural person, email address, language spoken, interests of the services that are identified based on the advertising services selected by the user.
Legal basis for data processing : the consent of the interested party.
Recipients of personal data and categories of recipients: Company employees dealing with customer service, marketing activity, employees dealing with data processing and storage activities for the IT service provider.
Duration of storage of personal data: until the newsletter service is provided or until the data subject withdraws consent (deletion request).
By registering, the user acknowledges that the data collected, based on preferences, user habits and interests related to marketing content, can be used to make partially automated decisions as a result of which the Company group will identify potential business opportunities on the „https://shemales-barcelona.com website through subdomain platforms classified by country.
By accepting the Data Protection Notice, users acknowledge and agree that, with the help of the "https://shemales-barcelona.com" platform, it continuously monitors and records whether users opened the newsletters or deleted them without opening them and how many times they clicked on the references contained therein. Accordingly, the company identifies content that may be of interest to the company contacted via the email address.
CHAPTER VII
DATA PROCESSING BASED ON LEGAL OBLIGATIONS
1. Data processing for tax and accounting purposes.
The Company manages the data of natural persons (customers, suppliers) defined by legislation as part of its contractual obligation to comply with the necessary tax and accounting obligations stipulated by law (accounting, taxes). The data processed by the Company are defined by the Accounting Law: tax number, name, address, tax status, name, address, the designation of the person or organization ordering the economic transaction, the signature of the authorizing officer and the person certifying the execution of the action, the signature of the auditor; the recipient's signature on receipts for stock movements and on receipts for cash handling, the taxpayer's signature on receipts, the number of the business license, the number of the primary producer card, the tax identification number. The duration is 8 years after the termination of the legal relationship. Recipients of personal data: employees and data processors of the Company dealing with tax, accounting, payroll and social security tasks.
CHAPTER VIII
DATA SHARING WITH PARTNERS
The Company operates the website worldwide, through the website adapted for specific countries, shares the information within the company and with external partners and with those with whom it contacts as an advertiser or registered member in accordance with these regulations and the General Terms and Conditions.
For the purposes specified in these regulations, the information and personal data processed by are sent to the United Kingdom, the United States of America or others, not to the countries of residence or stored and processed there by our contractual data processors. Forwarding the daa is required to ensure the services described in the General Terms and Conditions and to be able to operate our storage and contact services worldwide and make them accessible to all our users.
In case personal rights are transferred within , this type of transfer falls under the Commission's model contracts in accordance with the stipulations of decisions 2004/915/EC and 2010/87/EU on the transfer of personal data (i.e. on the basis of standard contractual clauses). In case data is transferred to third parties, these transfers are either (i) the Commission's model contracts for data transfer agreements (i.e. standard contractual clauses) in accordance with 2004/915/EK and 2010/87/EU; or (ii) you can rely on the EU-US Privacy Shield framework system. You can contact the data protection officer by obtaining a copy of the data transfer contract or regarding additional information regarding the relevant safeguards. You can find out more about the EU-US data protection framework system on the website of the US Department of Commerce.
If we share personal information with partners related to certain third parties, including marketing and advertising partners, this information includes your name, email address, and other information that makes it possible for the partners to:
provide assistance in using our products and services,
contact you with offers, services, and products that may interest you,
secure your products or services.
If according to their privacy rules, your preliminary consent is required to share such information, we will only share information with your consent. We would like to draw your attention to the fact that we will not grant permission if a service request comes through a tool whose exact place of origin is hidden, for example, through a virtual private network because we cannot identify the legal status of that tool.
In addition, it is strictly prohibited for our partners to use contact data beyond the purposes mentioned without prior notice. We will not provide credit card details to our partners.
In case we collect data from you in connection with an offer presented collectively by us and a partner, we will inform you about who collects the information, whose data protection rules will be deemed to apply in case of your information.
It may happen that we enter into a contract with a carefully chosen third party partner to provide us with a service (such as customer service, fraud detection and deterrence or access to the advertising tool and provide information technology and storage services) or to assist us in our own marketing and advertising activity (including analytical information and search optimization services). These types of model contracts prohibit us from using your personal data for any purpose beyond the original purpose for why it was shared. If you purchase a third party product or service through one of the brands, we hand over your personal data to such third party so that they can fulfill your order.
We do not share personal data with third parties, including media, industry observers, marketing and advertising partners, vendors, customers, potential customers or partners. For example, we present our mobile search trends, email open rate, industry best practices and campaign or number of users who visited our web pages or clicked through to our web page and rated our products and services.
CHAPTER IX
COMMUNICATION ON DATA SUBJECT RIGHTS
Data subjects have the right to request information about the handling of personal data, may request correction of their personal data and, with the exception of mandatory data processing, deletion, withdrawal of data, may use their right to data transfer and the right to object in the manner specified in the data record and in the contact details of the data processor specified above.
The data processor takes the necessary measures to provide all relevant information specified in Articles 13 and 14 of the GDPR with respect to the processing of personal data to data subjects, and in accordance with Articles 15–22 and 34 in a clear, concise, comprehensible and easily accessible manner.
Right of access : Data subjects have the right to receive feedback from the data processor on whether the processing of their personal data is ongoing and if such data processing is ongoing, they have the right to be granted free access to the data and pieces of information:
purposes of data processing;
categories of personal data concerned;
recipients and categories of recipients who were informed about the personal data or with whom the data will be shared, including in particular recipients in third countries and international organisations
intended duration of storage of personal data;
correction, deletion or limitation of data processing and the right to object;
right to lodge appeals and complaints with the supervisory authority;
information on data resources;
the fact of automated decision-making, including profiling and the logics applied and comprehensible information about it, and the foreseeable consequences for data subjects.
The data processor shall provide the necessary information within one month of the submission of the request.
Right to data correction – Data subjects have the right to request the correction of incorrect personal data processed by the data processor concerning them, this also applies to data where information is missing. In the user profile, purchases and, in the case of some saved data, registered persons can also make the required changes immediately.
Right to deletion – Data subjects have the right to request the immediate deletion of their personal data in the following cases:
the personal data that was collected or otherwise processed is no longer necessary;
the data subjects withdraw their consent to data processing, there is no other legal basis for data processing;
the data subjects object to data processing and there is no legal reason for data processing;
the personal data was processed unlawfully;
in accordance with European Union or national law, personal data relating to the data processor must be deleted;
the personal data is collected as ICT-related services are offered. Deletion of data cannot be initiated if data processing is required: to exercise rights related to freedom of expression and rights related to information;
in order to comply with national or EU legislation providing for the management of personal rights vis-à-vis the data processor, or in order to fulfil an obligation as part of the exercise of public powers;
in cases relating to public health, archiving, scientific and historical research, for statistical purposes or for public benefit;
or the purpose of the establishment, exercise or defence of legal claims.
Right to limit and withdraw data processing – at the request of data subjects, the data processor limits data processing if one of the following conditions is met:
the data subjects contest the accuracy of the personal data, in this case the limitation only refers to the period allowing the accuracy of the personal data to be verified;
the data processing is unlawful and the data subject opposes the erasure of the data, instead requesting the limitation of its use;
the data processor no longer needs the data for the purposes of data processing, but the data subject requires it for the purpose of the establishment, exercise or defence of legal claims; or
the data subject has objected to the data processing, in this case the limitation refers to the period of time, until it is decided whether the justified reasons of the data processor take precedence over the justified reasons of the data subject.
In case data processing is subject to limitations, with the exception of storage, personal data may only be handled and processed with the prior consent and approval of the data subject, or for the purpose of establishing, exercising or defending legal claims, or to defend the rights of other natural or legal persons, or for the public benefit and the interest of the European Union or of any of the Member States.
Right to data portability – Data subjects have the right to receive a machine-written, printed, legible and typewritten document specifying their rights that they provided to the data processor and to send this data to another data processor.
Right to object – Data subjects have the right to object to the public use of their personal data for any reason or to the data processing required for the task performed as part of the exercise of public powers transferred to the data processor or to the data processing required for the validation of the justified interests of the data processor or a third party, including profiling based on the regulations mentioned above.
In case of objection, the data processor is not authorized to continue with the data processing, except if compelling legitimate reasons justify its further use that take priority over the interests, rights and freedom of the data subject