Aurora World GmbH data protection note

Introduction

Welcome to the data protection declaration of Aurora World GmbH.

Aurora World Ltd respects her privacy and undertakes to protect your personal data. This data protection declaration will inform you about how we search for your personal data and inform you about your data protection rights and how the law protects you.

Although this data protection declaration is provided in a short, transparent and understandable way, please use the glossary to help you understand the meaning of some of the terms used in this data protection declaration. If you are unclear about something or want to assert your legal rights, please contact us by specifying the details listed below. This data protection declaration is provided in a layered format so that you can click on the areas below.

  1. Important information and who we are
  2. The data we collect about you
  3. How are your personal data collected
  4. How we use your personal data
  5. Information on your personal data
  6. International transfers
  7. Automated decision making
  8. Data security
  9. Data retention
  10. Your legal rights
  11. GLOSSARY
  12. Important information and who we are

Purpose of this data protection declaration

This data protection declaration is intended to provide you with information on how Aurora collects and processes your personal data, including all data that you provide to us via the correspondence or the use of our website.

Our website is not intended for children and we do not knowingly collect data that relate to children.

It is important that you observe this data protection notice along with all other data protection regulations or fair processing that we can provide on certain occasions if we collect or process personal data about you so that you are fully aware of how and why we use your data. This data protection note complements the other announcements and is not intended to override them.

Controller

Aurora World Ltd is responsible and responsible for your personal data (together as "Aurora", "we", "us" or "our" in this data protection declaration). We are part of a global group of companies with headquarters in South Korea, Hong Kong and the USA.

We have appointed a data protection officer (Dpo), which is responsible for monitoring questions in connection with this data protection declaration. If you have any questions about this data protection declaration, including all applications for exercising your legal rights, please contact the DPO with the details listed below.

Contact information

Our complete details are:

Full name of the legal person: Aurora World Ltd

Name or title of dpo: Keith Gray

E-mail address: info@auroraworld.co.uk and keith.gray@auroraworld.co.uk

Postal address: Aurora House, Hampshire Intl Business Park, Crockford Lane, Basingstoke, RG24 8Wh

Telephone number: +44 (0) 1256 374260

You have the right to file a complaint to the information commissioner's office at any time (').ICO"), the British supervisory authority for questions of data protection (www.ico.org.uk). However, we would appreciate the opportunity to treat your concerns before approaching the ICO, please contact us in the first instance.

Changes to the data protection declaration and your obligation to inform us about changes

This version was recently updated to 24.T May 2018. It is important that the personal data we hold about you are correct and up -to -date. Please keep us up to date when your personal data changes during your relationship with us.

Links of other providers

Our website and any correspondence between us can contain links to third parties, plug-ins and applications. If you click on these links or activate these connections, third -party providers can collect or use data together. We do not control these foreign websites and are not responsible for your data protection declarations. When you visit a third -party website, we recommend that you read your data protection declaration.

  1. The data we collect about you

Personal data or personal data is all information about a person from whom this person can be identified. It does not contain any data in which the identity has been removed (anonymous data).

We can collect, use, save and transmit different types of personal data about you, which we have grouped together:

  • Customer information that we collect with us when setting up your account, be it in your own name or in the name of your employer/representation organization, by filling out forms on our website or in other ways, including your contact details such as name, email address, user name, telephone number, organization, financial information and your role.
  • Suppliers/suppliers and agent information that we capture with you and/or with your employer/representation organization before and the conclusion and the conclusion of our business relationship (possibly). This includes your contact details such as name, email address, telephone number, organization, financial information, billing address and your role.
  • Transaction data about yourself and/or your employer/representative organization.
  • If you get in touch with us, we can lead to recording of this correspondence.
  • Information about you on websites of third -party providers such as Facebook and Twitter.
  • If you get in touch with us to report a problem with our website or for technical or customer support, we can lead to recording this correspondence or conversation.
  • Information that you upload via our website or release it via our website.
  • Personal information, including contact and financial information, for third parties (see section 3 below for further information).
  • Cookie information (see below and our cookie guideline for further details).
  • Details on your visits to our website, including but not limited to, traffic data, location data, location data and other communication data, the resources that you access, internet protocol (IP) Address, login details, browser type and version, time zone setting and location, browser plug-in-in type, operating systems and versions, and. the devices you use to access our website.
  • Information about your preferences when receiving marketing from us and our third parties and your communication projects.

We can also ask you to carry out polls that we use for research purposes, although you don't have to react to you.

We collect, use and share Summarized data Like statistical or demographic data for every purpose. Agregated data can be derived from your personal data, but are not regarded as personal data in the law, since this data Not Avoid your identity directly or indirectly. For example, we can summarize the data that affects your use of our website in order to calculate the percentage of users that access a specific website function. However, if we combine or connect data to your personal data so that you can identify it directly or indirectly, we treat the combined data as personal data that is used in accordance with this data protection declaration.

We don't collect any Special categories of personal data About them (this includes details about their breed or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union, information about their health and genetic and biometric data). We also do not collect any information about criminal convictions and offenses.

If you do not provide any personal data

If we have to record personal data by law or under the conditions of a contract that we have with you and you do not provide this data if you request this, we cannot execute the contract we have or try to contact you (e.g. to provide goods or services). In this case, we may have to cancel or cancel/do not have a product or service that you have with us/do not enter into the contract with you or your respective organization. If this is the case, we will notify you at the time.

  1. How are your personal data collected?

We use different methods to record data from and about you, including through:

  • Direct interactions. You can send us your personal data by filling out forms or with us by post, phone, email by allowing us to scan your brand at a fair or in any other way. This also includes personal data that you provide for the following people:
  • apply to our products or services;
  • Create an account with us;
  • Interact with us to discuss the goods and services we offer;
  • Subscribe to our service or publications;
  • To have request marketing sent to you;
  • To have request marketing sent to you;
  • to enter a competition, funding or a survey;
  • Give us a feedback.
  • Automated technologies or interactions. If you interact with our website, we can automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data with the help of cookies and other similar technologies. We can also receive technical data about you if you visit other websites that use our cookies. Please note our cookie guidelines http://www.auroraworld.eu/cookie_policy For further details.
  • Third parties or publicly accessible sources. We can receive personal data about you from various third -party providers and public sources as explained below.
  • Technical data from the following parties:
    • Analysis providers such as Google outside the EU
    • Advertising networks like F. W. A (Tax Free World Association), VisitConnect
    • Search information providers such as Facebook, Google, Bing and every similar search engine inside and outside the EU.
  • Personal data required to complete financial transactions from providers of technical, payment and delivery services such as Shopify, WorldPay and PayPal.
  • Personal information from publicly accessible sources such as company house, online and the electoral register within the EU.
  • Contact your employer or a third party you have previously provided with your contact details, or contact information.
  • Agents, shopping groups, member groups
  • Lists of the participants who are made available at trade fairs show that we visit or are part of it.
  1. How we use your personal data

We will only use your personal data if the law allows us. We will use your personal data most often under the following circumstances:

  • Where we have to fulfill the contract, we are in contact with them or have been received with them.
  • Where it is necessary for our legitimate interests (or that of a third party) and your interests and fundamental rights do not override these interests, these interests are not overridden.
  • Where we have to comply with a legal or official obligation.

See section 10 'Glossar' to learn more about the types of the rightful basis that we will rely on to process your personal data.

In general, we do not rely on the consent as a legal basis for the processing of your personal data, which may not be done to you by email or text message in connection with the transmission of direct marketing announcements. You have the right to revoke your consent to marketing at any time by make contact.

Purpose for which we use your personal data

In a table format, we demonstrated a description of all ways how we want to use your personal data and which of the legal bases to which we rely on to do so. We have also worked out what our legitimate interests are, where attached.

Note that we can process your personal data for more than a lawful reason, depending on the purpose for which we use your data. Please contact us If you need details about the specific legal reason we need to process your personal data if more than one floor is listed in the table below.

 

Purpose/activity

Lawful basis for processing including the basis of the legitimate interest

The registration of new customers and the fulfillment of our obligations from contracts that have been received between you, your respective organization and us.

Performance of a contract with you

If you are our supplier/supplier or if you are a authorized representative of one of our suppliers/suppliers, to enter into negotiations and then to fulfill our obligations from contracts that have been received between you, your respective organization and us.

(a) Performance of a contract with you or your organization

(b) Legal interests (in negotiations with you to enter into the services we want)

So process and deliver orders:

(a) confirmation of an order, including, but not limited to confirmation of the delivery time and place.

(b) Manage payments, fees and fees

(c) Collecting and winning money that is owed to us

(a) Performance of a contract with you

(b) necessary for our legitimate interests (to recover debts that are trained to us)

To manage our relationship with you/your organization, which will include the following:

(a) You will inform you about changes in our terms and conditions, our services or data protection regulations

(b) Management and maintenance of our records

(c) Leave a review or take a survey

(a) Performance of a contract with you

b) which are necessary to comply with a legal obligation

(c) necessary for our legitimate interests (to update and examine our records how customers use our products/services)

In order to send you business-to-business marketing and in particular information about our products and services that we feel.

Necessary for our legitimate interests (for the development of our products/services, growth of our business)

In order to enable you to participate in interactive functions of our service, including participation in a competition, a competition or a survey if you want to do so.

(a) Performance of a contract with you

(b) necessary for our legitimate interests (to examine how customers use our products/services to develop them and grow our business)

To manage and protect our business and our website (including troubleshooting, data analysis, tests, system maintenance, support, reporting and hosting of data) 

(a) required for our legitimate interests (for the management of our company, provision of administrative and IT services, network security, to prevent fraud and in connection with a corporate reorganization or group structure)

b) which are necessary to comply with a legal obligation

To provide relevant website content and ads to you and measure or understand the effectiveness of the advertising that we provide to you

Necessary for our legitimate interests (to examine how customers use our products/services to develop them, grow our business and inform our marketing strategy)

Use of data analyzes to improve our website, products/services, marketing, customer relationships and experiences

Necessary for our legitimate interests (to define types of customers for our products and services, update our website and marketing materials to keep and relevant to develop our business and inform our marketing strategy)

To give you suggestions and recommendations on products or services that could be of interest to you

Necessary for our legitimate interests (to develop our products/services and grow our business)

Implementation of research, statistical analysis, internal customer service monitoring and market research

Necessary for our legitimate interests (for the development of our products/services, growth of our business, improvement in the services that we deliver to customers and inform our marketing strategy)

To facilitate the administration of the entire company of the Aurora Group and in particular to maintain our internal records and databases and to create a slimmer and efficient business system for our customers and those who interact with us.

Necessary for our legitimate interests (to develop our products/services, to expand our business, to improve the services that we provide and to ensure a consistent corporate strategy)

To fulfill our obligations and fulfill our contractual obligations based on our role as the main and maintenance of our agency relationship with you.

(a) Performance of a contract with you

b) which are necessary to comply with a legal obligation

(c) necessary for our legitimate interests (to promote our business in all areas that we operate)

 

marketing

We strive to give you a selection when choosing certain personal data, especially in the area of ​​marketing and advertising.

Advertising offers from us

We can use your personal data to form a view of what we think that you want or need or what could be of interest to you. This is how we decide which products, services and offers can be relevant to you (we call this marketing).

Except for the above, you will receive marketing communications from us if you have requested information from us or bought goods from us or if you have provided us with your information if you are entered in a competition or registered for an advertising campaign and you have not decided to receive this marketing in any case.

If you are a sole dealer or in a partnership and you have not bought any goods from us in the past, we will only contact you for marketing purposes if you have expressly agreed to receive electronic mail from us.

Marketing of third parties

We will obtain your express consent before we share your personal data with a company outside the Aurora Group for marketing purposes.

Opting out

You can ask us or third parties to send your marketing messages at any time by following the opt-out links on marketing messages that are sent to you or from you make contact at any time.

If you choose to receive these marketing messages, this does not apply to personal data that is made available to us on the basis of a product/service purchase, a guarantee registration, a product/service experience or other transactions.

Cookies

Our website uses cookies to distinguish them from other users of our website. This helps us to offer you a good experience if you search our website and also enable us to improve our website.

You can set your browser so that it rejects all or some browser cookies or warns you when websites set cookies or access cookies. If you disable or reject cookies, please note that some parts of our website can work inaccessible or not properly. For more information about the cookies we use, please refer to our cookie guideline, which on request or from http://www.auroraworld.eu/cookie_policy

By further using our website, you agree to our use of cookies. Our lawful basis for the processing of personal data that we collect on the basis of our use of cookies and the purposes for which they are processed are explained above.

Change of purpose

We will only use your personal data for the purposes for which we have collected it, unless we are reasonably believed that we have to use it for another reason and that reason is compatible with the original purpose. If you would like to receive an explanation of how the processing for the new purpose is compatible with the original purpose, please contact contact us.

If we have to use your personal data for a non -related purpose, we will inform you and we will explain the legal basis that allows us.

Please note that we can process your personal data without your knowledge or consent in accordance with the rules mentioned above, provided this is required or permitted.

  1. Information on your personal data

We may share your personal data with the parties listed below for the purposes mentioned in the table in section 4.

  • Internal third parties, as they are presented in the glossary.
  • External third parties, as they are presented in the glossary.
  • Third parties we can choose to sell, transfer or merge parts of our business or our assets. Alternatively, we can try to acquire other companies or merge with them. If a change to our business takes place, the new owners can use their personal data in the same way as explained in this data protection declaration.

We ask all third parties to respect the security of your personal data and to treat you according to the law. We do not allow our third -party providers to use their personal data for their own purposes and only to enable them to process their personal data for certain purposes and according to our instructions.

  1. International transfers

We share your personal data within the Aurora Group. This means that your data is transferred outside the European Economic Area (EEA).

If we transmit your personal data from the EEA, we ensure that it is granted a similar level of protection by ensuring at least one of the following safety precautions:

Please contact us If you would like more information about the specific mechanism that we use in the transmission of your personal data from the EEA.

  1. Automated decision making

We do not make any decisions about you by only using technologies in which none of our employees or other people were involved.

  1. Data security

We have taken suitable security measures to prevent your personal data from being accidentally lost, used or accessed, changed or disclosed in an unauthorized manner. In addition, we limit access to your personal data to employees, agents, contractors and other third parties who have to know a company. You only process your personal data on our instructions and are subject to a duty of confidentiality.

We have used procedures for dealing with a suspected violation of personal data and will inform you and every applicable regulatory authority an injury in which we are legally obliged to do so.

  1. Data storage

How long will you use my personal data?

We will only save your personal data as long as it is necessary for the fulfillment of the purposes we record, including the fulfillment of legal, accounting or reportable requirements.

In order to determine the appropriate retention period for personal data, we consider the amount, the type and sensitivity of the personal data, the potential risk of damage through unauthorized use or disclosure of your personal data, the purposes for which we can process your personal data and whether we can achieve these purposes by other means, as well as the applicable legal requirements.

Details on retention periods for various aspects of your personal data are available in our retention policy, which you can request from us. make contact.

As a general guide, we have to keep basic information about our customers by law (for seven years after they no longer used customers for tax and other purposes).

Under certain circumstances you can ask us to delete your data: See Request erasure Below for more information.

Under certain circumstances, we can anonymize your personal data (so that you can no longer be associated with you) for research or statistical purposes. In this case, we can use this information indefinitely without further notification.

  1. Your rights

 Under certain circumstances, you have the right by law:

  • Request access on your personal information (generally known as "data specialist access requirement"). In this way you will receive a copy of the personal data that we keep about you and to check whether we are legally processed.
  • Requirement correction Of the personal information that we think about you. This enables you to have all incomplete or inaccurate information that we correct about you, even though we have to check the correctness of the new data you provide to us.
  • Request erasure Your personal information. This enables you to ask us to delete or remove personal data if there is no good reason for us to have it processed. You also have the right to ask us to delete or remove your personal data if you have exercised your right to edit (see below), where we have illegally processed your information or where we have to delete your personal data in order to meet the local laws. However, please note that we may not always be able to meet your application for deletion for specific legal reasons that may be communicated to you at the time of your request.
  • Object to be processed Of your personal information in which we trust a legitimate interest (or that of a third party), and there is something about your special situation that you want to make about processing on this floor, as you have the feeling that it has an impact on your fundamental rights and freedoms. You also have the right to raise objections if we process your personal data for direct marketing purposes. In some cases, we can demonstrate that we can show the legitimate reasons for the processing of your information, which override your rights and freedoms, for mandatory reasons.
  • Request for processing Your personal information. This enables you to suspend the processing of your personal data in the following scenarios: (a) If you want us to determine the correctness of the data; (b) If our use of the data is illegal, but you do not want us to delete it; (c) You need us to save the data even if we no longer need it if you need it to assert, exercise or defend legal claims; or (d) You have obtained objections to our use of your data, but we have to check whether we have legitimate reasons for using this data.
  • Request transfer From your personal information to another party. We will provide you or a third party you have chosen your personal data in a structured, generally used, machine -readable format. Note that this right only applies to automated information that you originally made available to us, or if we have used the information to keep a contract with you.

If you want to exercise one of the above rights, please contact contact us in written form.

No fee usually required

You do not have to pay a fee for access to your personal information (or to exercise one of the other rights). However, we can raise a reasonable fee if your application for access is clearly unfounded or exaggerated. Alternatively, we can reject the requirement under such circumstances.

What we need from you

We may have to request special information from you to help us confirm your identity and to ensure your right to access the information (or to exercise your other rights). This is another suitable security measure to ensure that personal information is not passed on to people who have no right to receive it.

Time limit for answers

We try to respond to all legitimate inquiries within one month. Occasionally, it can take longer than a month if your request is particularly complex or you have made a number of inquiries. In this case we notify you and keep you up to date.

Right to revoke the consent

In the limited cases in which you have made your consent to the collection, processing and passing on of your personal data available for a specific purpose, you have the right to revoke your consent for this specific processing at any time. To revoke your consent, please contact the Practice Manager. As soon as we have received a notification that you have revoked your consent, we will no longer process your data for the purpose or the purposes for which you originally agreed, unless we have another legitimate basis for doing this in the law.