CHOOOSE Data Protection Policy
This Data Protection Policy (the “Policy”) sets out how CHOOOSE (“we” and/or as defined in the GTCs) handle personal data in the CHOOOSE services (as defined in the GTCs) and on associated websites, third party partner platforms and applications for desktops, tablets and mobile handsets (hereinafter referred to as the “Service”). By using the Service, you indicate your acceptance of this Policy. If you do not agree to this Policy, you are not permitted to access the Service and you should not do so. By personal data we mean information that can be used to uniquely identify a single person. If you have questions about this Policy please feel free to contact us by following the instructions on our website: http://chooose.today or by sending an e-mail to email@example.com
2. Children and privacy
We do not knowingly collect information from children under age 13. If you are under age 13, you are not permitted to use the Service. If you are 13 - 17 years of age, you may visit, browse and use the information on the Service but you may not register an account or submit any personal information. If you are 13 - 17 years old, by browsing, using or accessing the Service you confirm that you have the permission of a parent or guardian to do so. If you are a parent or guardian and believe that we may have inadvertently collected personal information from your child, please notify us immediately by following the instructions on our website: http://chooose.today or by sending an e-mail to firstname.lastname@example.org
3. Collection and use of personal data
When you register as a user for the Service at a CHOOOSE website or through a third party partner platform, you may provide us with certain information that we store. When you use the Service, we may store information generated by your use of the Service, such as virtual emissions statistics for your user, activity in the Service, time of log-in, location of sessions if allowed by the device, what version of the Service you use, technical data such as your IP address, location information, and other similar information. If the Service is accessed via a handheld device we also store a number that uniquely identifies the device. Information that you add to your profile like your age may also be stored. If you reply to surveys that we have provided or otherwise provide us with your personal data in response to our communications to you, the information you provide will be made anonymous unless otherwise specified. This information is used to provide the Service to you, to calculate settlement when acquiring actual emission quotas, to improve the Service, and if provided by you in response to our communications, to provide you with special offers and promotions from CHOOOSE or its partners. Your participation in any such special offer is completely voluntary.
4. Lawful bases of processing
We primarily process your personal data so that we can fulfil our contractual obligations to you as well as to pursue our legitimate interest to run, maintain and develop our operations and to create and maintain customer and other business relationships. When choosing to use your data on the basis of our legitimate interests, we consider our own interests against your right to privacy and e.g. provide you with easy to use opt-out from our marketing communications. We also use anonymized and non-personally identifiable data when possible.
We may also process your personal data in order to comply with our legal obligations.
In some parts of the Services, you may be requested to grant your consent for the processing of personal data. In this event, you may withdraw your consent at any time. Please see section 12 for further information on how to exercise this and other rights.
5. Sharing information with third parties
We will not share your personal data with third parties except in the following situations:
a) when you have given us consent to share such personal data. This can, for instance, be in relation to Facebook, Twitter or similar social media (as further described in section 7 below) or other;
b) when necessary for billing purposes or other services/functions performed on our behalf, we share information with the billing provider or other vendor to facilitate billing or other services/functions, respectively. The payment information is stored by the billing provider and not by CHOOOSE;
c) when we engage third parties to perform services on behalf of us in relation to the CHOOOSE service, either companies that are affiliated with us or third parties. In such cases we will remain responsible for your personal data and ensure that all handling of the data will be in accordance with this policy and applicable laws; and
d) in response to legal processes, such as a request by law enforcement, a court order or similar, or to protect the integrity of the Service if we believe that a user has committed unlawful or otherwise harmful acts.
e) when using CHOOOSE services through a third party partner platform information may be shared with the CHOOOSE partner to the extent necessary for CHOOOSE and the third party platform partner to deliver the agreed services and for the third party platform partner´s own purposes.
We will never sell your personal data to third parties and except for as stated above we will never allow third parties to have access to your data for their own purposes unless you otherwise provide your consent. If all or part of CHOOOSE is sold, merged or is otherwise transferred to another entity, the information you have provided on or through the Service may be transferred to such entity as part of that transaction.
If you have provided us with your email address or your phone number, we will only use this information to communicate with you in matters relevant to the Service. Such information includes receipts for payment, information about changes in the Service, changes in the GTCs, and this Policy. We will not use this information to send you information about third-party services unless you otherwise provide your consent. Providing us with this information in response to our communications to you shall be considered consent from you to use this information to send you information about third-party services. If the legal statuary requirements are met or if you have opted in, we will send you our newsletter and similar information. You can at any time give us notice that you no longer want to receive such communication.
7. Server log files
Usage of the Service may be logged in the server log files. These log files include the IP address of the device that accessed the Service together with the time of the use and which resource that was requested, as well as user identification information. The log file of the Service is used to create anonymous usage statistics that are used to settle with the owners of the content, to analyze the usage of the Service, and for the purposes of system administration.
8. Cookies and similar technologies
9. Integration with third-party services
Google Analytics: We may use Google Analytics from Google (Google Inc, US) on our web pages to create anonymous usage statistics. If you have concerns relating to the usage of Google Analytics, be informed that it is possible to block Google Analytics by installing a plug-in to your browser. A plug-in for the most common browsers can be found here: http://tools.google.com/dlpage/gaoptout
10. Integration with third-party websites
11. Safeguarding of personal data
We store your data in a secure manner on restricted and protected equipment. Only a limited number of personnel have access to this equipment and only persons with a legitimate reason have access to your personal data. While we take reasonable precautions for the protection of personal data, no security measures are completely secure, and we do not guarantee the security of personal data.
12. Retention of personal data
We will retain your personal information only for the period necessary to fulfill the purposes outlined in this policy. When it is no longer necessary to store the data it will be deleted or made anonymous in a safe and permanent manner or the access to it will be blocked to the extent that statutory data retention requirements apply.
13. Your rights
You have the following rights:
•The right to be provided with copies of personal information that CHOOOSE AS hold about you at any time.
•The right to ask CHOOOSE AS to update and correct any incorrect personal information held about you free of charge.
•The right to request deletion or removal of your personal data where there is no good reason for us to continue processing the data. Note, however, that we might have to continue processing some of the information in order to comply with legal requirements.
•The right to object to the processing of your personal data where we rely on legitimate interest.
•The right to opt-out of any marketing communications that CHOOOSE may send you.
•The right to request the transfer of your personal data to you or to a third party. Please note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
•The right to withdraw consent where we are relying on consent to process your personal data. Please note that this will not affect the processing activities carried out prior to your withdrawal of consent.
If you wish to exercise any of the above rights, please send your request to email@example.com.
Our site allows you to connect with third-party sites, such as Facebook and Twitter to share content and pages. If you use any of these sites, please note that they will have their own privacy policies, which are entirely outside of our control. We do not accept any responsibility or liability for such policies. Please check these policies carefully before you submit any personal data to such sites.
14. Detection of misuse of the service
If there is suspicion of misuse of the Service, we might combine data collected in accordance with this Policy with other information in order to investigate the extent of the misuse and who is responsible.
We will at all times treat personal data as set out in this Policy and at all times comply with applicable data protection legislation and regulations.
16. Notices, consents, and contact
If you have questions regarding your data stored with us, its rectification or deletion, or would like to revoke any consent provided to us, object against certain uses, or similar, please feel free to contact us at firstname.lastname@example.org.
17. Amendments to policy
The Service is subject to constant improvement and future changes may influence what data we store and how we process it. This Policy might be updated to reflect such changes, changes in the legal framework, or improvements in how we handle personal data. Such changes or updates are effective immediately after we give notice of the change or update, which we may do by revising the “Date of Last Revision” date of this Policy or by otherwise posting on the Service, or by email or conventional mail, and/or by any other means which provides reasonable notice. Your use of the Service after such notice is posted means that you accept these changes or updates. You agree that CHOOOSE shall not be liable to you for any damages that might result from any changes to this Policy, if any. The current version of this Policy can be found on our website: http://chooose.today.
18. International users
CHOOOSE may process information about its users on computers and servers located in a number of countries, any of which may be located outside of your state, province, country, or other governmental jurisdiction and where the privacy laws may not be as protective as those in your jurisdiction.
When transferring your personal data to jurisdictions outside the EEA we always ensure that your personal data receives an adequate level of protection and that we can ensure that your rights can be adequately exercised. We ensure this through at least one of the following safeguards:
•The country where the data will be processed has been deemed to provide an adequate level of protection by the European Commission.
•We use specific contracts approved by the European commissions which give personal data the same protection it has within the EEA.
TO THE EXTENT ALLOWED BY THE LAW OF THE COUNTRY IN WHICH YOU ARE LOCATED, YOU EXPRESSLY WAIVE ANY RIGHT YOU MAY HAVE TO REQUIRE US TO TREAT YOUR IDENTIFYING INFORMATION IN ACCORDANCE WITH THE LAWS OF ANY COUNTRY OR JURISDICTION OTHER THAN THE UNITED STATES.HOWEVER, THE FOREGOING WAIVER MAY NOT BE LEGALLY BINDING IN SOME COUNTRIES, SUCH AS THE MEMBER STATES OF THE EUROPEAN UNION. TO THE EXTENT IT IS NOT LEGALLY BINDING IN THE COUNTRY IN WHICH YOU ARE LOCATED, THIS FOREGOING WAIVER DOES NOT APPLY TO YOU.