iQuest is committed to respecting your privacy and the confidentiality of your personal data, traffic data, and communications content.

This Privacy Policy is designed to assist you in understanding how iQuest uses and safeguards the information you provide in using iQuest’s internet communications, iQuest’s websites and/or iQuest’s products, including without limitation, the ‘iQuest’ branded products and services. This version of the Privacy Policy is effective as of May 25, 2018.

1. Definitions

The iQuest Privacy Policy is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our Privacy Policy should be legible and understandable for the general public, as well as our customers and business partners. To ensure this, we would like to first explain the terminology used.

In this Privacy Policy, we use, inter alia, the following terms:

Personal data means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Data subject is any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing.

Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future.

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

Controller or controller responsible for the processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.

Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

2. Our details

The data Controller in respect to our website information for the purposes of the General Data Protection Regulation (GDPR) is: iQuest Technologies SRL, 14 Somesului Street, 400145, Cluj-Napoca, Cluj, Romania, Phone: 0372 343400, Email: contact@iquestgroup.com, Website: www.iquestgroup.com

How to reach our Data Protection Officer: Email: dpo@iquestgroup.com, Phone: 0372 343400.

Any data subject may, at any time, contact our Data Protection Officer directly with all questions and suggestions concerning data protection, the content of this Privacy Policy or as an aid to the enforcement of their rights under the GDPR.

3. INFORMATION WE COLLECT WHEN YOU VISIT OUR WEBSITE

We collect and use information from website visitors in accordance with this section and the section entitled Disclosure and additional uses of your information.

Web server log information

We use privately rented server to host our website. The server is only accessible by authorized iQuest and hosting provider personnel in case of maintenance or IT security purposes (see below). Our website server automatically logs the IP address you use to access our website as well as other information about your visit such as the pages accessed, information requested, the date and time of the request, the source of your access to our website (e.g. the website or URL (link) which referred you to our website), your browser version and operating system and and time spent on each page visit.

Our server is located in Germany and is compliant to local legislation as well as Romanian legislation.

Use of website server log information for IT security purposes

We or our third-party hosting provider collect(s) and store(s) server logs to ensure network and IT security and so that the server and website remain uncompromised. This includes analysing log files to help identify and prevent unauthorized access to our network, the distribution of malicious code, denial of services attacks and other cyber-attacks, by detecting unusual or suspicious activity.

Unless we are investigating suspicious or potential criminal activity, we do not make, nor do we allow our hosting provider to make, any attempt to identify you from the information collected via server logs.

Use of website server log information to analyse website use and improve our website

We use the information collected by our website server logs to analyse how our website users interact with our website and its features. For example, we analyse the number of visits and unique visitors we receive, the time and date of the visit, the location of the visit and the operating system and browser used.

We use the information gathered from the analysis of this information to improve our website. For example, we use the information gathered to change the information, content and structure of our website and individual pages based according to what users are engaging most with and the duration of time spent on particular pages on our website.

Cookies

Cookies are data files which are sent from a website to a browser to record information about users for various purposes.

We use cookies on our website, including necessary, analytical, social sharing and marketing cookies. For further information on how we use cookies, please see our cookies policy which is available here: http://www.iquestgroup.com/en/privacy-policy/

You can reject some or all of the cookies we use on or via our website by changing your browser settings or non-necessary cookies by using our cookie control tool [to insert here a link to our Cookies Settings Page, but doing so can impair your ability to use our website or some or all of its features. For further information about cookies, including how to change your browser settings, please visit www.allaboutcookies.org or see our cookies policy.

4. INFORMATION WE COLLECT WHEN YOU CONTACT US

We collect and use information from individuals who contact us in accordance with this section and the section entitled Disclosure and additional uses of your information.

Email

When you send an email to the email address displayed on our website we collect your email address and any other information you provide in that email (such as your name, telephone number and the information contained in any signature block in your email).

Transfer and storage of your information

Emails you send us will be stored within the European Economic Area on our servers in Romania.

Contact form

When you contact us using our contact form, we collect your name, email address, city, company name, IP address, Data Usage. We also collect any other information you provide to us when you complete the contact form, including any optional information, such as: Phone number, physical address, role, department, area of interest, etc.

If you do not provide the mandatory information required by our contact form, you will not be able to submit the contact form and we will not receive your enquiry.

If you do not supply the optional information required by our contact form, we will not be able to personalize our answer to your company

Transfer and storage of your information

Messages you send us via our contact form will be stored within the European Economic Area on our email servers in Romania.

Phone

When you contact us by phone, we collect your phone number and any information provide to us during your conversation with us.

We do not record phone calls.

Transfer and storage of your information

Information about your call, such as your phone number and the date and time of your call, is processed by our third-party telephone service provider Telekom, Vodafone and Interoute. Their privacy policy is available here:

Information about your phone call will be stored by our third-party telephone service provider within the European Economic Area

Post

If you contact us by post, we will collect any information you provide to us in any postal communications you send us.

5. INFORMATION WE COLLECT WHEN YOU INTERACT WITH OUR WEBSITE

We collect and use information from individuals who interact with particular features of our website in accordance with this section and the section entitled Disclosure and additional uses of your information.

Transfer and storage of your information

We use mailChimp for direct emailing campaigns. Their privacy policy is available here: https://mailchimp.com/legal/privacy/.

Mailchimp operates under EU-US and CH-US privacy shields.

Information collected or obtained from third parties

This section sets out how we obtain or collect information about you from third parties.

Information received from third parties

It is also possible that third parties with whom we have had no prior contact may provide us with information about you.

Information we obtain from third parties will generally be your name and contact details but will include any additional information about you which they provide to us.

We only obtain information about you from social media and in case of business contacts, from professional association you are registered with, or event organizers you are attending or business partners with whom you have contractual agreements.

Where we receive information about you in error

If we receive information about you from a third party in error and/or we do not have a legal basis for processing that information, we will delete your information.

Information obtained by us from third parties

In certain circumstances (for example, to verify the information we hold about you or obtain missing information we require to provide you with a service) we will obtain information about you from certain publicly accessible sources, both EU and non-EU, such as online customer databases, business directories, media publications, social media, and websites (including your own website if you have one).

Our use of automated decision-making and profiling

We use automated decision making and profiling on our website. We do not consider that this has any legal effect on you or similarly significantly affects you.

You have the right to object to our use of automated decision making and profiling described in this section. You can do that by opting-out of cookies and similar technologies in accordance with the method described in the relevant section below. If you do not want us to process your actual IP address (usually the IP address assigned to you by your Internet Service Provider) when you visit our website, you can use a Virtual Private Network (VPN) or a free service such as Tor.

You can find out more about our use of cookies and similar technologies (including the legal basis on which we use them) and how to opt out from them in our cookies policy, which is available here: https://www.iquestgroup.com/en/cookies-policy/

Automated decision making

Automated decision making is decision making by technological means (i.e. by a machine) without human involvement. We use of automated decision making for display advertising. We automate the display advertisements containing our products and services on other websites you visit, you based on the fact that you have visited our website using cookies. For further information on the cookies we use, please see our cookies policy which is available here: https://www.iquestgroup.com/en/cookies-policy/

Logic involved: automatically displaying advertisements to individuals who have visited our website results in increased efficiencies and costs savings for us than manually displaying advertisements or displaying advertisements by different means.

Significance and envisaged consequences: cookies will be used to recognise the fact that you have visited our website in order to display advertisements to you (unless you have blocked such cookies on www.iquestgroup.com using the cookies settings in the lower right corner)and will collect information about your online behaviour.

How to object: you can block these cookies by using the cookies control management tool: https://www.civicuk.com/cookie-control/v8/download. or using the cookies settings in the lower right corner on www.iquestgroup.com. For further information, please see our cookies policy: https://www.iquestgroup.com/en/cookies-policy/

Profiling

Profiling is any form of automated processing of your information to evaluate personal aspects about you, in particular to analyse or predict things like your performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

Use of profiling for web analytics and ads

Our web analytics and ads services are:

Google Analytics (Google Inc.)

Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
Personal Data collected: Cookies and Usage Data.
Place of processing: US – Privacy Policy – Opt Out.

Facebook Ads conversion tracking (Facebook, Inc.)

Facebook Ads conversion tracking is an analytics service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions performed on this Website.
Personal Data collected: Cookies and Usage Data.
Place of processing: US – Privacy Policy.

Google AdWords conversion tracking (Google Inc.)

Google AdWords conversion tracking is an analytics service provided by Google Inc. that connects data from the Google AdWords advertising network with actions performed on this Website.
Personal Data collected: Cookies and Usage Data.
Place of processing: US – Privacy Policy.

Google Tag Manager (Google Inc.)

Google Tag Manager is an analytics service provided by Google Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: US – Privacy Policy.

LinkedIn conversion tracking (LinkedIn Corporation)

LinkedIn conversion tracking is an analytics service provided by LinkedIn Corporation that connects data from the LinkedIn advertising network with actions performed on this Website.
Personal Data collected: Cookies and Usage Data.
Place of processing: US – Privacy Policy.

Display Advertising extension for Google Analytics (Google Inc.)

Google Analytics on this Website might use Google’s Interest-based advertising, 3rd-party audience data and information from the DoubleClick Cookie to extend analytics with demographics, interests and ads interaction data.
Personal Data collected: Cookies and Usage Data.
Place of processing: US – Privacy Policy – Opt Out.

These services collect information such as your location (based on your IP address) and your behavior (based on cookies) when you access our website (such as the pages you visit and what you click on). We will only process information from cookies if you have consented to us, setting cookies on your computer in accordance with our cookies policy and by using the cookies control tool on www.iquestgroup.com using the cookies settings in the lower right corner. Information collected about you, once collected is anonymised and stored on an aggregate basis.

Logic involved: by automatically analysing and categorising information such as the location (based on IP address) as well as the behaviour and devices of visitors to our website (using cookies), we are able to gain a better understanding of what our website visitors want (in terms of the content of our website and our products), how to improve our website and how to advertise and market our services to them.

Significance and envisaged consequences: cookies will be used to track and store information about your behaviour and device on our website (unless you have opted out from receiving such cookies by using the cookies control tool on www.iquestgroup.com using the cookies settings in the lower right corner) and your location will be analysed based on your IP address. We may target advertisements based on the level of interest we receive from certain visitors and their behavior on our website.

Use of profiling in marketing emails

We use web beacons in our marketing emails to analyse who opens our emails and what actions they take (for example, we may collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message). We will process information from web beacons. If you do not consent to this processing, please unsubscribe from iQuest newsletter following the unsubscribe link provided in the newsletter emails.

Logic involved: by analysing how our email recipients respond to our emails, we are able to improve the content and effectiveness of our emails and gauge who is most interested.

Significance and envisaged consequences: your behaviour when you open our emails will be tracked using personalized trackable content (included but not limited to images, links)

How to object: by using the unsubscribe link provided in the newsletter emails or contacting dpo@iquestgroup.com.

6. DISCLOSURE AND ADDITIONAL USES OF YOUR INFORMATION

This section sets out the circumstances in which will disclose information about you to third parties and any additional purposes for which we use your information.

Disclosure of your information to service providers

We use several third parties to provide us with services which are necessary to run our business or to assist us with running our business and who process your information for us on our behalf. These include the following:

Their privacy policy is available here: https://www.hetzner.com/rechtliches/datenschutz , https://aws.amazon.com/privacy/ , https://privacy.microsoft.com/en-us/privacystatement .

  • Other third-party provider(s), including:

Facebook Audience Network (Facebook, Inc.)

Facebook Audience Network is an advertising service provided by Facebook, Inc. In order to understand Facebook’s use of Data, consult Facebook’s data policy.

Place of processing: USA – Privacy Policy – Opt Out.

MailChimp (The Rocket Science Group, LLC.)

MailChimp is an email address management and message sending service provided by The Rocket Science Group, LLC.

Place of processing: US – Privacy Policy.

WordPress.com (Automattic Inc.)

WordPress.com is a platform provided by Automattic Inc. that allows the Owner to build, run and host this Website.

Place of processing: USA – Privacy Policy.

Akismet (Automattic Inc.)

Akismet is a SPAM protection service provided by Automattic Inc.

Place of processing: US – Privacy Policy.

Google reCAPTCHA (Google Inc.)

Google reCAPTCHA is a SPAM protection service provided by Google Inc.
The use of reCAPTCHA is subject to the Google privacy policy and terms of use.

Place of processing: US – Privacy Policy.

Google Analytics (Google Inc.)

Google Analytics is a web analysis service provided by Google Inc. (“Google”).

Place of processing: US – Privacy Policy – Opt Out.

Facebook Ads conversion tracking (Facebook, Inc.)

Facebook Ads conversion tracking is an analytics service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions performed on this Website.

Place of processing: US – Privacy Policy.

Google AdWords conversion tracking (Google Inc.)

Google AdWords conversion tracking is an analytics service provided by Google Inc. that connects data from the Google AdWords advertising network with actions performed on this Website.

Place of processing: US – Privacy Policy.

Google Tag Manager (Google Inc.)

Google Tag Manager is an analytics service provided by Google Inc.

Place of processing: US – Privacy Policy.

LinkedIn conversion tracking (LinkedIn Corporation)

LinkedIn conversion tracking is an analytics service provided by LinkedIn Corporation that connects data from the LinkedIn advertising network with actions performed on this Website.

Place of processing: US – Privacy Policy.

Display Advertising extension for Google Analytics (Google Inc.)

Google Analytics on this Website might use Google’s Interest-based advertising, 3rd-party audience data and information from the DoubleClick Cookie to extend analytics with demographics, interests and ads interaction data.

Place of processing: US – Privacy Policy – Opt Out.

Google Maps widget (Google Inc.)

Google Maps is a maps visualization service provided by Google Inc. that allows this Website to

Place of processing: US – Privacy Policy.

YouTube video widget (Google Inc.)

YouTube is a video content visualization service provided by Google Inc. that allows this Website to incorporate content of this kind on its pages.

Place of processing: US – Privacy Policy.

AdWords Remarketing (Google Inc.)

AdWords Remarketing is a remarketing and behavioral targeting service provided by Google Inc. that connects the activity of this Website with the Adwords advertising network and the Doubleclick Cookie.

Place of processing: US – Privacy Policy – Opt Out.

Remarketing through Google Analytics for Display Advertising (Google Inc.)

Google Analytics for Display Advertising is a remarketing and behavioral targeting service provided by Google Inc. that connects the tracking activity performed by Google Analytics and its Cookies with the Adwords advertising network and the Doubleclick Cookie.

Place of processing: US – Privacy Policy – Opt Out.

Facebook Custom Audience (Facebook, Inc.)

Facebook Custom Audience is a Remarketing and Behavioral Targeting service provided by Facebook, Inc. that connects the activity of this Website with the Facebook advertising network.

Place of processing: US – Privacy Policy – Opt Out.

Facebook Remarketing (Facebook, Inc.)

Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook, Inc. that connects the activity of this Website with the Facebook advertising network.

Place of processing: US – Privacy Policy – Opt Out.

LinkedIN Marketing Solutions

LinkedIN Marketing Solutions is a Remarketing and Behavioral Targeting service provided by  LinkedIn Corporation, that connects the activity of this Website with the LinkedIn advertising network.

Place of processing: US – Privacy Policy – Opt Out.

Your information will be shared with these service providers where necessary to provide you with the service you have requested, whether that is accessing our website or delivering advertisements to you about our offering.

Disclosure of your information to other third parties

We may disclose your information to other third parties in specific circumstances.

Sharing your information with third parties, which are either related to or associated with the running of our business, where it is necessary for us to do so. These third parties include our accountants, advisors, affiliates, business partners, independent contractors.

Disclosure and use of your information for legal reasons

Indicating possible criminal acts or threats to public security to a competent authority

If we suspect that criminal or potential criminal conduct has been occurred, we will in certain circumstances need to contact an appropriate authority, such as the police. This could be the case, for instance, if we suspect that we fraud or a cyber crime has been committed or if we receive threats or malicious communications towards us or third parties.

We will generally only need to process your information for this purpose if you were involved or affected by such an incident in some way.

In connection with a legal or potential legal dispute or proceedings

We may need to use your information if we are involved in a dispute with you or a third party for example, either to resolve the dispute or as part of any mediation, arbitration or court resolution or similar process.

For ongoing compliance with laws, regulations and other legal requirements

We will use and process your information in order to comply with legal obligations to which we are subject. For example, we may need to disclose your information pursuant to a court order or subpoena if we receive one.

7. HOW DOES iQUEST PROTECT YOUR PERSONAL INFORMATION?

iQuest will take appropriate organisational and technical measures to protect the personal data and traffic data provided to it or collected by it with due observance of the applicable obligations and exceptions under the relevant legislation. Your personal and traffic data can only be accessed by authorized employees of iQuest or its affiliates, subsidiaries or service providers who need to have access to this data in order to be able to fulfill their given duties.

These measures are:

  • only sharing and providing access to your information to the minimum extent necessary, subject to confidentiality restrictions where appropriate, and on an anonymized basis wherever possible;
  • using secure servers to store your information;
  • verifying the identity of any individual who requests access to information prior to granting them access to information;
  • using Secure Sockets Layer (SSL) software to encrypt [any information you submit to us via any forms on our website;
  • only transferring your information via closed system or encrypted data transfers;

Transmission of information to us by email

Transmission of information over the internet is not entirely secure, and if you submit any information to us over the internet (whether by email, via our website or any other means), you do so entirely at your own risk.

We cannot be responsible for any costs, expenses, loss of profits, harm to reputation, damages, liabilities or any other form of loss or damage suffered by you as a result of your decision to transmit information to us by such means.

8. CONTACTING YOU

iQuest may from time to time ask you to provide information on your experiences which will be used to measure and improve quality. You are at no time under any obligation to provide any such data. Any and all information which is voluntarily submitted in feedback forms on the website or any survey that you take part in is used for the purposes of reviewing this feedback and improving the iQuest software, and iQuest products and websites.

iQuest may contact you to send you messages about faults and service issues. Further, iQuest reserves the right to use email, the iQuest software or SMS to notify you of any eventual claims related to your use of iQuest software, the iQuest websites and/or iQuest products, including without limitation claims of violation of third party rights.

9. WHAT ARE YOUR RIGHTS IN RELATION TO YOUR INFORMATION?

Subject to certain limitations on certain rights, you have the following rights in relation to your information, which you can exercise by writing to iQuest Technologies SRL, 14 Somesului Street, 400145, Cluj-Napoca, Cluj, Romania, Phone: 0372 343400 or sending an email to dpo@iquestgroup.com:

  1. to request access to your information and information related to our use and processing of your information;
  2. to request the correction or deletion of your information;
  3. to request that we restrict our use of your information;
  4. to receive information which you have provided to us in a structured, commonly used and machine-readable format and the right to have that information transferred to another data controller (including a third party data controller);
  5. to object to the processing of your information for certain purposes (for further information, see the section below entitled Your right to object to the processing of your information for certain purposes); and
  6. to withdraw your consent to our use of your information at any time where we rely on your consent to use or process that information. Please note that if you withdraw your consent, this will not affect the lawfulness of our use and processing of your information on the basis of your consent before the point in time when you withdraw your consent.

In accordance with Article 77 of the General Data Protection Regulation, you also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or of an alleged infringement of the General Data Protection Regulation.

For the purposes of Romania, the supervisory authority is the The National Supervisory Authority for Personal Data Processing, the contact details of which are available here: http://www.dataprotection.ro/index.jsp?page=contact&lang=en

Further information on your rights in relation to your personal data as an individual

You can find out further information about your rights, as well as information on any limitations which apply to those rights, by reading the underlying legislation contained in Articles 12 to 22 and 34 of the General Data Protection Regulation, which is available here:http://ec.europa.eu/justice/data-protection/reform/files/regulation_oj_en.pdf

Verifying your identity where you request access to your information

Where you request access to your information, we are required by law to use all reasonable measures to verify your identity before doing so.

These measures are designed to protect your information and to reduce the risk of identity fraud, identity theft or general unauthorized access to your information.

How we verify your identity

Where we possess appropriate information about you on file, we will attempt to verify your identity using that information.

If it is not possible to identity you from such information, or if we have insufficient information about you, we may require original or certified copies of certain documentation in order to be able to verify your identity before we are able to provide you with access to your information.

We will be able to confirm the precise information we require to verify your identity in your specific circumstances if and when you make such a request.

10. HOW CAN YOU ACCESS, AMEND OR OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SOME PURPOSES?

Your right to object to the processing of your information for certain purposes

You have the following rights in relation to your information, which you may exercise by writing to iQuest Technologies SRL, 14 Somesului Street, 400145, Cluj-Napoca, Cluj, Romania, Phone: 0372 343400 or sending an email to dpo@iquestgroup.com:

  • to object to us using or processing your information where we use or process it in order to carry out a task in the public interest or for our legitimate interests, including ‘profiling’ (i.e. analysing or predicting your behaviour based on your information) based on any of these purposes; and
  • to object to us using or processing your information for direct marketing purposes (including any profiling we engage in that is related to such direct marketing).

You may also exercise your right to object to us using or processing your information for direct marketing purposes by:

  • clicking the unsubscribe link contained at the bottom of any marketing email we send to you and following the instructions which appear in your browser following your clicking on that link;
  • sending an email to dpo@iquestgroup.com, asking that we stop sending you marketing communications or by including the words “OPT OUT”.

For more information on how to object to our use of information collected from cookies and similar technologies, please see the section entitled How to accept or reject cookies in our Cookies policy, which is available here: https://www.iquestgroup.com/en/cookies-policy/

You have the right to access and, where relevant, amend your personal information. We will respond to requests to view, correct, complete or remove your personal information within a reasonable period of time and upon verification of your identity.

iQuest will use all reasonable endeavors to accommodate requests to delete personal information unless it is required to be retained by law or for lawful business purposes.

11. HOW LONG IS YOUR PERSONAL DATA KEPT BY iQUEST?

iQuest will retain your information for as long as is necessary to: (1) fulfil any of the Purposes (eg. Contractual or legal basis), (2) comply with applicable legislation, regulatory requests and relevant orders from competent courts in accordance with the iQuest Data Retention Policy (3) when information is provided based on consent, the data is kept for 3 years, if the consent is not previously withdrawn by the user.

iQuest will take appropriate technical and security measures to protect your information. By using this product, you consent to the storage of your personal information as described above.

At the end of the retention period, iQuest will delete your Personal Information in a manner designed to ensure that it cannot be reconstructed or read.

12. LEGAL BASIS OF PROCESSING

iQuest may process your Personal Data if one of the following applies:

  • You have given your consent for one or more specific purposes. Note: Under some legislations iQuest may be allowed to process Personal Data until the you object to such processing (“opt-out”), without having to rely on consent or any other of the following legal bases. This, however, does not apply, whenever the processing of Personal Data is subject to European data protection law;
  • provision of Data is necessary for the performance of an agreement with you and/or for any pre-contractual obligations thereof;
  • processing is necessary for compliance with a legal obligation to which the iQuest is subject;
  • processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in iQuest;
  • processing is necessary for the purposes of the legitimate interests pursued by iQuest or by a third party.

 

In any case, iQuest will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract. In this respect please contact dpo@iquestgroup.com.

13. MISCELLANEOUS

Sensitive Personal Information

‘Sensitive personal information’ is information about an individual that reveals their racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic information, biometric information for the purpose of uniquely identifying an individual, information concerning health or information concerning a natural person’s sex life or sexual orientation.

We do not knowingly or intentionally collect sensitive personal information from individuals, and you must not submit sensitive personal information to us.

If, however, you inadvertently or intentionally transmit sensitive personal information to us, you will be considered to have explicitly consented to us processing that sensitive personal information under Article 9(2)(a) of the General Data Protection Regulation. We will use and process your sensitive personal information for the purposes of deleting it.

Children’s Privacy

The Services are not directed to individuals under 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information. If you become aware that a child has provided us with personal information, please contact our support services.

Our Privacy Policy, Changes

We update and amend our Privacy Policy from time to time.

Minor changes to our Privacy Policy

Where we make minor changes to our Privacy Policy, we will update our Privacy Policy with a new effective date stated at the beginning of it. Our processing of your information will be governed by the practices set out in that new version of the Privacy Policy from its effective date onwards.

Major changes to our Privacy Policy or the purposes for which we process your information

Where we make major changes to our Privacy Policy or intend to use your information for a new purpose or a different purpose than the purposes for which we originally collected it, we will notify you by email (where possible) or by posting a notice on our website.

We will provide you with the information about the change in question and the purpose and any other relevant information before we use your information for that new purpose.

Wherever required, we will obtain your prior consent before using your information for a purpose that is different from the purposes for which we originally collected it.

We encourage you to review our privacy policy whenever you use the Services to stay informed about our information practices and the ways you can help protect your privacy.