CLIPr may disclose your personal data for the purposes described herein to the following categories recipients to effectuate the purposes described herein: lawyers, auditors, and other professional advisors and third party providers of services such as cloud storage, email marketing vendors, online marketing and advertising technology vendors, information security vendors, customer relationship management systems, and analytics providers and databases.
Please see below for our general retention periods. Please note that the below retention periods may be extended or shortened, as appropriate, based on the context of our relationship with a European Individual, and for compliance with legal obligations (e.g., accounting, finances, tax). We will retain the personal data of prospective customers in our systems for three (3) years. This retention period may be extended for prospective customers that are in current negotiations with CLIPr near the end of such retention period. We will retain current customers’ personal data until the relationship terminates, at which point such personal data will be further retained within our systems for seven (7) years for finance and tax purposes and in case of repeat business. We will retain Tracking Data in our systems for no longer than fourteen (14) months from the date of collection. Personal data relating to contractual and other legal documentation, such as with our customers or vendors, will be retained permanently.
As a natural person, you have a right to: (i) request access to, correction, and/or erasure of your personal data; (ii) object to processing of your personal data; (iii) restrict processing of your personal data; (iv) request a copy of your personal data, or have a copy thereof sent to another controller, in a structured, commonly used and machine readable format under the right of data portability, and (v) withdraw your consent where consent is used as the legal basis for processing your personal data. You may exercise these rights and submit a complaint under Applicable Data Protection Law by contacting: firstname.lastname@example.org with the subject line “EU and UK Notice
You also have the right to lodge a complaint about the processing of your personal data with a supervisory authority of the EEA state (or the UK) where you work or live or where any alleged infringement of data protection laws occurred. A list of the supervisory authorities in the EEA can be found here:
The supervisory authority in the UK is the Information Commissioner’s Office (https://ico.org.uk/
Objecting to Legitimate Interest/Direct Marketing
: You may object to personal data processed pursuant to our legitimate interest. In such case, we will no longer process your personal data unless we can demonstrate appropriate, overriding legitimate grounds for the processing or if needed for the establishment, exercise, or defense of legal claims. You may also object at any time to processing of your personal data for direct marketing purposes by clicking “Unsubscribe” within an automated marketing email or by submitting your request to email@example.com
with the subject line “EU and UK Notice
” (the latter for instances where, for example, you would not like to receive follow-ups from our sales team). In such case, your personal data will no longer be used for that purpose.
Transfer of Personal Data outside the EEA
We may transfer your personal data outside the EEA or the UK when necessary to provide the Services. We will only transfer your personal data outside the EEA or the UK pursuant to applicable data protection laws, and will not make such a transfer unless: (i) we have signed EU Commission Standard Contractual Clauses with the recipient, (ii) the recipient is located in a country that has received an adequacy decision from the European Commission, or (iii) where a derogation under GDPR Article 49 or similar provision applies.
Disclosure to Public Authorities
CLIPr may be required to disclose personal data in response to lawful requests by public authorities, including for the purpose of meeting national security or law enforcement requirements. We may also disclose personal data to other third parties when compelled to do so by government authorities or required by law or regulation including, but not limited to, in response to court orders and subpoenas.
In the event of a merger, reorganization, dissolution, or similar corporate event, or the sale of all or substantially all of our assets, we expect that the information that we have collected, including personal data, would be transferred to the surviving entity in a merger or the acquiring entity. All such transfers shall be subject to our commitments with respect to the privacy and confidentiality of such personal data as set forth in this EU and UK Notice.
Updates to this EU and UK Notice
If, in the future, we intend to process your personal data for a purpose other than that which it was collected, we will provide you with information on that purpose and any other relevant information at a reasonable time prior to such processing. After such time, the relevant information relating to such processing activity will be revised or added appropriately within this EU and UK Notice, and the “Effective Date” at the top of this page will be updated accordingly.
How to Contact Us
Please reach out to firstname.lastname@example.org
for any questions, complaints, or requests regarding this EU and UK Notice; please include the subject line “EU and UK Notice