Effective Date: October 9, 2019
a. “Data Subject”, “You”, or “Your” means any person whose Personal Data is collected or processed by Choq.
c. “Personal Data” or “Data” is defined as any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; (Art. 4, GDPR).
d. “Services” means the services provided by Choq through the Choq website and its associated products.
e. “User” means any user of the Services.
f. “User Account” means an account provided by Choq to a User, which provides additional access to the Services.
2. Data Privacy in General.
a. We respect data privacy and all data privacy rights. We aim to process and store any Personal Data received from Users or any third party in accordance with applicable data protection laws.
b. We will not share Personal Data with any third parties except where necessary for the performance of legal contracts, and to provide the services Users have requested and consented to. We aim not to collect, process, or store Personal Data for any purpose other than to provide our Services and comply with our obligations to Users.
c. We realize that data transmission over the Internet (for example, when communicating via e-mail) may have security gaps. Therefore, whenever possible we use encrypted communication connections and up-to-date security software.
3. What Data does Choq Receive?
Choq receives many types of data from our Users other parties including:
a. Communication Data: Data sent to us when someone contacts us including via website contact forms, in-app communications and via email, text, social media messaging, or social media posts.
b. Customer Data: Data related to purchases and contracts created with Choq including name, title, billing and/or shipping address, email address, phone number, other contact information, purchase details, and financial information.
c. User and Technical Data: Website user data including cookies and website analytics, IP address, User Account data, and device information.
d. Marketing Data: Contact information and user preferences related to marketing and communications from Choq.
e. Third Party Data: Choq may receive data from third party vendors or service providers such as Google, Facebook, etc., related to marketing or advertising.
4. What does Choq do with this Data?
Choq uses Personal Data to:
a. Respond to and initiate business-related and marketing communications;
b. Execute contractual relationships;
c. Provide the Services; and
d. Improve User experiences on our website and other platforms.
5. Where and How does Choq store this Data?
a. All Data is securely stored on servers that are assigned to our company and are located in [INSERT LOCATION]. Data will only be transferred to third parties to facilitate provision of the Services.
b. Data will be deleted when Choq no longer needs to keep it or if You have instructed us to delete it.
6. What is Choq’s legal basis to collect and process Data?
Choq collects and processes the above described Data in order to comply with its contractual obligations, for communicating with Users and to administer our website and business. Our lawful ground for processing this Data is our legitimate interest in providing our services, maintaining business records, communicating with Users, performing our contractual obligations and growing our business through marketing.
Choq also obtains Your consent to collect and process Data. You provide this consent our website.
Cookies are pieces of information about when and how You use websites. Choq collects some cookies about Your use of our website in order to improve Your experience and our Services.
You can set Your external browser to notify You when a cookie is sent. You can decide whether to accept or refuse the tracking of cookies. But, if You choose to turn off cookies, it may affect Your ability to access or use the Services.
8. Third Party Services.
a. Choq may need to share or transmit Data to third party service providers to execute the Services. Choq will advise Users when Data is shared with third party service providers or vendors.
9. Data Security.
a. Choq makes security a priority and utilizes security measures to protect against unauthorized access to or the unauthorized modification, publication or destruction of Data. These security measures include internal audits of data collection, storage and processing practices and security as well as physical security measures to protect against unauthorized access to the systems where we store Data.
b. Choq restricts Data access to Choq employees, contract workers, and agents who need such information in order to provide, develop or improve the Services. These individuals are subject to confidentiality obligations and may be subject to disciplinary action, including dismissal and prosecution, if they fail to meet these obligations.
10. Data Rights.
a. Right to Access and Correction: You may request that we confirm to You whether we are processing Your Personal Data and what Data we are processing. If Your information is incorrect or incomplete, You may request that Your information be corrected or completed. If we have shared Your information with third parties, We will inform them of the correction, to the extent required by law.
b. Right to Erasure: If the legal requirements exist, You can request immediate deletion of Your Personal Data from us. This is especially the case when:
i. Your Personal Data is no longer needed for the purposes for which it was collected;
ii. The legal basis for the processing was Your consent only and You have revoked it;
iii. You have objected to processing for promotional purposes;
iv. You have objected to processing based on the legal basis balance of interests for personal reasons and we cannot prove that there are legitimate reasons for processing;
v. Your Personal Data has been processed unlawfully; or
vi. Your Personal Data must be deleted in order to comply with legal requirements.
If we have forwarded Your data to third parties, we will inform them about the deletion, insofar as required by law. Please note that Your erasure right is subject to restrictions. For example, we may not or must not delete data that we still need to retain due to legal retention requirements. Also, data that we need in order to assert, exercise or defend our legal rights is excluded from Your cancellation right.
c. Right to Object to Processing
If the legal requirements are met, You can request a limitation of Data processing from us. Relevant circumstances include when:
i. You dispute the accuracy of Your Personal Data that we have (We must have the opportunity to verify this);
ii. The processing is not lawful and You require a restriction of use instead of erasure (see the previous section);
iii. We no longer need Your information for the purposes of processing, but You need it to assert, exercise or defend Your rights;
iv. You have raised an objection for personal reasons, we can halt processing until Your objection has been evaluated.
If You can show a valid right to restrict processing, we mark the Data in question to ensure that it is processed only within the limits that apply to such restriction (for example, to defend legal claims or within the parameters of Your consent).
d. Right to Data Portability
You have the right to receive personally identifiable information You have given to us for fulfillment of the contract or on the basis of consent in a transferable format. In this case, You can also request that we transmit this data directly to a third party, insofar as this is technically feasible.
e. Right to Revoke Your Consent
If You have given us consent to the processing of Your data, You can withdraw it at any time for future processing. The lawfulness of the processing of Your data prior to revocation remains unaffected.
f. Right to Object to Direct Marketing
You can also object at any time to the processing of Your Personal Data for advertising purposes. Please note that there may be an overlap between Your revocation and the use of Your data as part of an ongoing campaign.
g. Right to Object for Personal Reasons
You have the right, for reasons that arise from Your particular situation, to object to our processing of Your Data to the extent that the processing is based on a legitimate interest basis. We will then stop processing Your data, unless we can – in accordance with legal requirements – prove compelling legitimate reasons for further processing that outweigh Your rights.
h. European Union Right of Appeal to a Supervisory Authority
European Union residents have the right to file a complaint with a data protection authority. In particular, EU residents can contact the data protection authority, which is responsible for their place of residence or state, or who is responsible for the place where the violation of data protection law has taken place.
Asserting Your Rights
If You wish to assert any of the above described rights, please address Your request by stating Your current address, birth date, and Your e-mail address to:
5900 Balcones Drive
Austin, Texas 78731
We will use Your information provided in this request exclusively for comparison with the information in our database and thus for the protection of Your Personal Data against access by unauthorized third parties.
Questions and Suggestions
If you have any questions or suggestions about data protection, we look forward to receiving Your mail.
Please send written inquiries to:
5900 Balcones Drive
Austin, Texas 78731