Privacy Notice

1. Introduction
We take Privacy seriously and fully endorse and adhere to the Principles of the EU GDPR. This Privacy Notice includes information about how we collect, use and disclose your personal data, and your rights in relation to the personal data we hold.

To help you further understand this policy, here are some terms used herein and in the data protection industry:

Personal Data
This is information that relates to and identifies living individuals, i.e. their personal information.

Data Subjects
These are the living individuals to whom the personal data relates.

Processing
This covers a wide range of operations on personal information, this includes its collection, use, disclosure and disposal.

Data Controllers
Data controllers are clients who supply us with their personal data (i.e. mailing lists) directly, or are the clients we gather personal data on behalf of. We only become the data controllers if we are using any personal data for our own purposes or it is the personal data of our staff. For example we are the Data Controllers of our own Mailing List.

Data Processors
These are individuals who are not employed by a data controller but who process personal data on behalf of and in accordance with the instructions of a data controller; in effect they could be referred to as subcontractors. We are the data processors for any personal data supplied by, or gathered on behalf of our clients.

2. Who is collecting the data?
We handle personal data exclusively to provide digital services for our clients and also for our own marketing purposes.

In certain circumstances, we may use third parties to collect and supply data. Any third party company used for this purpose will have been vetted by us to be fully GDPR compliant.

3. How do we collect your data?
We collect your personal data in a number of ways, for example:

during a meeting;
from information about you provided to us by you;
from information about you provided to us by an independent referral;
when you communicate with us by telephone, email or other forms of electronic communication;
from publicly available sources.

4. What data is being collected?
For our day-to-day operations, we collect names, email addresses, postal addresses and/or telephone numbers, as appropriate. All data collected is the minimum required to successfully carry out specific operational needs. This data is kept as accurate and up-to-date as possible.

5. Where is the data stored?
We store all personal data in a secure Client Database.

6. What is the legal basis for processing the data?
We will only process data if it is necessary for the legitimate interests to the data subject unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests. We use opt-in procedures for collecting your personal data, and opt-out services are clearly shown and available at all times.

The purposes for which personal data is collected include:

(a) responding to any enquiries you have made;

(b) Sending you materials and/or information you have requested or services which you have purchased;

(d) Conducting contests, competitions or promotions;

(e) Enabling you to submit contributions to us and/or to the Website;

(f) To customise and improve the content on the website or any other websites which are part of Asari.io and/or to improve our services to respond to your current and future needs and interests;

(g) Contacting you if we change our services or terms or if we need to give you notice of such changes;

(h) for the purpose of marketing our other services to you unless you;

(i) For accounting purposes and internal administration and analysis;

(j) For the prevention of fraud; and

(k) For any purpose required by law or regulation.

7. Will the data be shared with any third parties?
We do not share, sell, rent or distribute personal data to or with third parties unless the transfer of such information to third parties is strictly necessary for providing a service you have commissioned and will not disclose personal information to third parties for their own marketing purposes unless you have consented to this.

8. How will the data be used?
The personal data is used solely for providing a service to our customers.

9. How long will the data be stored for?
Your personal data remains in our client database and mailing lists until you request erasure or/and opt-out of our Mailing list.

10. What are your individual rights?
You, as the data subject, have full rights under Chapter 3, Articles 12 to 23 of the General Data Protection Regulation (GDPR) which specifically deal with rights of the data subject.

Therefore, you have several rights in relation to how Asari.io uses your information. They are:

Right to be informed
You have a right to receive clear and easy to understand information on what personal information we have, why and who we share it with.

Right of access
You have the right of access to your personal information. If you wish to receive a copy of the personal information we hold on you, you may make a Data Subject Access Request (DSAR) by emailing Julia@asari.io

Right to request that your personal information be rectified
If your personal information is inaccurate or incomplete, you can request that it is corrected.

Right to be forgotten (request erasure)
You can ask for your information to be deleted or removed if there is not a compelling reason for us to continue to have it, for example, if you are an existing client and we need this information to contact you.

Right to restrict processing
You can ask that we block or suppress the processing of your personal information for certain reasons. This means that we are still permitted to keep your information – but only to ensure we don’t use it in the future for those reasons you have restricted.

Right to data portability
You can ask for a copy of your personal information for your own purposes to use across different services.

11. Cookies and IP Addresses
11.1 In addition to asking you to submit personal information, we may collect information about you automatically when you visit the Website. This information is not normally personally identifiable. Such information includes general information about your computer settings, your connection to the internet (i.e. your Internet Service Provider), your IP address (this is the number assigned to your computer by a web server when you are on the internet), your geographical location, your operating system, your browsing patterns, the pages you visit and documents downloaded. We analyse such information in the aggregate and will not use it for the purpose of identifying you (except that we may use such information to identify a visitor if we consider that there are or may be safety or security issues or to comply with relevant laws and regulations).

11.2 We may collect this information through the use of software technology called “cookies”. Cookies are small bits of information which are sent to your computer’s hard drive when you first visit the Website, and which allow us to identify your computer the next time you visit the Website. We may use the information collected in this way to (i) identify what technologies and internet services are being used by our visitors and (ii) track usage of the Website so that we can adapt the Website to ensure that it better suits your needs and interests.

11.3 Up to date Internet browsers give you the option to reject, accept, or erase cookies stored on your computer or be notified before a cookie is stored on your computer. If you install or update your browser after May 2018 you will be given clear options on managing your cookies.

12. Google Multidevice Remarketing Features
Where users have chosen to enable Google to associate their web and app browsing history with their Google account, and to use information from their Google account to personalise ads, Google will use data from its signed-in users together with our (Asari.io) Google Analytics data to build audience lists for cross-device remarketing. In order to support this feature, two things will happen:

Google Analytics will collect Google-authenticated identifiers associated with users’ Google Accounts (and therefore, personal information) & Second, Google Analytics will temporarily join these identifiers to Asari.io Google Analytics data in order to support our audiences.

13. How can you raise a complaint?
If you think your personal data has been misused, please contact us by emailing julia@asari.io with details. After an investigation, you will be notified of the results, including if no evidence of a security breach or misuse is discovered.

You always retain the right under Chapter 3, Article 17 of the GDPR to have any personal data held by Asari.io erased.

14. Contact details
For further information on any of the subjects covered in this document, please contact:

Julia Redfarn
Founder
Julia@asari.io