This Privacy Policy (hereinafter referred to as the “Policy“) was elaborated by Cartor Security Printers Ltd., having its registered office at: Valiant Way, i54 Business Park, Wolverhampton, WV9 5GB, United Kingdom (“PROVIDER” or “we”), to provide a detailed description of our approaches to processing of personal data that we collect and process when you use our mobile application (“App”).
While processing your personal data in connection with the App use, being a personal data controller, the PROVIDER acts in accordance with the laws and regulations of the United Kingdom.
Please note that in some cases the PROVIDER may perform processing of your personal data with the usage of the App under assignment of a third party. Such a third party shall ensure legal grounds for transfer and further processing of your personal data by the PROVIDER.
This Policy is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. All terms used in this Policy shall have meaning defined in the UK GDPR.
When providing personal data, you agree to their processing in accordance with the provisions determined by this Policy.
The purpose of this App (“Purpose“) is activation and verification of stamps delivered by the operators for products (“Products“) that originate from the operators (the “Stamp”). This app is limited to that Purpose. This App is not deemed to provide any information on the use or distribution of the Products nor on the consequences of such an act. This App is not deemed to provide any additional information on PROVIDER’s or its clients’ products. We will process only that information about you which is compatible with this purpose, including: username, first and last name, professional email address and company name.
The PROVIDER processes personal data only if the relevant legal grounds for such processing exist. In addition to legal grounds described in Section 1 of this Policy above, the PROVIDER processes your personal data in the following cases:
(A) To perform the functions, authorities and duties imposed on PROVIDER by the applicable legislation.
(B) To perform a contract to which you are a party, beneficiary or guarantor and (or) to enter into a contract at your initiative, or the contract to which you will be a beneficiary or guarantor.
(C) To exercise rights and preserve legitimate interests of PROVIDER or any third parties.
(D) Any other legal grounds as per the applicable legislation.
We perform the processing of your personal data both with and without the use of automated means (mixed processing). When processing your personal data, we perform the following actions (operations) on such personal data: collection, recording, systematisation, accumulation, storage, specifications (updating, modification), retrieval, use, transfer (provision, access), including depersonalisation, blockage, deletion or destruction of personal data.
To improve the App functionality and to make it easier to use, the PROVIDER may use special cookies technology, as well as other similar tools.
Cookies are small files that the App stores on your device and use them to record certain actions on the App by way of storing data that may be updated and restored. Those files are stored on your device and contain data harmless to your equipment. They are used to record your preferences, such as the selected language and access details, as well as to personalize the App for you.
Since cookies may include your personal data, we will request your separate consent to processing of cookies, as well as the use of other similar tools. If you fail to give such consent, we will process only technical cookies that are necessary for the proper functioning of our App. You may withdraw your consent to processing cookies and delete cookies stored on your device.
We process your personal data no longer than it is necessary to achieve the purposes of processing established by the Policy.
Once the purposes of personal data processing have been achieved, PROVIDER will destroy personal data (and ensure that any third parties involved in the processing do the same) within 30 days. We will also cease processing of your personal data (and ensure destruction of such data by third parties involved in processing), if you withdraw your consent to data processing (where such consent is the only legal ground for processing of your personal data).
Please bear in mind that in certain cases we may continue processing your data after you have withdrawn your consent, where such processing is necessary to perform our duties arising from applicable laws or where such processing is required to exercise rights and legitimate interest of the PROVIDER and/or any third parties.
If you want to withdraw your consent to processing personal data, please contact us as described in Section 11 of this Policy.
For the purposes set out in this Policy, the PROVIDER may disclose your personal data to third parties where necessary to provide its services, comply with legal obligations, or otherwise fulfil the purposes described in this policy.
By engaging such third parties where required by laws and by instructing them to perform personal data processing on our behalf, being a personal data controller PROVIDER ensures that third parties maintain confidentiality of your data and take the relevant organisational, legal and technical measures to protect such data. Third parties that we involve process your personal data solely for the purposes defined in this Policy and perform the operations on your personal data that we assign to them. Under no circumstances such third parties shall perform the processing of your personal data for the purposes that are contradictory to the purposes specified in this Policy.
When prescribed by laws, the PROVIDER may also transfer your personal data for fulfilment of its legal obligations.
The App may contain hyperlinks to any third-party web-resources, while any third-party websites and/or mobile applications may contain hyperlinks to our App.
PROVIDER is not responsible for processing of your personal data on such third-party websites and/or mobile applications, as well as for any policies and practices applied by their owners, administrators or other persons in respect of processing personal data of users.
In light of this, we strongly recommend you to review the terms of use and privacy policy of each such third-party website and/or mobile application that you visit.
The PROVIDER tries to maintain the confidentiality and security of your personal data and to prevent their unauthorised disclosure. To do so, the PROVIDER implements and will implement adequate technical, legal and organizational security measures to protect personal data from illegal or accidental access, destruction, modification, blockage, copying, transfer, dissemination, as well as any other unlawful actions in respect of personal data, in particular, measures covered by the local legislation.
You have the following rights in respect of personal data processing performed by PROVIDER:
(A) To withdraw your consent to the processing of your personal data.
(B) To require the specifications, exclusion or editing, as well as blockage and destruction of incomplete, inaccurate, outdated, inadequate, illegally obtained or unnecessary personal data.
(C) To access to your personal data and, in particular, to obtain the following details:
(i) categories of personal data being processed;
(ii) purposes of processing personal data;
(iii) details of the persons who have access to personal data or who may be granted with such access (except for PROVIDER’s employees);
(iv) list of your personal data processed and the source of obtaining such data;
(v) terms of personal data processing, including retention term; and
(vi) other details pursuant to the applicable legislation.
(D) To require the notification of all persons to whom inaccurate or incomplete personal data was provided of all deletions, modifications or additions thereto.
(E) To exercise any other rights related to personal data protection provided for by the applicable legislation.
To withdraw your consent to personal data processing, you are required to send the relevant request to: [email protected]. Once your consent has been withdrawn, we will cease processing your data, dest personal data and ensure destruction of such data by third parties involved in processing (except where further processing is required by applicable laws or may be performed on any other legal ground).
The PROVIDER reserves the right to make amendments and updates to this Privacy Policy.
If we decide to introduce any amendments or updates to this Privacy Policy, we will publish such amendments or updates here so that you are always aware of our personal data processing practices. In case of any changes to our Privacy Policy, you will be notified thereof by e-mail.
If, pursuant to effective laws, any changes to this Privacy Policy require your consent to further processing of personal data in accordance with any amended provisions of this Privacy Policy, we will request such consent and enable you to refuse from accepting such amendments and further processing of your personal data by way of sending a relevant notice.
For exercising your rights and on any issues related to personal data processing, you may send us a request:
(A) By e-mail: [email protected]
(B) By regular post: Cartor Security Printers Ltd., Valiant Way, i54 Business Park, Wolverhampton, WV9 5GB, United Kingdom.
Please note that we will not examine anonymous requests. Upon obtaining any such request from you, we may also require that you verify your identity prior to sending a response to you.