ASKO PRIVACY STATEMENT
General Principles of Data Protection
ASKO complies with the general principles of the protection of personal data as set forth in the GDPR. The processing of personal data complies with the following requirements:
- Processing operations must be lawful, fair and transparent to the data subjects.
- Personal data must be collected for specified, explicit and legitimate purposes.
- Personal data may not be further processed in any way incompatible with those purposes. Processing operations for archiving, public interest, scientific and historical research, and statistical purposes shall be consistent with the original purpose.
- Personal data must be adequate and relevant and limited to the minimum necessary for the purposes for which they are processed.
- Personal data must be accurate and, where necessary, up to date.
- Personal data should be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data were processed. Personal data may be kept longer for archiving purposes in the public interest and for historical, statistical or scientific purposes.
- Personal data may only be processed in a way that ensures the security of personal data.
- Processing occurs on the grounds of legitimate interest, one of the six legal principles, only after an explicit consideration of the consequences of the processing for the interests of the data subject and the interests of the organisation.
ASKO recognizes the importance of its ability to demonstrate compliance with these principles. The design, implementation and maintenance of the ASKO Privacy Policy (internal for employees) and this ASKO Privacy Statement demonstrate such compliance. Furthermore, employees are trained in privacy awareness, and processes are established to comply with the principles.
Purpose and Types of Data Collection
Contact Information: ASKO collects Personal Data (specifically, contact information) from the ASKO website that is provided by visitors and customers who wish to obtain information or support, or to purchase goods and services. Contact information is provided via email, browser forms or online order forms, and may include first name, last name, e-mail address, job title, name of the organization, country, state/region and phone numbers (fax, cell and/or landline), technical requirements, and other information necessary for an ASKO associate to properly respond. This contact information is used by ASKO sales and customer service teams to contact site visitors and customers, as appropriate, so that requested information, support, or services may be provided.
Billing Information: ASKO collects billing and payment information which may include a purchase order number, an account number, instructions for shipment and payment, and VAT identification numbers (VATIN). All of the foregoing information is used to prepare and send invoices, make and receive payments, and manage accounts.
Recourse, Enforcement and Liability
Data subjects may address complaints to the supervisory authority. This will be the respective authority of the country of the persons concerned. It is also possible for the parties involved to establish an effective remedy from ASKO. Individuals from or residing within the EU should first contact ASKO at: privacy@askoinc.com with an inquiry or complaint.
ASKO commits to cooperate with the EU data protection authorities (DPAs) and comply with the advice given by the DPAs regarding data (including Human Resources Data) transferred from the EU in the course of normal business operations and in the context of the employment relationship. Complaints regarding processing of Human Resources Data pertaining to EU citizens may be reported by the individual to the relevant Data Protection Authority.
Rights of the Data Subject
The data subjects concerned have the following rights in accordance with the GDPR:
- The right of inspection: the right to inspect the personal data that ASKO processes about him or her.
- Right of rectification: if personal data are inaccurate, they have the right to have them adjusted;
- Right of erasure: if the personal data are no longer needed for the purpose for which they were collected, they have the right to request their erasure. There are several exceptions to this, such as the obligation to retain certain data for a statutory retention period.
- The right to limitation of the processing: during the period that ASKO is determining whether the data need to be rectified, determining whether data processing is unlawful, determining whether data need to be deleted or when an objection to the processing has been lodged, data subjects have the right to apply for the limitation of the processing;
- The right to data portability: upon request, ASKO must transfer all personal data to the data subject or to another organization of the data subject’s choice. This is only possible if ASKO processes the personal data on the basis of permission or agreement;
- The right to object: if ASKO processes data on grounds of legitimate interest or public interest, the data subject can lodge an objection, after which a weighing of interests will take place. In the case of direct marketing, individuals always have the right to object.
- The right to withdraw consent: In certain circumstances, data subjects may have given ASKO their consent to process their personal data. Data subjects have the right to withdraw their consent at any time.
For any questions regarding this Privacy Statement, data processing, or to exercise your rights, please contact us ASKO at: privacy@askoinc.com.
Accountability for Onward Transfer
ASKO does not transfer customer or supplier personal data to any data processor.
Renewal and Verification
ASKO is committed to compliance with the GDPR, as evidenced by the design, implementation, and maintenance of this Privacy Statement. In addition, this privacy statement communicates ASKO’s commitment to customers, potential customers, potential customers, employees and suppliers. Furthermore, designated employees are trained in privacy requirements, and processes are established that efficiently comply with the principles.