INTRODUCTION

This GDPR Privacy  Notice is for people who are located in the European Economic Area (“EEA”), or the United Kingdom (“UK”) and supplements our Privacy policy.  Our processing of the personal data of people who are in the EEA is governed by the European Union’s General Data Protection Regulation (“GDPR”). Our processing of the personal data of people who are in the UK is subject to the Data Protection Act 2018, which incorporates the GDPR as the UK GDPR.  This Notice refers to the GDPR and the UK GDPR collectively as the “GDPR”.

GDPR requires us to provide certain information to you about your personal data, which we refer to in this notice as your personal information.

DATA CONTROLLER

Data Controller means a natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed. For the purpose of this GDPR Privacy Notice, we are the Data Controller of your data. For our contact information, please refer to our Privacy policy “CONTACT US” Clause.

PURPOSES OF THE PROCESSING

Our Privacy Policy outlines how we collect, use, share, and process personal information in the normal course of our business operations, excluding legal representation of clients which is governed by separate client agreements and professional obligations. We collect personal information through cookies and similar tracking technologies, which are used for the specific purposes outlined in our Cookie Management Center.

​​The purpose of the processing of personal information is mentioned in our privacy policy. Please refer to our privacy policy. “HOW DO WE USE YOUR INFORMATION?

LAWFUL BASIS FOR THE PROCESSING

In general, we process personal information obtained from visitors through our website or other interactions with us, based on our legitimate interests as a law firm to conduct our business. If we request your consent, we will process personal information based on that consent. We may also process personal information on other lawful bases as permitted by GDPR and other applicable laws, including when the processing is necessary for us to fulfil our legal obligations.

PERSONAL INFORMATION

The types of personal information that we process are explained in detail in our Privacy Policy.

RECIPIENTS OF YOUR PERSONAL INFORMATION

We rely on different service providers to handle various aspects of our website and related services, such as event registration and email communications. Please note that our service providers are bound by contractual agreements that limit their use of your personal information. If you would like more information on which service providers have received your personal information, please reach out to us and we will gladly provide you with that information. Additionally, as outlined in the "WILL YOUR INFORMATION BE SHARED WITH ANYONE?" section of our Privacy Policy, we may share your personal information with other types of third parties.

DATA TRANSFER AND PROTECTION MEASURES

Tralonet's primary administrative offices are located in the USA, and this is where we process personal information collected through our website. We would like to inform you that when you provide personal information to us, we request your consent to transfer that information to the USA.

It is essential to note that the USA has not received an adequacy decision from the European Commission, which means that the Commission has not determined whether the laws of the USA provide sufficient protection for personal information. However, we want to assure you that we take adequate measures to safeguard your personal information and treat it in accordance with the GDPR Privacy Notice.

We have implemented reasonable security measures to protect your personal information in storage and use secure transmission methods when collecting personal data through our website. We also enter into contracts with our data processors, ensuring that they treat personal information in a manner consistent with this Notice.

Please note that by providing us with your personal information, you consent to its transfer to the USA and the processing of your data in accordance with this Notice.

RETENTION PERIOD FOR PERSONAL INFORMATION

We want to assure you that we only retain personal information for as long as it is needed for the purpose for which it was collected. The retention period may vary depending on the type of information and the specific purpose for which it is being used.

When we no longer require personal information for its intended purpose, or for any compatible purpose, we will securely delete it within a reasonable period. However, we want to remind you that you have the right to request the deletion of your personal data before the end of its retention period.

Please note that we may also archive personal data as part of our business continuity procedures. Archiving involves storing inactive data in a secure location for a certain period before final deletion. This ensures that we can access the data if required for any legal or regulatory purpose.

DATA SUBJECT RIGHTS

You have the right to request access to your personal data, to have your personal data corrected, restricted or deleted, and to withdraw any consent that you have given to the processing of your personal data (without affecting the lawfulness of the processing prior to your withdrawal of consent) and to object to our processing of your personal data.  You also have the right of data portability in certain circumstances, which means that you can request that we provide you (or a third party you designate) with a transferable copy of the personal information that you have provided to us.  Your rights may be subject to various limitations under the GDPR.  If you wish to exercise any of these rights, or if you have any concerns about our processing of your personal data, please contact us in any of the ways listed in the section “CONTACT US” in our Privacy Policy.

For more information on your data protection rights please refer to “YOUR DATA PROTECTION RIGHTS UNDER GENERAL DATA PROTECTION REGULATION (GDPR)” of our privacy policy.

YOUR RIGHT TO LODGE A COMPLAINT

You have the right to file a complaint concerning our processing of your personal data with your national (or in some countries, regional) data protection authority. The EU Commission has a list here:http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm. 

The data protection authority for the United Kingdom is the Information Commissioner’s Office. You also have the right to make a complaint to the Information Commissioner’s Office – the supervisory authority that handles data protection law in the UK. You can contact them at:  https://ico.org.uk/make-a-complaint/

VOLUNTARY NATURE OF PERSONAL INFORMATION DISCLOSURE

Providing personal information to us is not mandatory for individuals visiting our website. We do not require visitors to provide personal information as a condition of using our website or accessing its content. However, if a visitor wishes to receive communications from us or register for our events, it will be necessary to provide certain personal information.

We want to emphasize that visitors have the choice to provide or withhold their personal information. We will not penalize or discriminate against individuals who choose not to provide their personal information. However, visitors should be aware that not providing certain information may limit their ability to access certain features or receive specific services that we offer on our website.