For the purposes of data protection law, LACM Global is a data controller in respect of your Personal Data. We are responsible for ensuring that we use your Personal Data in compliance with data protection law.
Personal data that we collect about you
The kinds of Personal Data we may collect include:
- Information that you provide to us. This includes information about you that you give to us by completing forms online or by communicating with us, whether face-to-face, by phone, e-mail or otherwise. This information may include:- your full name, company name, job title, email address, mailing address, telephone and fax numbers, mobile telephone number, and other information you provide to us directly online, such as information collected for identification purposes; and- other information that you provide to us in connection with the services we provide.
- Information we collect or generate about you. We may collect information about you when you seek information about us or establish a business relationship with us on behalf of yourself or your organization. This information may include:
- information collected from your organization, such as details about authorised signatories;
- copies of any relevant trust deeds, partnership agreements, constitutions, articles of association or other corporate entity documents; and
Uses of your Personal Data
Your Personal Data may be stored and processed by us in the following ways and for the purposes for which it was provided to us, as required by law, and for our business purposes, including:
- to perform our obligations and exercise our rights under a contract that LACM Global has entered with you or your organization, and to otherwise provide our products and services;
- to communicate with you, notify you about important updates or changes to our products and services, and address relevant inquires or complaints;
- to meet our legal obligations and protect our legal rights, including, without limitation, to comply with recordkeeping, reporting and tax obligations under applicable law (such as corporations, tax and anti-money laundering);
- for marketing and promotional purposes, consistent with applicable law. For example, we may use your Personal Data, such as your email address, to send you news and newsletters, or to otherwise contact you about our services or information we think may be of interest to you; and
- we will process Personal Data related to your use of our email system in order to enable the effective operation of the email system and ensure that it is used in accordance with our policies and procedures.
We are entitled to use your personal data in these ways because:
- we need to in order to perform our obligations and exercise our rights in connection with any contract that LACM Global has entered with you or your employer, and to otherwise provide our products and services to you;
- we have legal and regulatory obligations that we have to discharge;
- we may need to in order to establish, exercise or defend our legal rights or for the purpose of legal proceedings;
- the use of your Personal Data as described may be necessary for our legitimate business interests (or the legitimate interests of one or more of our affiliates), such as:
o allowing us to effectively and efficiently administer and manage the operation of our business; or
o maintaining compliance with internal policies and procedures;
- you have consented to us doing so.
Disclosure of your information to third parties
We may disclose your Personal Data to affiliates for the purposes of:
- the management and administration of our business and our affiliates’ business; and
- assessing compliance with applicable laws, rules and regulations, and internal policies and procedures across our business and our affiliates’ businesses.
We will take steps to ensure that the Personal Data is accessed only by employees of our affiliates that have a need to do so for the purposes described in this policy.
We may also share your Personal Data with third parties outside of our corporate group for the following purposes:
- if we sell any of our business or assets, in which case we may disclose your Personal Data to the prospective buyer for due diligence purposes;
- if we are acquired by a third party, in which case personal data held by us about you will be disclosed to the third party buyer; and
- to the extent required by law, for example, if we are under a duty to disclose your Personal Data in order to comply with any legal or compliance obligation, establish, exercise or defend our legal rights.
Transfers of personal data outside the European Economic Area
The Personal Data that we collect from you will be transferred to, and stored on servers in the United States or another destination outside the European Economic Area (“EEA”). It may also be processed by individuals operating outside of the EEA who work for our affiliates or for one of our service providers.
Where we transfer your Personal Data outside the EEA, we will ensure that it is protected in a manner that is consistent with how your Personal Data will be protected by us in the EEA. This can be done in a number of ways, for instance:
- the country that we send the data to might be approved by the European Commission as offering a sufficient level of protection;
- the recipient might have signed up to a contract based on “model contractual clauses” approved by the European Commission, obliging them to protect your personal data; or
- the recipient may be party to binding corporate rules (relevant to intra-group transfers only); or
- where the recipient is located in the US, it might be a certified member of the EU-US Privacy Shield scheme.
In other circumstances the law may permit us to otherwise transfer your Personal Data outside the EEA. In all cases, however, we will ensure that any transfer of your Personal Data is compliant with applicable data protection law. The data protection laws in the United States and other countries where your Personal Data may be transferred may be different from, and less stringent than, those in your country of residence. By using the LACM Global website, or by providing Personal Data to us, you expressly consent to such transfer and processing.
You can obtain more details about the protection given to your Personal Data when it is transferred outside the EEA (including a copy of the standard data protection clauses which we have entered into with recipients of your personal data) by contacting us in accordance with the “Contacting us” section below.
Retention of personal data
How long we hold your Personal Data for will vary. The retention period will be determined by the following criteria:
- the purpose for which we are using your Personal Data – we will need to keep the data for as long as is necessary for that purpose; and
- legal obligations – laws, regulation, or internal policy may set a minimum period for which we have to keep your Personal Data.
We will use commercially reasonable physical, electronic, and procedural safeguards to protect your Personal Data from loss, misuse, and unauthorised access, disclosure, alteration, and destruction in accordance with applicable law. Note that despite our best efforts, no data security measures can fully guarantee security all of the time.
You have a number of legal rights in relation to the Personal Data that we hold about you. These rights include:
- the right to obtain information regarding the processing of your Personal Data and access to the Personal Data which we hold about you;
- where you have actively provided your consent for us to process your Personal Data, the right to withdraw your consent at any time. Please note, however, that we may still be entitled to process your personal data if we have another legitimate reason (other than consent) for doing so;
- in some circumstances, the right to receive some Personal Data in a structured, commonly used and machine-readable format and/or request that we transmit those data to a third party where this is technically feasible. Please note that this right only applies to Personal Data which you have provided to us;
- the right to request that we rectify your Personal Data if it is inaccurate or incomplete;
- the right to request that we erase your personal data in certain circumstances. Please note there may be circumstances where you ask us to erase your Personal Data but we are legally entitled to retain it;
- the right to request that we restrict our processing of your Personal Data in certain circumstances. Again, there may be circumstances where you ask us to restrict our processing of your Personal Data but we are legally entitled to refuse that request; and
- the right to lodge a complaint with the data protection regulator (details of which are provided below) if you think that any of your rights have been infringed by us.
You can exercise your rights by contacting us using the details set out in the “Contacting us” section below.
We recognize the need to provide particular privacy protections with respect to personal information that may be collected from children. This site and services are not aimed at or intended for children.
If you would like further information on the collection, use, disclosure, transfer or processing of your Personal Data or the exercise of any of the rights listed above, please address questions, comments and requests to firstname.lastname@example.org.
You can find out more information about your rights by contacting the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues, or, as the case may be, any other competent supervisory authority of an EU member state.
Effective October 7, 2020