Aotal is committed to ensuring we are compliant with relevant privacy regulations, including New Zealand’s Privacy Act and the European Union’s General Data Protection Regulation (“GDPR”).
For the purpose of the GDPR:
To learn more about the roles of a Data Processor and a Data Controller, and about GDPR visit https://www.eugdpr.org/
To provide Aotal Products & Services we collect from you:
You must make sure that your Personal Information is accurate, complete, up-to-date and not misleading when it is disclosed to Aotal.
Aotal collects Your Personal Information when you:
Aotal will only use and disclose to Third Parties your Personal Information:
Aotal will hold your Personal Information for as long as your Personal Information is required for the Purposes and for as long as is necessary for Aotal to comply with its Legal Obligations.
Aotal will use reasonable care to protect your Personal Information from unauthorised access, use, modification, disclosure, and loss.
Unfortunately, the transmission of information via the Internet is not secure and Aotal cannot guarantee the security of your data in transmission to or from any of the Aotal Products & Services. As a result, the security of any information you transmit to Aotal or Aotal transmits to you is transmitted at your own risk.
In order to provide you with the Aotal Products & Services, Aotal may need to disclose and transfer your Personal Information to Third Parties located in a different country from where you live, including countries located outside the European Economic Area (EEA). If those countries do not have data protection laws comparable to the data protection laws of Your country of residence (such as the protections required under the Directive 95/46/EC for the transfer of personal data to third countries), then Aotal will take steps to ensure that your Personal Information (including any Sensitive Information) is protected in those countries. For example, if you live in a country not located in the EEA, a step that Aotal will take is to enter into data protection arrangements with the Third Party based on the "Model Contracts for the transfer of personal data from the EU/EEA to third countries".
If you decide not to give Aotal Your Personal Information, then you:
In the event of a privacy breach that Aotal believes has caused (or is likely to cause) serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as soon as possible.
To exercise any of the below rights please contact us at firstname.lastname@example.org and:
Where you are a user of our Products & Services you should email us from the email address that you used to register with Aotal. Receipt of an email from this address may be sufficient to confirm your identity, however we may request one or more identification documents, such as a copy of your driving licence or passport and a recent utility or credit card bill; and
You have the right to access any Personal Information that Aotal holds about you. If Aotal cannot give you access to the Personal Information that you have requested, then Aotal will let you know the legal reasons for not disclosing your Personal Information. If you are not happy with our legal reasons, please contact us in the first instance, if you are not satisfied then you have the right to complain to the New Zealand Privacy Commissioner: http://www.privacy.org.nz/your-rights/how-to-complain/.
You have the right to request correction of the Personal Information that Aotal holds about you. Aotal will correct your Personal Information if it is necessarily to ensure that Personal Information is accurate, up to date, complete and not misleading. If Aotal decides that it is not necessary to correct your Personal Information, Aotal will let you know the legal reasons for Aotal’s decision. If you are not happy with our legal reasons, please contact us in the first instance, if you are not satisfied then you have the right to complain to the New Zealand Privacy Commissioner: http://www.privacy.org.nz/your-rights/how-to-complain/.
You have the right to request deletion of certain Personal Information that Aotal holds about you. We may continue to process your Personal Data in certain circumstances in accordance with data protection legislation (i.e. where we have a legal justification or requirement to continue to hold such Personal Data). If you are not happy with our legal reasons, please contact us in the first instance, if you are not satisfied then you have the right to complain to the New Zealand Privacy Commissioner: http://www.privacy.org.nz/your-rights/how-to-complain/.
Cookies: A cookie is a small file that can be placed on your computer, mobile, tablet or any other electronic device when you visit websites that are provided as part of Aotal Products & Services. Cookies allow the relevant website to recognise a user's device. There are two types of cookies:
To enable all features and functionality you will need to permit Aotal to place cookies on your device. If you choose not to, then our features and functionality will not be available to you.
For more information about cookies, including how to adjust your internet browser settings to reject cookies, you can visit http://www.allaboutcookies.org/manage-cookies/
If you think that your privacy rights have been breached, you can make a written complaint to Aotal. Contact us at email@example.com.