You have the right to object to us processing your personal data for our legitimate business interests or for direct marketing purposes (including any related profiling). For more information about your rights and how you can exercise them, please see the section Your rights.
Personal data is any information which identifies you personally whether directly (for example, your name) or indirectly (for example, information about your use of our products and services).
We may collect the following data about you:
The cookies we and our business partners use on our Site are broadly grouped into the following categories:
Some of the cookies described in the “What Cookies are used on our Site” section above are stored on your machine by third parties when you use our Site. Third parties may also read cookies on your browser to collect information or to serve content or advertisements to you. We have no control over these cookies or how the third parties use them. They are used to allow that third party to provide a service to us, for example analytics.
We use your personal data for the following purposes:
To provide you with the products and services you have requested
We use your personal data to accept you as a new or returning customer to provide you with the products and services you have requested in accordance with the Trading Terms or Terms of Trading.
To send you service communications, including in relation to changes to our Trading Terms or Terms of Trading
We use the contact details you have provided to us so that we can communicate with you about the products and services that we provide, including to let you know about major changes to those products and services or to the Trading Terms or Terms of Trading between us or to any related information.
Direct marketing (including by third parties)
If you have provided your consent or we otherwise have the right to do so, we may use your contact details to send you direct marketing and keep you informed of promotional offers by email, SMS, post or telephone relating to our products and services.
You can unsubscribe from our direct marketing at any time by clicking the “Unsubscribe” link in any of our emails or by contacting us.
Our trusted business partners would also like to use your name, email address, postal address and telephone number to inform you of similar products, services and promotional offers. We will only share your personal data with our partners where you have provided us with your consent to do so. You can unsubscribe at any time by clicking the “Unsubscribe” link in any of their emails or by contacting us.
To track your usage of our website, communications, products and services
To provide and improve customer support
We use your personal data to be able to provide and improve the customer support we provide to you (for example, where you have questions about our products and services).
To maintain our records and improve data accuracy
Like any business, we process personal data in the course of maintaining and administering our internal records. This includes processing your personal data to ensure that the information we hold about you is kept up to date and accurate.
To respond to enquiries, complaints and disputes
We use the personal data we hold about you to help us respond to any enquiries or complaints you have made, or deal with any dispute which may arise in the course of us providing our products and services to you, in the most effective manner.
To investigate, detect and prevent fraud and comply with our legal obligations
In certain circumstances, we use your personal data only to the extent required in order to enable us to comply with our legal obligations, including for fraud detection, investigation and prevention purposes. This may require us to provide your personal data to law enforcement agencies if they request it.
Data protection law requires us to only process your personal data if we satisfy one or more legal grounds. These are set out in data protection law and we rely on a number of different grounds for the processing we carry out. These are as follows:
In certain circumstances, we process your personal data after obtaining your consent to do so for the purposes of:
Necessary for the performance of a contract and to comply with our legal obligations
It is necessary for us to process your basic contact details, payment details and information about the business you represent for the performance of the Trading Terms or Terms of Trading between us. In particular, we rely on this legal ground to:
If you choose not to give some or all of the aforementioned information to us, this may affect our ability to provide our products and services to you.
In certain circumstances, we also use your personal data only to the extent required in order to enable us to comply with our legal obligations, including to detect, investigate and prevent fraud.
Necessary for the purposes of our legitimate business interests or those of a third party
It is sometimes necessary to collect and use your personal data for the purposes of our legitimate interests as a business, which are to:
Where we think there is a risk that one of your interests or fundamental rights and freedoms may be affected we will not process your personal data unless there is another legal ground for us to do so (either that we have obtained your consent to the processing or it is necessary for us to perform our contract with you or to comply with our legal obligations).
We may provide your personal data to our suppliers and service providers, including other companies in our group, who provide certain business services for us and act as “processors” of your personal data on our behalf. In addition, we may disclose your personal data if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to protect the rights, property, or safety, of our business, our customers or others. This includes, in specific cases, exchanging information with other organisations for the purposes of fraud protection.
We retain your personal data for no longer than is necessary for the purposes(s) for which it was provided. What this means in practice will vary between different types of data. When determining the relevant retention periods, we take into account factors including:
Otherwise, we securely erase your personal data from our systems when it is no longer needed.
You have the following rights regarding your personal data:
|Rights||What does this mean?|
|3. Right to rectification||You are entitled to have your personal data corrected if it is inaccurate or incomplete.|
|4. Right to erasure||This is also known as ‘the right to be forgotten’ and, in simple terms, enable you to request the deletion or removal of your personal data where there is no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.|
|5. Right to restrict processing||You have the right to ‘block’ or supress further use of your personal data in certain circumstances. When processing is restricted, we can still store your personal data, but may not use it further.|
|6. Right of data portability||You have the right to obtain and reuse your personal data in a structured, commonly used and machine-readable format in certain circumstances. In addition, where certain conditions apply, you have the right to have such information transferred directly to a third party.|
|7. Right to object to processing||You have the right to object to us processing your personal data for our legitimate business interests or for direct marketing purposes (including in each case any related profiling).|
|8. Right to withdraw consent to processing||If you have given your consent to us to process your personal data for a particular purpose (for example, direct marketing), you have the right to withdraw your consent at any time (although if you do so, it does not mean that any processing of your personal data up to that point is unlawful).|
|9. Right to make a complaint to the data protection authorities||You have the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal data or believe our processing of your personal data does not comply with data protection law.|
If you would like to exercise your data protection rights or if you are unhappy with how we have handled your personal data, please feel free to contact us by using the details set out on our Site.
If you’re not satisfied with our response to any enquiries or complaint or believe our processing of your personal data does not comply with data protection law, you can make a complaint to the Information Commissioner’s Office (ICO) by:
The General Data Protection Regulation (“GDPR”), which came into effect as of May 25, 2018, is an iteration of the existing data protection laws defined and enforced by the European Union.
PhotoMeBooth is committed to ensuring that its services comply with the GDPR, and that its clients can continue to use its services. Company has for months designated an internal team, which are accompanied by the Company’s legal consultants and other professional and expert consultants, for the sole purpose of ensuring all required actions are taken in order to achieve GDPR compliance.
Please see below a general overview which details the Company’s compliance with GDPR. For additional information, please contact our Data Protection Officer at: [email protected]
The Company has completed an in-depth audit data mapping out all of the Personal Data and data sets which it processes, as well as the technical and organizational security measures used in order to safeguard and protect such data.
Company has ongoing training for its personnel and employees with regards to the GDPR, Company’s data practices and the importance of data security.
In accordance with GDPR, data subjects may exercise the following rights:
(i) request to access Personal Data; (ii) request the rectification of Personal Data; (iii) request the erasure of Personal Data; (iv) request to restrict processing of Personal Data; (v) object to processing of Personal Data; (vi) request to exercise right of data portability; (vii) right to file a complaint to a supervisory authority; and (viii) right to withdraw consent (to the extent applicable).
Get in touch with us at: [email protected]
We have also trained our designated privacy and security team to respond to such request and follow the privacy by design and privacy by default values when developing additional platforms, products, features and services.
Company has implemented a process, in the event of a data breach and will provide the data controllers, the regulators and the end users with an immediacy of notification to the extent required under applicable law.