Date Last Revised: November 19, 2019
AUVESY EEA PRIVACY NOTICE
This supplemental privacy notice (“Privacy Notice”) provides European Economic Area (“EEA”) individuals additional information required by the EU General Data Protection Regulation. These provisions, together with the statements in the Auvesy Privacy Statement (“Privacy Statement”), set forth our practices with regard to EEA personal data. For EEA individuals, if there is a conflict between this Privacy Notice and the Privacy Statement, this Privacy Notice governs
AUVESY contact information:
146 Monroe Center NW, Suite 1210
Grand Rapids, MI 49503
Attn: Data Administrator
AUVESY, Inc. is based in the United States. Our representative in the European Economic Area is:
Fichtenstrasse 38 B
76829 Landau / Germany
This Privacy Notice sets forth our reasons for processing your personal information. Certain capitalized terms used but not defined in this Privacy Notice shall have the meanings set forth in our Privacy Statement.
Legal basis and purposes for data processing:
We only process personal information when we have a legal basis for the processing and have your consent. We may also process your personal information for the purposes of our own legitimate interests or for the legitimate interests of others so long as that processing does not outweigh your rights and freedoms. Specifically, we will only process your personal information as follows:
- to provide you with the Website, process any other information, products or services that you request from us.
- to facilitate billing and invoicing.
- to serve our customers and for marketing purposes.
- to carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
- to optimize operation of the Website.
- in any other way, we may describe when you provide the information and provide your consent.
Automated decision making and profiling:
We do not make automated-decisions about you or engage in data profiling.
Personal information requirements:
You are not required to provide any personal information to AUVESY. If you engage or access our services, you are required to provide certain personal information to enable us to perform the services. During your registration for our services, you will be provided with information regarding which data elements are required.
You have choices regarding how we use your personal information. You are entitled to the following:
The right to access: You have the right to request copies of your personal information. We may charge you a minor fee for this service.
The right to rectification: You have the right to request that we correct any information that you believe is inaccurate. You also have the right to request that we complete information that you believe is incomplete.
The right to erasure: You have the right to request that we erase your personal information under certain conditions.
The right to object to processing: You have the right to object to our processing of your personal information, under certain conditions.
The right to data portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
In addition, when AUVESY provides the services or acts as a data processor, we receive your personal information from third parties as needed to provide services. If AUVESY is processing your personal information as a data processor, we will refer you to our client for assistance with these requests. We support our clients with responding to requests required by law.
You may also decline our marketing communications.
To exercise these rights, please contact us via email to firstname.lastname@example.org or write to the address above. Note that for your protection, we may need to verify your identity before we can process your request.
If you believe that we have violated applicable law in our processing of your personal information, please contact us at email@example.com or a supervisory authority.
Your personal information may be transferred to, stored at or processed in the United States, or Germany or other countries that may not have equivalent privacy or data protection laws.
We generally use approved Standard Contractual Clauses to assure that Personal Information is adequately protected when it is transferred out of the EEA, but we may also make transfers to recipients with approved Binding Corporate Rules or to recipients in the United States who have certified to the EU-US and/or Swiss-US Privacy Shield Framework.
Please contact us via email at firstname.lastname@example.org if you would like more information about cross-border transfers or to obtain a copy of the Standard Contractual Clauses.
Your personal information will be retained for as long as the information is needed for the purposes set forth above and for any additional period that may be required or permitted by law. The retention period depends on the purpose(s) for which the data was collected, how it is used, and applicable law. You may request that we delete your personal information by contacting us via email at email@example.com or writing to us at the address above. If we do not have a legal basis for retaining your information, we will delete it as required by applicable law.