Privacy policy,Effectiveon:18September2020.ThisPrivacyPolicycompletelyreplacestheprevious,version.,OWOXiscommittedtoprotectingyoursafetyandprivacy,andtakesitsresponsibilities,regarding the security of information very seriously.,ThisprivacypolicyexplainswhatdataOWOXcollectsaboutyou,howandwhyOWOX,uses it, who OWOX discloses it to, and how OWOX protects your privacy.,If you do not agree to this Privacy policy, please do not use our website and our services.,1.
Who is collecting and/or processing your data?,OWOX,Inc.,acompanyestablishedunderthelawsofCalifornia,UnitedStatesof,America,withregistrationnumberC3725260,(referredtoas“OWOX”,“we”,“us”,“our”inthis,Privacy Policy) is a company that collects and/or processes your data.,Datacontroller.OWOXcollectssomepersonaldatafromyou,forexamplewhenyouuse,OWOXwebsite,providefeedbackonOWOXservicesorcontactOWOX.Inthiscase,OWOX,isthedatacontrollerforpurposesofEuropeandataprotectionlegislationandOWOXtakeson,theobligationsandresponsibilitiesofdatacontrollers,particularlydescribedinGeneralData,Protection Regulation.,Dataprocessor.YoumaydecidetotransferOWOXwithyourclients’personaldataby,usingourservices.Inthiscase,youarethedatacontrollerandOWOXstandsoutasthedata,processorforpurposesofEuropeandataprotectionlegislationandOWOXtakesonthe,obligationsandresponsibilitiesofdataprocessor,particularlydescribedinGeneralData,Protection Regulation.,2.
What personal data OWOX collects and processes?,Theterm“personaldata”inthisPrivacyPolicyistheinformationthatrelatestoyouand,allowsOWOXtoidentifyyou,eitherdirectlyorincombinationwithotherinformationthat,OWOXmayhold.Yourpersonaldatamayincludeforexampleyourname,yourcontactdetails,(email, telephone number), your payment details or information on how you use our website.,Thepersonaldatayouprovideuswithisonlyprocessedandusedinthemanneradequate,forthepurposeforwhichitwascollected.OWOXdoesnotcombinepersonaldatathatwas,obtained for a variety of purposes.,WhenprovidingthepersonaldatathroughOWOXwebsite,youconsenttotheOWOX,usageofprovideddatainaccordancewiththisPrivacyPolicyand/oranyadditionalagreement,between you and OWOX.,OWOX may collect and process the following categories of information about you:,Yourcontactdetails(name,surname,Whenyouloginorcreateanaccountor,telephonenumber,email,companyname,project in OWOX services,company website)WhenyouchooseanofferOWOXmakes,available on its website,WhenyourequestanOWOXservices,demonstration or trial,When you subscribe for OWOX newsletters,When you register for OWOX webinars,WhenyousendarequestforOWOX,technical support,Whenyousendarequestforthird-party,servicesinformation(e.g.GoogleAnalytics,360),Yourpaymentdetails(creditcardnumber,WhenyoupurchaseOWOXproductsor,expiry date, etc.)services,When you validate your payment details,Your IP, cookiesWhen you visit our website,When you use our services,The communications youexchangewithWhenyoucontactOWOXoryouare,OWOX(forexample,youremails,letters,contactedbyOWOXmessagesonouronline,calls,oryourmessagesonOWOXonlinechatchat service),service),YourpostsandmessagesonsocialmediaWhenyouinteractwithOWOXonsocial,directed to OWOXmedia ,Your feedbackWhenyoureplytoourrequestsforfeedback,or participate in our surveys,Information about how you use our websiteWhen you navigate on our website,Aggregateddatastatistics(forpersonalizationWhenyouprovideyouraccesstoGoogle,of user experience in services)Analytics account,Byusingourservices,youmaybeprovidinguswithyourclients’personaldata.You,shouldthereforeensurethatyouhavecollectedyourclients’respectiveconsentsandapprovalin,ordertoprocesstheirdatainaccordancewithapplicabledataprotectionlawandtheTermsof,use.Weshallbeentitledto:obtain,collect,distribute,record,organise,adaptoralter,retrieve,,consult,align,combine,transfer,use,store,block,destroy,andconducttheinternationaltransfer,(includingcountriesthatdonotensureadequatelevelofprotectionofpersonaldata)ofthe,personaldatayouprovideuswith.Yourclients’personaldatabelongstoyouandOWOXwill,followyourinstructionsintheregardofyourclient’spersonaldata.ItwillbestoredatGoogle,BigQuery tables and at your Google Cloud Platform project.,Wedonotknowinglycollectpersonaldatafromchildrenunder16withouttheconsentof,parentsorlegalguardians.Youmustbeofageofmajorityinyourjurisdictiontouseourwebsite,orservices.Ifyouareundertheageof16,youmayonlyuseourwebsitewiththepermissionof,your parents or legal guardian.,Wedonotknowinglycollectpersonaldatarevealingracialorethnicorigin,political,opinions,religiousorphilosophicalbeliefs,ortradeunionmembership,andgeneticdata,or,biometricdatadataconcerninghealthordataconcerninganaturalperson’ssexlifeorsexual,orientation.,2.
Rights of data subjects,Youhavecertainlegalrightstoaccesscertainpersonaldataweholdaboutyouandto,obtain its correction, amendment, portability or deletion.,Youmayexercisethoserightsinyouraccount,inthe“Settings”chapter,orbycontacting,usviadata-protection@owox.com.Wewillrespondtoyourrequestatthesoonest,butinany,case within 30 calendar days from the date we receive your request.,AccordingtoCaliforniaConsumerProtectionAct,consumersfromCaliforniahasthe,following rights:,-Right to request from OWOX:,(1) The categories of personal data that OWOX has collected about you,,(2) Categories of sources from which personal data are collected,,(3) Business or commercial purpose for the collection or sale of personal data,,(4) Categories of third parties to whom OWOX provides personal data,,(5)Categoriesofyourpersonaldatathathasbeensold,andcategoriesofthirdpartiesto,whom personal data has been sold,,(6) The specific personal data that OWOX has collected about you,, You can exercise this right by using the method described above.,-Therighttonon-discriminationintheeventyouexerciseyourrightsundertheCalifornia,Consumer Privacy Act.,4.
How and why OWOX uses your data?,We use your personal data for the following purposes:,4.1.
To provide our services to you and technical support,OWOXusesyourinformationtoperformOWOXservicesinrelationtoyourproject.For,example,toautomaticallyimportdataintoyourGoogleAnalyticsaccount,collectGoogle,AnalyticsunsampleddatainyourGoogleBigQueryproject,storefrequentlyusedqueriesfor,Google BigQuery, make transactions, or when you ask for the technical assistance.,4.2.
To communicate with you and manage our relationship with you,Whenyouprovideyourdetailstosubmittherequestforinformationonourwebsite,,downloadanymaterialorpresentationfromourwebsite,requestademoofourservices,register,forwebinar,startatrialorservicesusage,contactedusonsocialmedia,orinanyotherway,expressyourinterestinourservicesandproducts,wewillcommunicatewithyoutorespondon,yourrequestandsubscribeyoutoournewsletter.Youmayunsubscribefromusorrequestto,stopanycommunicationwithyoubyclickingthe"unsubscribe"linkonouremailorbyreplying,"unsubscribe"foranyemailsfromoursalesormarketingteam(if"unsubscribe"linkis,unavailable).
We will honor your request.,Occasionallywemayneedtocontactyoubyemailand/ortelephoneforadministrativeor,operationalreasons,forexampleinordertosendyoutheconfirmationregardingwebinar,registration,thereplyforyourrequestonthetechnicalassistance,toremindyouabouttrail,expiry date or pending invoices.,Pleasebeawarethatthesecommunicationsarenotmadeformarketingpurposesandas,such,youwillcontinuetoreceivethemevenifyouopt-outfromreceivingmarketing,communications.,4.3.
To personalize and improve your customer experience,OWOXmayuseyourpersonaldatainordertotailorourservicestoyourneedsand,preferences and to provide you with a personalised customer experience.,OWOXmayalsocollectinformationonhowyouuseourwebsite,whichpagesofour,websiteyouvisitmost,whatproductsyoubuy,inordertounderstandwhatyoulike.OWOX,mayusethisinformationtotailorthecontentandoffersthatyouseeonourwebsiteand,ifyou,haveagreedtoreceivingmarketingcommunications,tosendyourelevantmessagesthatwe,think you like.,4.4.
To inform you about our news and offers that you may like,OWOXmaysendyoumarketingcommunications,ifyouhaveindicatedyourinterestin,ourproductandservices:submittedtherequestforinformationonourwebsite,downloadedany,materialorpresentationfromourwebsite,requestedademoofourservices,registeredfor,webinar,startedatrialorservicesusage,contactedusonsocialmedia,orinanyotherway,expressed your interest in our services and products..,PleasenotethatOWOXdoesnotshareyourcontactdetailsandotherpersonaldatawith,other companies for marketing purposes, unless OWOX has obtained your consent to do so.,Ifyoudonotwanttoreceivemarketingcommunicationsfromus,youcanatanytimeopt,outfromreceivingmarketingcommunicationsbyupdatingyouraccountsettingsorbyclicking,ontherelevant"unsubscribe"linkatthebottomofanyemailyoureceivedfromus,orby,replying"unsubscribe"foranyemailsfromoursalesormarketingteam(if"unsubscribe"linkis,unavailable).,4.5.Toimproveourservices,fulfilouradministrativepurposesandprotectourbusiness,interests and for marketing purposes,ThebusinesspurposesforwhichOWOXwilluseyourinformationincludelead's,evaluation,marketingamongleadsandcustomers,accounting,billingandaudit,creditorother,paymentcardverification,fraudscreening,safety,securityandlegalpurposes,systemstesting,,maintenance and development.,OWOXmayuseanonymousdata,whichwillnotincludepersonallyidentifiable,informationorinformationthatidentifiesorwouldreasonablybeexpectedtoidentifyyou,to,collecttheOWOXservicestatisticsandtoimproveandenhancetheOWOXservices(thedatais,collected in anonymized form, e.g.
in the form of derived metrics and coefficients).,4.6.ToshowcasetheresultsofusingOWOXservicesoryourfeedback,onlyuponprior,agreement with you and to the agreed extent,4.7.Tocomplywithourlegalobligationsandcompliancereasons,suchasthe,prevention, detection, or investigation of a crime.
loss prevention.
or fraud.,OWOXmayalsousepersonalinformationtomeetitsinternalandexternalaudit,requirements,informationsecuritypurposes,andasOWOXotherwisebelievetobenecessaryor,appropriate:(a)underapplicablelaw,whichmayincludelawsoutsideyourcountryofresidence;,(b)torespondtorequestsfromcourts,lawenforcementagencies,regulatoryagencies,andother,publicandgovernmentauthorities,whichmayincludesuchauthoritiesoutsideyourcountryof,residence;(c)toenforceourtermsandconditions;and(d)toprotectourrights,privacy,safety,,or property, or those of other persons, court order, law or governmental request.,We use your personal data based on:,your consent,,agreementconcludedwithyou,ortotakeactionatyourrequestbeforeconcludingan,agreement,,compliance with our legal obligations,,basedonourlegitimateinterests,forexample,whenweusecookiesonourwebsiteor,whenwereceiveyourdatafromadvertisingcampaigns,fromopenpublicsourcesorasaresult,of communications with you.,5.
Security of your data,Wearecommittedtotakingappropriatetechnicalandorganisationalmeasurestoprotect,yourpersonaldataagainstunauthorisedorunlawfulprocessingandagainstaccidentalloss,,destruction or damage to personal data.,Yourpersonalinformationisstoredbehindsecurednetworksandisonlyaccessiblebya,limitednumberofpeoplewhohavespecialaccessrightstosuchsystems,andarerequiredto,keeptheinformationconfidential.Inaddition,allinformationyousupplyisencryptedusing,Secure Socket Layer (SSL).,OurservicesuseofficialAPIsfromGoogle,Bing,Facebook,Yandex,Vkontakteand,others, where it is technically applicable to access the data that you provide.,ToprovideaccesstoGoogleservices,weuseOAuthauthentication.Thisisanopen,authorizationprotocol,whichprovidesuswithlimitedaccesstoprotectedresourcesforour,services without passing your data for authorization in your account.,You can limit access to your data in your Google account settings at any time.,We will protect your data in the following ways:,using cryptography, where necessary;,using password, where necessary.
and,restrictingaccesstoyourdata(i.e.accesstoyourpersonaldataisgrantedonlytothoseof,our employees or contractors for whom the access is necessary).,6.
International transfer of data,6.1.AsdescribedinthisPrivacyPolicy,OWOXmayinsomeinstancesdiscloseyour,personaldatatothirdparties.WhereOWOXdisclosesyourpersonaldatatoathirdparty,,werequirethatthethirdpartyhasappropriatetechnicalandorganisationalmeasuresin,place to protect your personal data.,6.2.Theinformationthatyouprovidetouswillbeheldinoursystems,whicharelocatedon,our premises or those of an appointed third party.,6.3.WeandsomeofoursubprocessorsarebasedoutsidetheEEA.Thatiswhyyourpersonal,datamaybeaccessedbyandprocessedoutsidetheEuropeanEconomicArea,,Switzerland and/or United Kingdom.,6.4.Whenweactasdatacontroller,thetransferofpersonaldataoutsidetheEEA,,Switzerlandand/orUnitedKingdomisbasedonthisPrivacyPolicy.Inthiscase,we,checkifthereisaEuropeanauthoritiesdecisionthatthethirdcountry,aterritoryorone,ormorespecifiedsectorswithinthatthirdcountry,ortheinternationalorganisationin,questionensuresanadequatelevelofprotection,and/orintheabsenceofthisdecisionwe,willrelyononeormoreoftheappropriatesafeguards,referredtoinArticle46ofthe,GDPR.,6.5.Whenyouare(a)anEU-basedcontroller(oraprocessorforanEU-basedcontroller),(b),OWOXisengagedasaprocessor(orasubprocessor),(c)theconditionssetforthunder,Article3oftheGDPRaremet,and(d)onlytotheextentthatanyprocessingofpersonal,databyOWOXtakesplaceinanycountryoutsidetheEU(exceptifthecountryensures,anadequatelevelofprotectionasdefinedinArticle45oftheGDPR),thepartiesagree,thattheStandardContractualClauses,attachedasannextothisPrivacyPolicy,willapply,inrespecttothatprocessing,andOWOXwillcomplywiththeobligationsofthe‘data,importer’ and you will comply with the obligations of the 'data exporter'.,6.6.Thefollowingadditionalconditionsshallapplyduringtheinternationaltransferof,personaldata(hereinafter—Client'sPersonaldata)basedontheStandardContractual,Clauses:,6.6.1.Legalbasis.IfyouprovideuswithClient'sPersonalData,youshouldcomply,withtheapplicableEUdataprotectionlawsandregulations.Asbetweenthe,parties,OWOXisresponsibleforthelawfulnessoftheprocessingofClient's,PersonalDatainitscapacityasaprocessor(orsubprocessor),andyouare,responsiblefortheprocessingofClient'sPersonalDatainyourcapacityasa,controller (or a processor for an EU-based controller).,6.6.2.Subprocessor's engagement.
You provide OWOX with the authorization to,engage sub-processors for processing of Client's Personal Data, including transfer,to third country or an international organization, provided the provisions of,Standard Contractual Clauses are fulfilled.
OWOX hereby confirms that it,requires all of its personnel and engaged subcontractors authorized to process,Client's Personal Data to commit themselves to confidentiality, or ensures that,they are under an appropriate statutory obligation of confidentiality, and not to,process Client's Personal Data for purposes other than as described in this Privacy,Policy.
This authorization should be considered as a "prior written consent" as,prescribed by Clause 11 of the Standard Contractual Clauses.,6.6.3.Integration with Third Party services.
OWOX may provide links to integrations,with Third Parties services, including, without limitation, certain Third Party,services, which may be integrated directly into OWOX Services.
If you elect to,enable, access or use such Third Party Services, the access and use of such Third,Party services is governed solely by the terms and conditions and privacy policies,of such Third Party services, and OWOX does not endorse, is not responsible or,not liable for, and makes no representations as to any aspect of such Third Party,services, including without limitation their consent or the manner in which they,handle Client's Personal Data or any interaction between you and the provider of,such Third Party services.
The provider of Third Party services shall not be,deemed subprocessors for any purpose under this Privacy Policy.,6.6.4.International Transfer.
You acknowledge that OWOX and its subprocessors may,maintain data processing operations in countries that are outside of the EEA,,Switzerland and the UK.,1.1.1.Limitation of Liability.
Notwithstanding anything to the contrary, will either party of this,Privacy Policy, their affiliates, officers, directors, employees, agents, service providers,,suppliers or licensors be liable to the other party or any third party for any lost profits,,lost sales, lost data (being data lost in the course of transmission via Your system or over,the internet through no fault of OWOX), loss of goodwill, or for any type of indirect,,incidental loss or damages, incurred by the other party in connection with this Privacy,Policy.
For the avoidance of doubt, this provision shall not be construed as limiting the,liability of either party with respect to claims brought by data subjects.,7.
Term for data storage,OWOXwillnotstoreyourpersonaldataforlongerthanisnecessaryforthepurposefor,whichitwasprovidedorcollected.OWOXwillonlyretainthepersonaldatathatservesa,legitimatepurpose(e.g.applicablelegalregulationsmayrequiretheretentionofdata,orsome,data may be necessary for the purposes of billing outstanding amounts).,After2yearsfromthemomentoflastvisitofOWOXwebsite,youraccountandyour,unsubscriptionfromOWOXnewsletters,OWOXatitssolediscretiondeleteyourpersonaldata,or anonymize it.,OWOXwillalsodeleteyourpersonaldatawithin30calendardaysuponreceivingyour,request for data erasure.,OWOXreservesitsrighttoretainapartofpersonaldata,whicharerequiredbyapplicable,lawandfortheterm,requiredbyapplicablelaw(e.g.applicablelawmayrequirethatsome,personal data shall be retained for tax accounting or for issues of the invoice for unpaid fees).,8.
Sharing your personal data,OWOXusesalimitednumberofthirdpartyproviderstoassistusinprovidingtheservices,toourcustomers.Thirdpartiesmayaccess,processorstorepersonaldataintheframeworkand,upon our instructions only.
OWOX may share your information with the following persons:,Affiliates.OWOXmaydiscloseyourinformationtoitsaffiliatesorsubsidiaries,which,mayuseyourinformationtoprovideservicestoyouortocommunicatewithyouregarding,services provision on OWOX behalf.,ServiceProviders.OWOXmaydisclosetheinformationitcollectsfromyoutothirdparty,vendors, service providers, contractors or agents who perform functions on OWOX behalf.,OtherThirdParties.OWOXmaydiscloseyourinformationtothirdpartiesuponyour,instructionstodoso.Forexample,whenyouaskOWOXtotransferthedatafromyourCRMto,your Google BigQuery project.,Creditanddebitcardcompanies.OWOXmaydiscloseyourpaymentdetailsstrictlytothe,companiesthatprocessthecardpaymentsforthepurposesofprocessingofpaymentforOWOX,services.,BusinessTransfers.IfOWOXisacquiredbyormergedwithanothercompany,if,substantiallyallofOWOXassetsaretransferredtoanothercompany,oraspartofabankruptcy,proceeding, OWOX may transfer the information it has collected from you to this company.,9.
Cookies or other tracking technologies,Inordertoimproveourservices,toprovideyouwithmorerelevantcontentandtoanalyse,howvisitorsuseourwebsite,orfordirectmarketingpurposes,wemayusetechnologies,suchas,cookies,localstorageandpixels.Pleasebeawarethatinmostcaseswewillnotbeableto,identify you from the information we collect using these technologies.,Forexample,weusesoftwaretomonitorcustomertrafficpatternsandwebsiteusageto,helpusdevelopthedesignandlayoutofthewebsiteinordertoenhancetheexperienceofthe,visitorstoourwebsite.Inaddition,inordertounderstandhowourcustomersinteractwiththe,emailsandthecontentthatwesend,weusepixelsthatallowustoknowiftheemailswesend,are opened.,Weusecookiesandlocalstorageonourwebsite.Thesetechnologiesaresmallpiecesof,informationstoredbyyourbrowseronyourcomputer'sharddrive.Onyourfurthervisitstothat,website,theinformationstoredinthecookieissentbacktothewebsite.Thisallowsthewebsite,to recognise you and tailor its content to your needs.,What cookies does OWOX use?,We use the following types of cookies:,(i)essentialcookies,whichareessentialfortheprovisionofaccesstoourwebsitesand,Services;,(ii)functionalitycookies,whichareusedtopersonalizethecontentinaccordancewith,your actions on our website;,(iii)performancecookies,whichdonotidentifyyouindividually(untilyouenteryour,identificationdetailsinanyofourforms)buthelpustoevaluatethewebsiteperformanceandits,statistics.
and,(iv)targeting/advertisingcookies,whichhelpadvertiseOWOXoffersandservicesonthe,other sites.,We also use analytics and similar services that collect third-party cookies:,1.GoogleAnalytics,GoogleOptimize,andGoogleAdWords(GooglePrivacyPolicyis,availableathttps://policies.google.com/technologies/ads?hl=en,textandURLmaybechanged,by Google sole discretion),,2.Intercom(IntercomPrivacyPolicyisavailableat,https://www.intercom.com/terms-and-policies#privacy,textandURLmaybechangedby,Intercom sole discretion),,3.Facebook(FacebookPrivacyPolicyisavailableat,https://www.facebook.com/policy.php,textandURLmaybechangedbyFacebooksole,discretion),,4.Twitter(TwitterPrivacyPolicyisavailableathttps://twitter.com/en/privacy,textand,URL may be changed by Twitter sole discretion),,5.LinkedIn(LinkedInPrivacyPolicyisavailableat,https://www.linkedin.com/legal/preview/privacy-policy,textandURLmaybechangedby,LinkedIn sole discretion).,6.Yandex.Metrics(YandexPrivacyPolicyisavailableat,https://yandex.ru/support/legal/confidential/index.html?lang=en,textandURLmaybechanged,at Yandex sole discretion),,7.AdMixer(AdMixerPrivacyPolicyisavailableathttps://sales.admixer.ua/privacy,text,and URL may be changed by AdMixer sole discretion),,8.Zendesk(ZendeskPrivacyPolicyisavailableat,https://www.zendesk.com/company/customers-partners/privacy-policy/,textandURLmaybe,changed by Zendesk sole discretion),,9.Albacross(AlbacrossPrivacyPolicyisavailableat,https://albacross.com/privacy-policy/,textandURLmaybechangedbyAlbacrosssole,discretion),,10.
Other services.,How to reject or delete cookies?,Mostwebbrowsersautomaticallyacceptcookies.However,youdonothavetoaccept,cookiesandyoucan,shouldyouchoosetoatanytime,rejectorblocktheuseofcookiesand,deleteallcookiescurrentlystoredonyourdevice.Youcanfindouthowtodothisforyour,particularbrowserbyclicking“help”onyourbrowser’smenu,orbyvisiting:,www.allaboutcookies.org,http://www.youronlinechoices.com/uk/your-ad-choices,,http://optout.networkadvertising.org/.,However,ifyouturnoffcookies,thefunctionalityofourServicesmaybelimited(i.e.in,thecaseofessentialcookiesyoumaynotbeabletoaccessourwebsites,youraccountand,services).,10.
Links,OWOXwebsitesmaycontainlinkstootherswebsites,whichareownedandoperated,independentlyofOWOX.Therefore,anyinformationyouprovidetothosewebsiteswillbe,governedbytheirownprivacypolicyprinciplesanddatacollectionpractices.OWOXassumes,noresponsibilityorliabilityforinformationhandlingproceduresand/orpoliciesofsuch,independent websites.,11.
Revisions,OWOXmaymakechangestothisPrivacyPolicyfromtimetotime,withouttheadvance,notice and any modifications are effective when they are posted at our website.,OWOXmaymakechangestothisPrivacyPolicyincludingaspartofthenewEuropean,dataprotectionlegislationwhichwillstarttoapplyon25May2018(the“GeneralData,Protection Regulation”) and Privacy Shield program.,12.
Privacy Shield notice,12.1.OWOXcomplieswiththeEU-U.S.PrivacyShieldFrameworkandtheSwiss-U.S.,PrivacyShieldFrameworks(referredtoas“PrivacyShield”)assetforthbytheU.S.Department,ofCommerceregardingthecollection,use,andretentionofpersonalinformationtransferred,fromtheEuropeanUnionand/ortheUnitedKingdomand/orSwitzerlandtotheUnitedStates.,OWOXhascertifiedtotheDepartmentofCommercethatitadherestothePrivacyShield,Principles.IfthereisanyconflictbetweenthetermsinthisPrivacyPolicyandthePrivacyShield,Principles,thePrivacyShieldPrinciplesshallgovern.TolearnmoreaboutthePrivacyShield,program, please visit https://www.privacyshield.gov/.,12.1.QuestionsorComplaintsYoumaydirectanyquestionsorcomplaintsconcerning,ourPrivacyShieldcompliancetodata-protection@owox.comoratourmailingaddress:340S,Lemon Ave Ste 2021 Walnut CA 91789 United States.,Wewillrespondtoyoutoresolveyourissueassoonaspossiblebutinanyeventwithin30,days from receiving your letter.,12.2DisputeResolutionIfyouhavenotreceivedtimelyresponsetoyourconcern,orwe,havenotaddressedyourconcerntoyoursatisfaction,youmayseekfurtherassistance,atnocost,toyou,fromEUDataProtectionAuthoritiesforEU/EEA/UKDataSubjects(availableat,http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm),andthe,SwissFederalDataProtectionandInformationCommissionerforSwissDataSubjects(available,athttps://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/task.html),whichareanindependent,dispute resolution bodies.,12.3.ArbitrationYoumayalsobeabletoinvokebindingarbitrationforunresolved,complaintsbutpriortoinitiatingsucharbitration,aresidentofaEuropeancountryparticipating,inthePrivacyShieldmustfirst:(1)contactusandaffordustheopportunitytoresolvetheissue;,(2)seekassistancefromEUDataProtectionAuthoritiesforEU/EEA/UKDataSubjects,andthe,SwissFederalDataProtectionandInformationCommissionerforSwissDataSubjects;and(3),contacttheU.S.DepartmentofCommerce(eitherdirectlyorthroughaEuropeanDataProtection,Authority)andaffordtheDepartmentofCommercetimetoattempttoresolvetheissue.Ifsucha,residentinvokesbindingarbitration,eachpartyshallberesponsibleforitsownattorney’sfees.,Pleasebeadvisedthat,pursuanttothePrivacyShield,thearbitrator(s)mayonlyimpose,individual-specific,non-monetary,equitablereliefnecessarytoremedyanyviolationofthe,Privacy Shield Principles with respect to the resident.,U.S.FederalTradeCommissionEnforcementOurPrivacyShieldcomplianceissubject,to the investigatory and enforcement powers of the U.S.
Federal Trade Commission (FTC).,13.
Contact information,Questions,commentsandrequestsregardingthisprivacypolicyarewelcomedandshould,be addressed to data-protection@owox.com.,Youmayalsosendyourrequesttoourdataprotectionofficer–MaksymVoloshyn,email:,data-protection@owox.com.,ForEUandEEAcitizens—youmayalsocontactourEUDataRepresentative:OWOX,limited, Boumpoulinas 11, 1st floor, 1060 Nicosia Cyprus.,Statement for the performance of California Consumer Protection Act:,Effective from 01 January 2020,BasedonArticle1278.130CaliforniaConsumerProtectionActweinformyouonthefollowing,actions, performed in the past 12 months:,1.OWOXcollectedthefollowingcategoriesofpersonaldata:personaldata,listedin,paragraph 2 of OWOX Inc Privacy Policy,,2.OWOX did not sell personal data to third parties,,3.OWOXdisclosedforabusinesspurposestoitscontractorsandprocessors:personaldata,,listed in paragraph 2 of OWOX Inc Privacy Policy.,Standard C ontractual C lauses(processors),forthepurposesofArticle26(2)ofDirective95/46/E C forthetransferofpersonaldatatoprocessors,establishedinthirdcountrieswhichdonotensureanadequatelevelofdataprotection,Nameofthedataexportingorganisation:You,whenYouactasan EU-based Controller (or a,Processor for an EU-based Controller)(thedataexporter),And,Nameofthedataimportingorganisation:OWOX,Inc.,withitsregisteredofficeatSuite340S,LemonAveSte2021Walnut C A91789UnitedStates,(thedataimporter),eacha“party”;together,“theparties”,,HAVEA G REEDonthefollowing C ontractual C lauses(the C lauses)inordertoadduceadequate,safeguardswithrespecttotheprotectionofprivacyandfundamentalrightsandfreedomsofindividuals,forthetransferbythedataexportertothedataimporterofthepersonaldataspecifiedinAppendix:,Clause 1.
Definitions,Forthepurposesofthe C lauses:,(a)'personaldata','specialcategoriesofdata','process/processing','controller',,'processor','datasubject'and'supervisoryauthority'shallhavethesamemeaningasin,Directive95/46/ECoftheEuropeanParliamentandoftheCouncilof24October1995,ontheprotectionofindividualswithregardtotheprocessingofpersonaldataandon,the free movement of such data;,(b)'the data exporter' means the controller or processor who transfers the personal data;,(c)'thedataimporter'meanstheprocessorwhoagreestoreceivefromthedataexporter,personaldataintendedforprocessingonhisbehalfafterthetransferinaccordancewith,hisinstructionsandthetermsoftheClausesandwhoisnotsubjecttoathirdcountry's,systemensuringadequateprotectionwithinthemeaningofArticle25(1)of,Directive 95/46/EC;,(d)'thesubprocessor'meansanyprocessorengagedbythedataimporterorbyanyother,subprocessorofthedataimporterwhoagreestoreceivefromthedataimporterorfrom,anyothersubprocessorofthedataimporterpersonaldataexclusivelyintendedfor,processingactivitiestobecarriedoutonbehalfofthedataexporterafterthetransferin,accordancewithhisinstructions,thetermsoftheClausesandthetermsofthewritten,subcontract;,(e)'theapplicabledataprotectionlaw'meansthelegislationprotectingthefundamental,rightsandfreedomsofindividualsand,inparticular,theirrighttoprivacywithrespect,totheprocessingofpersonaldataapplicabletoadatacontrollerintheMemberStatein,which the data exporter is established;,(f)'technicalandorganisationalsecuritymeasures'meansthosemeasuresaimedat,protectingpersonaldataagainstaccidentalorunlawfuldestructionoraccidentalloss,,alteration,unauthoriseddisclosureoraccess,inparticularwheretheprocessinginvolves,thetransmissionofdataoveranetwork,andagainstallotherunlawfulformsof,processing.,Clause 2.
Details of the transfer,Thedetailsofthetransferandinparticularthespecialcategoriesofpersonaldatawhere,applicable are specified in Appendix 1 which forms an integral part of the Clauses.,Clause 3.
Third-party beneficiary clause,1.ThedatasubjectcanenforceagainstthedataexporterthisClause,Clause4(b)to(i),,Clause5(a)to(e),and(g)to(j),Clause6(1)and(2),Clause7,Clause8(2),andClauses,9 to 12 as third-party beneficiary.,2.ThedatasubjectcanenforceagainstthedataimporterthisClause,Clause5(a)to(e),and(g),Clause6,Clause7,Clause8(2),andClauses9to12,incaseswherethedata,exporterhasfactuallydisappearedorhasceasedtoexistinlawunlessanysuccessor,entityhasassumedtheentirelegalobligationsofthedataexporterbycontractorby,operationoflaw,asaresultofwhichittakesontherightsandobligationsofthedata,exporter, in which case the data subject can enforce them against such entity.,3.ThedatasubjectcanenforceagainstthesubprocessorthisClause,Clause5(a)to(e)and,(g),Clause6,Clause7,Clause8(2),andClauses9to12,incaseswhereboththedata,exporterandthedataimporterhavefactuallydisappearedorceasedtoexistinlawor,havebecomeinsolvent,unlessanysuccessorentityhasassumedtheentirelegal,obligationsofthedataexporterbycontractorbyoperationoflawasaresultofwhichit,takesontherightsandobligationsofthedataexporter,inwhichcasethedatasubject,canenforcethemagainstsuchentity.Suchthird-partyliabilityofthesubprocessorshall,be limited to its own processing operations under the Clauses.,4.Thepartiesdonotobjecttoadatasubjectbeingrepresentedbyanassociationorother,body if the data subject so expressly wishes and if permitted by national law.,Clause 4.
Obligations of the data exporter,The data exporter agrees and warrants:,(a)thattheprocessing,includingthetransferitself,ofthepersonaldatahasbeenandwill,continuetobecarriedoutinaccordancewiththerelevantprovisionsoftheapplicable,dataprotectionlaw(and,whereapplicable,hasbeennotifiedtotherelevantauthorities,oftheMemberStatewherethedataexporterisestablished)anddoesnotviolatethe,relevant provisions of that State;,(b)thatithasinstructedandthroughoutthedurationofthepersonaldataprocessing,serviceswillinstructthedataimportertoprocessthepersonaldatatransferredonlyon,thedataexporter'sbehalfandinaccordancewiththeapplicabledataprotectionlawand,the Clauses;,(c)thatthedataimporterwillprovidesufficientguaranteesinrespectofthetechnicaland,organisational security measures specified in Appendix 2 to this contract;,(d)thatafterassessmentoftherequirementsoftheapplicabledataprotectionlaw,the,securitymeasuresareappropriatetoprotectpersonaldataagainstaccidentalorunlawful,destructionoraccidentalloss,alteration,unauthoriseddisclosureoraccess,inparticular,wheretheprocessinginvolvesthetransmissionofdataoveranetwork,andagainstall,otherunlawfulformsofprocessing,andthatthesemeasuresensurealevelofsecurity,appropriatetotheriskspresentedbytheprocessingandthenatureofthedatatobe,protected having regard to the state of the art and the cost of their implementation;,(e)that it will ensure compliance with the security measures;,(f)that,ifthetransferinvolvesspecialcategoriesofdata,thedatasubjecthasbeen,informedorwillbeinformedbefore,orassoonaspossibleafter,thetransferthatits,datacouldbetransmittedtoathirdcountrynotprovidingadequateprotectionwithinthe,meaning of Directive 95/46/EC;,(g)toforwardanynotificationreceivedfromthedataimporteroranysubprocessor,pursuanttoClause5(b)andClause8(3)tothedataprotectionsupervisoryauthorityif,the data exporter decides to continue the transfer or to lift the suspension;,(h)tomakeavailabletothedatasubjectsuponrequestacopyoftheClauses,withthe,exceptionofAppendix2,andasummarydescriptionofthesecuritymeasures,aswell,asacopyofanycontractforsubprocessingserviceswhichhastobemadein,accordancewiththeClauses,unlesstheClausesorthecontractcontaincommercial,information, in which case it may remove such commercial information;,(i)that,intheeventofsubprocessing,theprocessingactivityiscarriedoutinaccordance,withClause11byasubprocessorprovidingatleastthesamelevelofprotectionforthe,personal data and the rights of data subject as the data importer under the Clauses.
and,(j)that it will ensure compliance with Clause 4(a) to (i).,Clause 5.
Obligations of the data importer,The data importer agrees and warrants:,(a)toprocessthepersonaldataonlyonbehalfofthedataexporterandincompliancewith,itsinstructionsandtheClauses;ifitcannotprovidesuchcomplianceforwhatever,reasons,itagreestoinformpromptlythedataexporterofitsinabilitytocomply,in,whichcasethedataexporterisentitledtosuspendthetransferofdataand/orterminate,the contract;,(b)thatithasnoreasontobelievethatthelegislationapplicabletoitpreventsitfrom,fulfillingtheinstructionsreceivedfromthedataexporteranditsobligationsunderthe,contractandthatintheeventofachangeinthislegislationwhichislikelytohavea,substantialadverseeffectonthewarrantiesandobligationsprovidedbytheClauses,it,willpromptlynotifythechangetothedataexporterassoonasitisaware,inwhichcase,the data exporter is entitled to suspend the transfer of data and/or terminate the contract;,(c)thatithasimplementedthetechnicalandorganisationalsecuritymeasuresspecifiedin,Appendix 2 before processing the personal data transferred;,(d)that it will promptly notify the data exporter about:,(i)anylegallybindingrequestfordisclosureofthepersonaldatabyalaw,enforcementauthorityunlessotherwiseprohibited,suchasaprohibitionunder,criminal law to preserve the confidentiality of a law enforcement investigation,,(ii)any accidental or unauthorised access, and,(iii)anyrequestreceiveddirectlyfromthedatasubjectswithoutrespondingtothat,request, unless it has been otherwise authorised to do so;,(e)todealpromptlyandproperlywithallinquiriesfromthedataexporterrelatingtoits,processingofthepersonaldatasubjecttothetransferandtoabidebytheadviceofthe,supervisory authority with regard to the processing of the data transferred;,(f)attherequestofthedataexportertosubmititsdataprocessingfacilitiesforauditofthe,processingactivitiescoveredbytheClauseswhichshallbecarriedoutbythedata,exporteroraninspectionbodycomposedofindependentmembersandinpossessionof,therequiredprofessionalqualificationsboundbyadutyofconfidentiality,selectedby,the data exporter, where applicable, in agreement with the supervisory authority;,(g)tomakeavailabletothedatasubjectuponrequestacopyoftheClauses,oranyexisting,contractforsubprocessing,unlesstheClausesorcontractcontaincommercial,information,inwhichcaseitmayremovesuchcommercialinformation,withthe,exceptionofAppendix2whichshallbereplacedbyasummarydescriptionofthe,securitymeasuresinthosecaseswherethedatasubjectisunabletoobtainacopyfrom,the data exporter;,(h)that,intheeventofsubprocessing,ithaspreviouslyinformedthedataexporterand,obtained its prior written consent;,(i)thattheprocessingservicesbythesubprocessorwillbecarriedoutinaccordancewith,Clause 11;,(j)tosendpromptlyacopyofanysubprocessoragreementitconcludesundertheClauses,to the data exporter.,Clause 6.
Liability,1.Thepartiesagreethatanydatasubject,whohassuffereddamageasaresultofany,breachoftheobligationsreferredtoinClause3orinClause11byanypartyor,subprocessorisentitledtoreceivecompensationfromthedataexporterforthedamage,suffered.,2.Ifadatasubjectisnotabletobringaclaimforcompensationinaccordancewith,paragraph1againstthedataexporter,arisingoutofabreachbythedataimporterorhis,subprocessorofanyoftheirobligationsreferredtoinClause3orinClause11,because,thedataexporterhasfactuallydisappearedorceasedtoexistinlaworhasbecome,insolvent,thedataimporteragreesthatthedatasubjectmayissueaclaimagainstthe,dataimporterasifitwerethedataexporter,unlessanysuccessorentityhasassumedthe,entirelegalobligationsofthedataexporterbycontractofbyoperationoflaw,inwhich,case the data subject can enforce its rights against such entity.,Thedataimportermaynotrelyonabreachbyasubprocessorofitsobligationsinorder,to avoid its own liabilities.,3.Ifadatasubjectisnotabletobringaclaimagainstthedataexporterorthedata,importerreferredtoinparagraphs1and2,arisingoutofabreachbythesubprocessor,ofanyoftheirobligationsreferredtoinClause3orinClause11becauseboththedata,exporterandthedataimporterhavefactuallydisappearedorceasedtoexistinlawor,havebecomeinsolvent,thesubprocessoragreesthatthedatasubjectmayissueaclaim,againstthedatasubprocessorwithregardtoitsownprocessingoperationsunderthe,Clausesasifitwerethedataexporterorthedataimporter,unlessanysuccessorentity,hasassumedtheentirelegalobligationsofthedataexporterordataimporterbycontract,orbyoperationoflaw,inwhichcasethedatasubjectcanenforceitsrightsagainstsuch,entity.Theliabilityofthesubprocessorshallbelimitedtoitsownprocessingoperations,under the Clauses.,Clause 7.
Mediation and jurisdiction,1.Thedataimporteragreesthatifthedatasubjectinvokesagainstitthird-party,beneficiaryrightsand/orclaimscompensationfordamagesundertheClauses,thedata,importer will accept the decision of the data subject:,(a)toreferthedisputetomediation,byanindependentpersonor,whereapplicable,,by the supervisory authority;,(b)toreferthedisputetothecourtsintheMemberStateinwhichthedataexporteris,established.,2.Thepartiesagreethatthechoicemadebythedatasubjectwillnotprejudiceits,substantiveorproceduralrightstoseekremediesinaccordancewithotherprovisionsof,national or international law.,Clause 8.
Cooperation with supervisory authorities,1.Thedataexporteragreestodepositacopyofthiscontractwiththesupervisory,authorityifitsorequestsorifsuchdepositisrequiredundertheapplicabledata,protection law.,2.Thepartiesagreethatthesupervisoryauthorityhastherighttoconductanauditofthe,dataimporter,andofanysubprocessor,whichhasthesamescopeandissubjecttothe,sameconditionsaswouldapplytoanauditofthedataexporterundertheapplicable,data protection law.,3.Thedataimportershallpromptlyinformthedataexporterabouttheexistenceof,legislationapplicabletoitoranysubprocessorpreventingtheconductofanauditofthe,dataimporter,oranysubprocessor,pursuanttoparagraph2.Insuchacasethedata,exporter shall be entitled to take the measures foreseen in Clause 5 (b).,Clause 9.
Governing Law,The Clauses shall be governed by the law of the Member State in which the data exporter is,established.,Clause 10.
Variation of the contract,The parties undertake not to vary or modify the Clauses.
This does not preclude the parties from,adding clauses on business related issues where required as long as they do not contradict the,Clause.,Clause 11.
Subprocessing,1.Thedataimportershallnotsubcontractanyofitsprocessingoperationsperformedon,behalfofthedataexporterundertheClauseswithoutthepriorwrittenconsentofthe,dataexporter.WherethedataimportersubcontractsitsobligationsundertheClauses,,withtheconsentofthedataexporter,itshalldosoonlybywayofawrittenagreement,withthesubprocessorwhichimposesthesameobligationsonthesubprocessorasare,imposedonthedataimporterundertheClauses.Wherethesubprocessorfailstofulfil,itsdataprotectionobligationsundersuchwrittenagreementthedataimportershall,remainfullyliabletothedataexporterfortheperformanceofthesubprocessor's,obligations under such agreement.,2.Thepriorwrittencontractbetweenthedataimporterandthesubprocessorshallalso,provideforathird-partybeneficiaryclauseaslaiddowninClause3forcaseswherethe,datasubjectisnotabletobringtheclaimforcompensationreferredtoinparagraph1of,Clause6againstthedataexporterorthedataimporterbecausetheyhavefactually,disappearedorhaveceasedtoexistinlaworhavebecomeinsolventandnosuccessor,entityhasassumedtheentirelegalobligationsofthedataexporterordataimporterby,contractorbyoperationoflaw.Suchthird-partyliabilityofthesubprocessorshallbe,limited to its own processing operations under the Clauses.,3.Theprovisionsrelatingtodataprotectionaspectsforsubprocessingofthecontract,referredtoinparagraph1shallbegovernedbythelawoftheMemberStateinwhich,the data exporter is established.,4.Thedataexportershallkeepalistofsubprocessingagreementsconcludedunderthe,ClausesandnotifiedbythedataimporterpursuanttoClause5(j),whichshallbe,updatedatleastonceayear.Thelistshallbeavailabletothedataexporter'sdata,protection supervisory authority.,Clause 12.
Obligation after the termination of personal data processing services,1.Thepartiesagreethatontheterminationoftheprovisionofdataprocessingservices,,thedataimporterandthesubprocessorshall,atthechoiceofthedataexporter,returnall,thepersonaldatatransferredandthecopiesthereoftothedataexporterorshalldestroy,allthepersonaldataandcertifytothedataexporterthatithasdoneso,unless,legislationimposeduponthedataimporterpreventsitfromreturningordestroyingall,orpartofthepersonaldatatransferred.Inthatcase,thedataimporterwarrantsthatit,willguaranteetheconfidentialityofthepersonaldatatransferredandwillnotactively,process the personal data transferred anymore.,2.Thedataimporterandthesubprocessorwarrantthatuponrequestofthedataexporter,and/orofthesupervisoryauthority,itwillsubmititsdataprocessingfacilitiesforan,audit of the measures referred to in paragraph 1.,Appendix1totheStandard C ontractual C lauses,Data exporter is: providing personal data to the data importer necessary for the provision of,services by the data importer to the data exporter.,Data importer is: processing personal data of the data exporter in accordance with the,instructions of the data exporter in order to deliver services to the data exporter.,Data subjects,The personal data transferred concern the following categories of data subjects: Natural persons,employed or otherwise engaged by the data exporter, customers of the data exporter and,other users of data exporter products or services, employees of the data exporter,Categories of data,The personal data transferred concern the following categories of data: Names, email address,,phone number, username, cookies, IP address, first name, last name, subscription,information.,Special categories of data (if appropriate),The personal data transferred concern the following special categories of data (please specify):,N/A,Processing operations,The personal data transferred will be subject to activities necessary to provide the data exporter,with products and services, such as: collection.
recording.
organisation.
structuring.
storage;,adaptation or alteration.
retrieval.
consultation.
use.
disclosure by transmission.
dissemination or,otherwise making available.
alignment or combination.
restriction.
erasure or destruction.,Appendix2totheStandard C ontractual C lauses,Description of the technical and organisational security measures implemented by the data,importer in accordance with Clauses 4(d) and 5(c) (or document/legislation attached):,Data importer shall implement technical and organisational measures specified in Privacy Policy.