EUROPEAN PRIVACY NOTICE

Last modified: May 15, 2023

This European Privacy Notice supplements the information contained in our Privacy Policy and applies solely to individual residents that are located in the United Kingdom, Switzerland, and the European Economic Area (“Europe”).

Unless otherwise expressly stated, all terms have the same meaning as defined in our Privacy Policy or as otherwise defined in the EU General Data Protection Regulation 2016/679 of the European Parliament and of the Council (“GDPR”).

For the purposes of European data protection laws, including the GDPR, TicTuk is the controller of your personal information. This European Privacy Notice only applies to our processing of your personal information and does not apply to the processing of your personal information by our business customers.

Legal basis for processing in Europe: In Europe, the purposes for which we process your personal information are:

1) the provision of personal information by you may be necessary for the performance of any contractual relationship we have with you;

2) where it is necessary for compliance with our legal obligations laid down by European law;

3) where in our legitimate interests (provided these are not overridden by your interests and fundamental rights and freedoms – this includes our own legitimate interests and those of other entities and branches in our group of companies) such as:

a. to contact you and respond to your requests and enquiries;

b. for business administration, including statistical analysis;

c. to provide the Site to you;

d. for fraud prevention and detection; and

e. to comply with applicable laws, regulations or codes of practices.

We may also process your personal data on the basis of your freely given, specific, informed and unambiguous consent. You should be aware that you are entitled under Data Protection Law to withdraw your consent where that has been given, at any time. If you do this and we have no alternative lawful reason to process your personal data, this may affect our ability to provide you with rights to use the Services.

Please see the table at Annex 1 which sets out in detail the categories of personal information we collect about you and how we use that information when you use the Services, as well as the legal basis which we rely on to process the personal information and recipients of that personal information.

In addition, the table at Annex 2 sets out in detail the categories of personal information we collect about you automatically and how we use that information. The table also lists the legal basis which we rely on to process the personal information and recipients of that personal information.

Data storage and transfer outside Europe: If you are located in Europe, your information that we collect through our Services will be stored and processed primarily in Europe. Your personal information may be transferred and stored outside your place of residence, to countries which are subject to different standards of data protection. In particular, if you live in Europe, you should be aware that your personal information may be shared with, and transferred to, us and third-party service providers who are located outside Europe. We will take appropriate steps to ensure that transfers of personal information are in accordance with applicable law and carefully managed to protect your privacy rights and interests and transfers are limited to countries which are recognized as providing an adequate level of legal protection or where we can be satisfied that alternative arrangements are in place to protect your privacy rights. To this end:

we will ensure that transfers within our group companies and affiliates are covered by an intra-group agreement which contractually obliges each member to ensure that personal information receives an adequate and consistent level of protection wherever it is transferred within our group;
where we transfer your personal information outside TicTuk or to third parties who help provide our Services, we will obtain contractual commitments from them to protect your personal information; and
where we receive requests for information from law enforcement or regulators, we will carefully validate these requests before personal information is disclosed.

You have a right to contact us for more information about the safeguards we have put in place (including a copy of relevant contractual commitments) to ensure the adequate protection of your personal information when this is transferred as mentioned above.

Individual rights of European residents: If you are located in Europe, you have the following rights in respect of your personal information that we hold:

Right to object. You have a right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. You can object to marketing activities for any reason whatsoever.
Right of access. You have the right to obtain access to your personal information.
Right to rectification. You have the right to obtain rectification of your personal information without undue delay where that personal information is inaccurate or incomplete.
Right to erasure. You have the right to obtain the erasure of your personal information without undue delay in certain circumstances, such as where the personal information is no longer necessary in relation to the purposes for which it was collected or processed.
Right to restriction. You have the right to obtain the restriction of the processing undertaken by us on your personal information in certain circumstances, such as where the accuracy of the personal information is contested by you, for a period enabling us to verify the accuracy of that personal information.
Right to portability. You have the right to portability allows you to move, copy or transfer personal information easily from one organization to another.

If you wish to exercise one of these rights, please contact us using the contact details at the end of this Notice.

You also have the right to lodge a complaint to your local data protection authority. Further information about how to contact your local data protection authority is available at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

HOW TO CONTACT US

If you have any questions about this Notice or the Services, please contact us at toinfo@tictuk.com.