We care about your data protection, its security and confidentiality. This Privacy policy (hereinafter – “Privacy policy”) states how SIA Wandoo Finance (hereinafter – “us”, “we”) as data controller will process your personal data when you visit our website, sign up to our newsletter or contact us
Personal data processed, purpose of processing and legal basis
If you have signed up to our newsletter and provided your consent, we will process your e-mail address to send you our news and updates.
Additionally, if you have given your consent, we may process your name, surname and email address to send you information on our investments and any other information, which you may be interested in as an investor or potential investor.
Please note that you may withdraw your consent at any time, by clicking on the unsubscribe link in each e-mail footer as well as by contact us.
Our website uses cookies and similar technology such as web pixels. If you have provided your consent, in addition to the cookies, which ensure website functionality, we may collect analytical data. For further information, please see our Cookie Policy.
Based on our legitimate interests to ensure our network security, monitor our webpage, and improve its functionality, we also collect technical usage data, such as information on your device and browser, IP address and other information required for this purpose.
Data retention
We will process your personal data as long as any of the above-mentioned data processing purposes or legal basis are still valid. For example, if you withdraw your consent, we will cease the processing of personal data, which has been based on your prior consent.
Dispute resolution and complaints
We would like to resolve any dispute in a friendly manner. Therefore, if you believe that processing of personal data conducted by us is not in compliance with the GDPR or other applicable laws on personal data protection, we encourage you to submit us your complaint, using the information indicated in this Privacy Notice. We will do our best to resolve the matter as soon and effective as possible. However, you can always submit a complaint to the DSI.
Data transfer
If reasonably required, we may share your personal data with third-party service providers, who provide us with e-mail and content delivery services, legal, IT and data hosting services or provide us any other support for the purposes set out in this Privacy policy.
When we share your personal data with third-party service providers, we comply with the applicable data protection legal norms, specifically:
- We transfer only the minimum amount of data necessary for a particular third-party service provider;
- We only cooperate with service providers who can provide and ensure adequate level of personal data protection;
- If the service provider acts as our data processor, it may only process personal data in accordance with our instructions, on the basis of a written agreement, and may not use it for other purposes.
We mainly process personal data within the EU/EEA. However, in course of our business activities information (including personal data) may be transferred outside EU/EEA. In this case we will ensure that all GDPR requirements on transfers of persona data outside the EU/EEA are complied with. You can receive more detailed information on this matter by addressing us using the contact information provided herein.
Your rights
As a data subject you have the rights, which are provided by the GDPR and other legal acts. These rights provide that you can:
- Ascertain what information we process about you, access that information and ask for clarification on data processing; correct false or inaccurate data;
- Correct false or inaccurate data;
- Withdraw your consent to the processing of data based such consent. Please be aware that the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal;
- Ask to delete your data. Please note that there may be circumstances where we may be legally entitled to retain your personal data;
- Object to the processing of data, which is processed based on our legitimate interests. In the event of such an objection, we will no longer process your personal data, unless we will demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
To exercise these rights, please contact us using the e-mail address indicated in this Privacy policy. We will process this request within 30 days and provide an answer.
Security
As We use appropriate technical (including physical and logical) and organizational measures to protect personal data and other information that we collect and store against accidental or unlawful destruction, loss, alteration, disclosure, access. For example, by limiting access to our premises, using encryption, managing access rights, using secure processors and other partners, raising awareness on personal data protection and security matters of our staff, etc.
Dispute resolution and complaints
We would like to resolve any dispute in a friendly manner. Therefore, if you believe that processing of personal data conducted by us is not in compliance with the GDPR or other applicable laws on personal data protection, we encourage you to submit us your complaint, using the information indicated in this Privacy Notice. We will do our best to resolve the matter as soon and effective as possible. However, you can always submit a complaint to the DSI.
The version of this Privacy policy is effective as of 24 April 2023.