Article 27 GDPR Representative

Important

This notice is provided in connection with the General Data Protection Regulation (EU) 2016/697 ("GDPR") and the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 ("UK Privacy Law") and only applies to individuals who can enforce the relevant law.

Respecting your Privacy

Our Privacy Policy sets out the details of how we use, process, transfer and disclose personal data. We encourage you to read it. The notice sets out the essential details that apply to the personal data that we are collecting from you at the moment.

Who is Processing your Personal Data

The controller for this personal data is "Juksta" who is:

  • Juksta GDPR Representative Service Limited of 22 Northumberland Ave, Ballsbridge, Dublin 4, Ireland D04 ED73 where you have indicated that you are contacting us in connection with a matter that is subject to GDPR; or
  • Juksta UK Representative Service Limited of 7 Belly Yard LONDON WC2A 2JR, where you have indicated that you are contacting us in connection with a matter that is subject to UK Privacy Law.

How we are using it

We are collecting the personal data that is required by this website and that you are including in our web form at this time for the primary purpose of entering into a contract with you (or the person that you represent), for the on-going administration of that contract and the provision to you (or the person you represent) of Representative services under Article 27 of GDPR or UK Privacy Law, as applicable.

We collect and process this information on the lawful basis of our legitimate interest in connection with entering into and the on-going administration of that contract with us, and for the lawful purpose of complying with a lawful obligation for you (or the person you represent) to comply with GDPR or UK Privacy Law, as applicable.

What we do with it

Juksta will process your personal data in Ireland, and/or may authorise other Juksta group companies, and their contractors, to process your personal data in Australia, any other EU countries and/or the United States.

Where your personal data is transferred to:

  • a country outside of the EU (where you are dealing with Juksta GDPR Representative Limited); or
  • a country that is outside of the United Kingdom, (where you are dealing with Juksta UK Representative Limited),

we will use our best efforts to ensure that it is transferred and processed in accordance with legal requirements, and use contractors who have represented to us that they comply with required privacy law, and/or are bound by approved Model Clauses of clauses that reflect Article 30 of GDPR or UK Privacy Law (as applicable).

The primary third party processors for Juksta GDPR Representative Limited are:

Amazon Web Services Inc.
Location
USA
Description of processing
Cloud Service Provider.
DPO, Representative or Contact Information
Please contact via aws.amazon.com website
Location of Subprocessor's Processing
Ireland
Category of Personal Data Processed by the Subprocessor
Contact Information, e.g. Name, Position, Place of work, Telephone number(s) and Email address(es), nationality of our customers and customer data subjects.
Identification Document (ID) metadata including document type, nationality of document, expiry date and digital copy.
Data request information including type of request and request details.
Any other data provided by our customer and customer data subjects.
Category of Personal Data Processed by the Subprocessor
Current, past and potential business customers.
Current, past and potential Data subjects of our customers.
Additional Information
AWS provide a Data Processing Addendum (DPA) as part of their terms of service agreement. You can review this document at AWS GDPR Data Processing Addendum.
For additional information on technical and organisational security measures please see AWS GDPR Center
Facebook
Location
USA
Description of processing
Social media platform
DPO, Representative or Contact Information
See facebook contact URL for DPO contact information
Location of Subprocessor's Processing
USA, EU and other locations, as specified at Facebook URL.
Category of Personal Data Processed by the Subprocessor
Contact information. e.g. Name, place of work, position, address, date of birth, photos, telephone number(s) and email address(es), website browsing history and internet usage.
Any other data provided by the Data Subject.
Category of Personal Data Processed by the Subprocessor
Current, past and potential business customers.
Current, past and potential Data subjects of our customers.
Additional Information
Facebook includes a data processing addendum (DPA) as part of their terms of service agreement.
For additional information on technical and organisational security measures please see Facebook GDPR portal.
Google Adwords
Location
USA
Description of processing
Cloud based adversiting platform
DPO, Representative or Contact Information
Please contact via google website
Location of Subprocessor's Processing
USA and other locations, as specified at Google URL.
Category of Personal Data Processed by the Subprocessor
Contact information. e.g. Name, place of work, position, telephone number(s) and email address(es), website browsing history and internet usage.
Any other data provided by the Data Subject.
Category of Personal Data Processed by the Subprocessor
Current, past and potential business customers.
Current, past and potential Data subjects of our customers.
Additional Information
A Data processing agreement exists between Juksta GDPR Representative Limited and Google Adwords. You can review that agreement here.
For additional information on technical and organisational security practices please see here.
Google Analytics
Location
USA
Description of processing
Cloud based analytics platform
DPO, Representative or Contact Information
Please contact via google website
Location of Subprocessor's Processing
USA and other locations, as specified at Google URL.
Category of Personal Data Processed by the Subprocessor
Contact information. e.g. IP Address, website browsing history and internet usage.
Any other data provided by the Data Subject.
Category of Personal Data Processed by the Subprocessor
Current, past and potential business customers.
Current, past and potential Data subjects of our customers.
Additional Information
A Data processing agreement exists between Juksta GDPR Representative Limited and Google Analytics. You can review that agreement here.
For additional information on technical and organisational security practices please see here.
Microsoft Office 365 (Microsoft Inc.)
Location
USA
Description of processing
Cloud based collaboration platform
DPO, Representative or Contact Information
Please see website Microsoft Data Protection Officer (DPO) page for contact details
Location of Subprocessor's Processing
Hong Kong, Ireland, Netherlands, Singapore, United States
Category of Personal Data Processed by the Subprocessor
Contact Information, e.g. Name, Position, Place of work, Telephone number(s) and Email address(es) of our customers and customer data subjects.
Any other data provided by our customer and customer data subjects.
Category of Personal Data Processed by the Subprocessor
Current, past and potential business customers.
Current, past and potential Data subjects of our customers.
Additional Information
Microsoft Office includes a data processing addendum (DPA) as part of their terms of service agreement. You can review this and at Microsoft Accountability Documentation page.
For additional information on technical and organisational security measures please see Microsoft GDPR portal.
Sendgrid
Location
USA and UK
Description of processing
Email delivery service.
DPO, Representative or Contact Information
Sendgrid Data Privacy Officer (DPO) contact information is available at https://sendgrid.com/policies/privacy/services-privacy-policy/#how-to-contact
Location of Subprocessor's Processing
USA
Category of Personal Data Processed by the Subprocessor
Contact Information, e.g. Name and Email address(es) of our customers and customer data subjects.
Data request information including type of request and request details.
Any other data provided by our customer and customer data subjects.
Category of Personal Data Processed by the Subprocessor
Current, past and potential business customers.
Current, past and potential Data subjects of our customers.
Additional Information
A Data processing agreement exists between Juksta GDPR Representative Limited and Sendgrid (a subsiduary of Twilio). You can review that agreement here.
For additional information on technical and organisational security measures please see Sendgrid GDPR Information

How long we keep it

We keep the personal data that you give to us through this sign up webpage whilst we have an on-going relationship with you, for a reasonable period afterwards (but not longer than 7 years for this reason) and for any additional period that we are required to do so under the law of the jurisdiction in which the personal data is kept. After this period, this personal data will be automatically and permanently destroyed.

What are your rights?

You have the following rights under GDPR or UK Privacy Law (although certain limitations or exceptions may apply under each law), including the right to:

  • know what personal data we hold on you;
  • have any of your personal data erased, rectified or supplemented where it is unnecessary, inaccurate, out of date or incomplete;
  • object to the processing of your personal data;
  • require us to suspend processing your personal data for a period of investigation, and/or stop processing your personal data where the processing is unlawful, if you contest:
    • the accuracy of your personal data;
    • whether your personal data is not being processed lawfully;
    • whether our legitimate grounds for processing override yours;
    • whether there is any need for us to continue to process it;
  • where our lawful basis of process is having obtained your consent, you may require us to stop processing your personal data at any time;
  • the right to require us to stop direct marketing to you (there is no exception to this right); and
  • have a copy of your personal data for the portability purposes;

In situations where our processing is unlawful and you oppose the erasure of the personal data you may request the restriction of the use instead.

If you wish to exercise any of these rights please contact us through the Contact Us web form on our website (https://www.juksta.eu/contact).

In the event that you wish to complain about how we have handled your personal data, please contact our Privacy Officer at privacy@juksta.eu or in writing at the address set out above. Our Privacy Officer will then look into your complaint and work with you to resolve the matter.

Where you are dealing with Juksta GDPR Representative Limited, you also have the right to complain to Supervisory Authority who can be contacted at:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland
www.dataprotection.ie

Where you are dealing with Juksta UK Representative Limited, you also have the right to complain to Information Commissioner who can be contacted at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
www.ico.org.uk
Copyright © 2019 - 2020 Juksta Pty Ltd. All rights reserved.