Privacy policy
This Privacy Policy sets out the terms on which we process your personal data you provide to Us in the course of using the TEQ™SHOP (the online store available at: https://www.teqshopcanada.ca
as well as our privacy obligations to you.
I. Policy-Specific Definitions
In addition to the terms already defined in the “TEQ™SHOP General Terms & Conditions” (available at: https://www.teqshopcanada.ca/terms-and-conditions), data processing terms, whether or not they are capitalized, shall be defined as in the General Data Protection Regulation
II. Data Controller
The data controller for your personal data is, unless otherwise specified:
TEQBALL CANADA Inc., a company registered in Canada at the Canada Business Corporation Act, under registry n° 1347469-8, having its registered seat at 140 Redstone Road Richmond Hill ON, L4S 1T9 Canada with CRA n° 768664104RC0001 (hereinafter referred to as ”Data Controller”/”We”/”Us”/”Our”, whether capitalized or not).
III. Data Processing Purposes & Legal Basis
Your personal data is processed for the purposes and according to the methods defined in the tables below, depending on the category of data and/or your relationship to us.
1) Customer Account Data
If you register to the TEQ™SHOP, your customer account data is processed as described in the table below:
|
Your Data
|
When / Where Collected
|
Our Use
|
Your Benefit
|
Legal Basis
|
||
| Account data provided at the moment of registration: | On the registration form | Operation of the website, easier processing of orders | Improved user experience due to faster checkout, easier order tracking | Consent | . |
|
| Contact information: name, e-mail address | ||||||
| Optional account data provided following registration: | On the “My account” page, under the “Address” menu | |||||
|
Shipping information: phone number, shipping address
|
||||||
|
Billing information (if different from shipping information): phone number, billing address
|
2) Order data
|
Your Data
|
When/Where Collected
|
Our Use
|
Your Benefit
|
Legal Basis
|
||
|
Contact Information: name; e-mail address (if you are not a registered user)
|
order placement / checkout
|
to perform order, ability to keep contact and provide all necessary information related to the purchase
|
ability to receive all necessary information related to the purchase, able to buy
|
|
|
|
|
Shipping Information: name; phone number; shipping address (if not provided earlier as account data)
|
processing the order and executing delivery
|
receiving the purchased TEQ Products and exercising your rights with regard to delivery
|
|
|||
|
Billing Information (if different from Shipping Information): name, phone number, billing address (if not provided earlier as account data)
|
processing the order and invoicing
|
receiving the invoice as requested and in accordance with applicable legal provisions
|
||||
|
Order history
|
Order history is recorded only for Customers with a registered customer account, and is displayed on the customer account. The order history is automatically created and extended by placing the order(s).
|
Keeping track of Customer’s orders to enable and facilitate the handling of related inquiries, complaints, and other claims or proceedings.
|
Ability to keep track of current and former orders; thus enabling and facilitating the submission of inquiries, complaints, other claims, and the commencement of relevant proceedings.
|
|
|
|
3) Payment data
Your credit card information used for online payment for your purchase is neither recorded nor processed in any way by the Data Controller. The online payment service is provided by: ?
The abovementioned payment service providers act independently of the Data Controller. Upon finishing checkout, depending on the type of payment chosen (lump sum), you are redirected to a page operated by the adequate payment service provider enabling you to effectuate payment. The Data Controller only receives a notification from these service providers that payment has been duly effectuated or that it was unsuccessful. The payment service providers do not transfer any of your credit card information to the Data Controller, and therefore, the Data Controller does not assume any liability for the data processing of the above mentioned service providers. For further information on the payment service providers’ processing of your payment related personal data, please visit their websites as noted above.
IV. YOUR RIGHTS
You have the following rights in relation to your personal data:
1) Right to access
You have the right to request access to your personal data and obtain information regarding the purpose of processing, what categories of personal data are processed, data processors, length of processing, your rights relating to our processing, your right to lodge a complaint with a supervisory authority regarding our processing, information on third party sources of your personal data communicated to us, and the existence of automated decision-making and related information, including the logic involved, as well as the significance and the envisaged consequences of such processing for you, whether your personal data is transferred outside the EEA, and the conditions of these transfers.
2) Right to rectification
You have the right to obtain rectification of inaccurate personal data and, taking into account the purposes of the processing, to have incomplete personal data completed.
3) Right to erasure
You have the right to request erasure of your personal data without delay if:
- your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- you withdraw your consent and there is no other legal grounds for processing;
- you object to the processing pursuant to paragraph 5) below and there are no overriding legitimate grounds for the processing;
- your personal data has been processed unlawfully;
- your personal data has to be erased for compliance with a legal obligation;
Please note that the above right to erasure does not apply to the extent that processing is necessary:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller
- for reasons of public interest in the area of public health
- for achieving purposes in the public interest, scientific or historical research purposes or statistical purposes in so far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
- for the establishment, exercise or defense of legal claims.
4) Right to restrict processing
You have the right to restrict processing of your personal data if:
- you have contested the accuracy of your personal data, for a period enabling us to verify the accuracy of your personal data;
- the processing is unlawful and you oppose the erasure of your personal data and request the restriction of its use instead;
- we no longer need the personal data for the purposes for which they were collected, but they are required by you for the establishment, exercise or defense of legal claims
- you have objected to the processing of your personal data pursuant to paragraph 5) below, pending the verification whether our legitimate grounds override those of yours.
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest.
5) Right to object to processing
Where personal data is processed based on legitimate interest, you have the right to object, at any time, to the processing of your personal data, on grounds relating to your particular situation.
6) Right to data portability
Where personal data is processed based on your consent or in order to perform a contract, you have the right to receive the personal data in our possession or control in a structured, commonly used and machine-readable format, and have the right to transmit that data to another data controller without hindrance from us. You also have the right to have your personal data transmitted directly from us to another data controller, where technically feasible.
7) Right to withdraw your consent
You have the right to withdraw any consent to data processing at any time. Such withdrawal does not affect the lawfulness of processing based on your consent before its withdrawal. The costs incurred by Data Controller due to such withdrawal of consent shall be borne by you.
8) Rights related to automated decision making including profiling
No automated decision making is carried out based on your data.
V. DATA SECURITY
The Data Controller takes appropriate technical and organizational security precautions to protect your personal data against manipulation, loss and destruction, as well as against access by unauthorized third parties, and to ensure the protection of your rights and adherence to the applicable data protection laws and regulations. However, you are kindly reminded that the internet is an open, global network. When you transmit personal data to us via the internet, you are deemed to accept the unavoidable risks associated therewith. Despite the technical and organization security measures implemented by the Data Controller, data can get lost or be intercepted and/or manipulated by unauthorized third parties. WE DECLINE ALL LIABILITY RELATING TO LOSS OR CORRUPTION OF YOUR PERSONAL DATA DUE TO SUCH LOSS, INTERCEPTION AND/OR MANIPULATION OF YOUR DATA, AND ANY CONSEQUENCE THEREOF, unless we have breached the standards of care required of data controllers in the EU.