By using the Site, you agree to allow us to collect and process information as described below, even if that includes sensitive data.
2. ROLES AND PURPOSE
NanoMatriX is the data controller for your Personal Information.
The purpose of processing your Personal Information is to enable and enhance the use of the Site, including enabling additional services and functionality. What that means in terms of what data we collect and process, how and where we process it, and for how long, is described below.
It is important that you read this, as you by taking the Site into use, gives us and our partners your consent to process your Personal Information.
3. LEGAL BASIS FOR PROCESSING
The legal basis for the processing of Personal Information is your consent and data protection law.
Your Personal Information is processed in accordance with the Hong Kong SAR implementation of Personal Data (Privacy) Ordinance (Cap. 486) and best practices described in the General Data Protection Regulation (“GDPR”) (EU) 2016/679. This gives you strong rights as a data subject. Hereunder you have the right to:
- have your Personal Information deleted
- have any incorrect Personal Information corrected
- information from us, as data controller, regarding the data processing
Hong Kong law applies. Exclusive legal venue is Hong Kong SAR.
Any surrender of data is voluntary, but some basic information is needed to enable the Site to operate.
4. COLLECTED PERSONAL INFORMATION
If you register with NanoMatriX through the Site, NanoMatriX collects and processes the following information from you:
- Name, job title, physical and email addresses; and
- phone number.
In addition, NanoMatriX, through the Site, automatically collects and processes general data from your computer or mobile device, such as your web browser type and version, and operating system of your computer.
We may process this Personal Information for purposes of operating, debugging, maintaining, improving, and optimizing the Site, marketing, and/or to maintain customer relationships. NanoMatriX performs analysis of the data, for the above purposes and also for the purpose of providing its business partners access to relevant data.
You consent to the above described collection and processing of Personal Information.
5. WHERE WE PROCESS PERSONAL INFORMATION
The Personal Information we collect from you may be transferred to and computer processed on servers placed in:
- the United States,
- Singapore and
- Hong Kong
depending on your location, and the Site instance to which you connect.
The data is stored on servers belonging to Amazon.com, Inc., Seattle, Washington, USA and Google Inc., Mountain View, California, USA. These companies are certified under the EU US Privacy Shield framework. The EU Commission deems transfer of data to companies certified under the framework to offer adequate protection of personal data (more info).
The processing is conducted by personnel that may be located in Hong Kong, Germany and Singapore. You consent to the above described transfer and processing of Personal Information.
6. DATA SHARING
NanoMatriX does not share Personal Information for any commercial or marketing purpose unrelated to the delivery of NanoMatriX services without asking you first.
The following are the situations where we may share Personal Information:
- With your explicit consent: We may share Personal Information when we have your consent. One example of this would be if you sign up for additional programs offered by our partners. If you do this, we may share certain information with the partner.
- For external processing: We have vendors, service providers, and partners who may help with some of our data processing and storage, including customer support services at our partners. They may also assist with monitoring our servers for technical reasons. These vendors (as well as NanoMatriX personnel) can access certain information about you and your account in order to carry out their work. Such vendors are not allowed to use this data for non-NanoMatriX purposes.
- For legal reasons: We may provide information to a third party if we believe in good faith that we are required to do so for legal reasons. For example, to respond to legal process, or comply with Hong Kong law.
- We may share non-Personal Information (for example, aggregated or anonymized customer data) publicly and with our partners. For example, we may publish research, or help us generally improve our system. We may also share non-Personal Information with our partners, for instance if they are interested in offering other services on the Site. We take steps to keep this non-Personal Information from being associated with you and we require our partners to do the same.
- You consent to the above described sharing of Personal Information.
7. SECURITY OF PERSONAL INFORMATION
NanoMatriX has implemented various physical, electronic and procedural safeguards to protect the confidentiality and security of Personal Information under our control. For instance, NanoMatriX limits access to NanoMatriX systems that store such information to authorized personnel. NanoMatriX also employs the Transport Layer Security (TLS) protocol to protect your Personal Information.
NanoMatriX will maintain your Personal Information for as long as a business need exists, or as required by applicable laws, regulations, or government orders. When we dispose of Personal Information, we use commercially reasonable procedures to erase or render it unreadable.
NanoMatriX restricts its personnel from processing user data without authorization by NanoMatriX. NanoMatriX will impose appropriate contractual obligations upon its personnel, including relevant obligations regarding confidentiality, data protection and data security.
NanoMatriX will not disclose any Personal Information to any government, except as necessary to comply with the law or a valid and binding order of a law enforcement agency.
8. YOUR DATA AND YOUR RIGHTS
If you are an EU resident and you, have provided Personal Information to us, then you have the right to make a request to see the Personal Information that we reatin.
If you wish to submit a request to obtain your Pesonal Information, please do so by contacting firstname.lastname@example.org with the subject line ‘Subject Access Request’or by writing to NanoMatriX, 18/F, Unit 6 & 7, Workingfield Commercial Building 408-412 Jaffe Road, Wanchai, Hong Kong.
You also each have the right to ask NanoMatriX:
- Provide you with the personal data that we hold about you. This data may be passed onto a third party by you, or you can request us to pass this information to a third party on your behalf.
- You may request for us to erase the data we hold about you. This can be done by request through contacting the email address: email@example.com, with the subject line ‘Erase Personal Data’.
If any of your data is incorrect, you may rectify it
8. CHANGES TO THIS POLICY
If you have any questions regarding the terms of this policy, please contact NanoMatriX by sending an email to firstname.lastname@example.org or by writing to NanoMatriX, 18/F, Unit 6 & 7, Workingfield Commercial Building 408-412 Jaffe Road, Wanchai, Hong Kong.
Effective as of August 18, 2018