PRIVACY POLICY
WE RESPECT YOUR PRIVACY
Astaria Ascension Ltd.
Privacy
Introduction
Welcome to the Privacy Policy of Astaria Ascension Ltd.
We respect your privacy and we are committed to protect your personal data. This privacy policy tells you about how we take care of your personal data when you visit our website (regardless of where you are visiting it from), what are your legal rights and how the law protects you.
This policy contains important information about who we are and about how and why we collect, store, use, and share your personal information. It explains your rights in relation to your personal data and also how to contact us or supervisory authorities if you have a complaint.
We collect, use and are responsible for certain personal information about you. In such a case we are subject to data protection laws that apply in the whole European Union and in the United Kingdom, and for the purposes of those laws we are the “controller” of that personal data and we are responsible in this manner.
By providing your details you guarantee us that you are over 18 years old.
- Important information and who we are
The purpose of this Privacy Policy
The purpose of this Privacy Policy is to provide you with information about how we collect and process your personal information via your use of this website, including any information you may provide through this website when you [fill in our contact form], [subscribe to receive any information from us], [purchase a product or service] [or] [enter a competition].
This website is not intended for children and our company does not deliberately collect information about children.
It is important that you read this Privacy Policy together with any other Privacy Policy or notice of regular processing, which we may provide in specific cases when we collect or process your personal data, so you are fully aware how and why we use your personal data. This Privacy Policy complement but does not supersede other policies and notices.
Data controller
Astaria Ascension, Ltd. (hereinafter referred to as "we", "us" or "our") is the controller of personal data and is responsible for your personal data.
If you have questions regarding this Privacy Policy, including all of the requirements to exercise your legal rights, please contact us using the contact details below.
Contact details
If you have any questions about this Privacy Policy or our data protection practices, please contact us. Our contact details are:
Full name of the legal entity: Astaria Ascension Ltd.
Name of a person to be contacted: Vendula Zajicova
Email: support@astariaascension.com
Contact address: 219 Kensington High Street, London, W86BD, UK
You have a right to lodge a complaint at any time with the Information Commissioner's Office (ICO), the UK's data protection supervisory office (www.ico.org.uk). However, we care deeply about your data protection rights and we would appreciate the opportunity to address your concerns, so please contact us using the above details at first instance before contacting the ICO.
Your obligation to inform us of changes
It is important that the personal data we hold about you is accurate and up to date. Please notify us if your personal information changes during your relationship with us.
Third Party Links
This website may contain links to third-party websites, add-ons, and applications. By clicking on these links or enabling these connections, you may allow third parties to collect or share your personal data. We do not control these third-party websites and are not responsible for their Privacy Policy. When you leave our website, we encourage you to read the Privacy Policy or notice of each website you visit.
Data about you we collect
Personal data or personal information means any information about an individual that can be used to identify the individual. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store, and transfer different types of personal data about you, which we have grouped as follows:
Identification Data includes first name, last name, username or similar identifier, title, date of birth, and gender.
Contact details include billing address, delivery or mailing address, e-mail address, and telephone numbers.
Financial Data includes bank account and payment card details.
Transaction Data includes details of payments from you to us and other details about the products and services you have purchased from us.
Technical Data includes your Internet Protocol (IP) address, your login information, browser type, and version, time zone settings and location, browser plug-in types and versions, operating system and platform, and other technologies on the devices you use to access this website.
Profile Data includes your username and password, purchases or orders you have made, your interests, preferences, feedback, and survey responses.
Usage Data includes information about how you use our website, products, and services.
Marketing and Communication Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
We also collect, use and share aggregated data, such as statistical or demographic data, for any purpose. Aggregated data may be derived from your personal data, but it is not legally considered personal data because this data does not directly or indirectly reveal your identity. For example, we may aggregate your usage data and calculate the percentage of users who access a particular website feature.
Sensitive data
Sensitive data refers to data that contains details about your race or ethnic origin, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data, and criminal convictions, and offenses.
We require your express consent to process sensitive data, therefore when entering data we will ask you to confirm your explicit consent to this processing.
How is your personal data collected?
We use a variety of methods to collect data from and about you, including:
Direct interactions. You can provide us with your identity, contact, and financial information by filling out forms or corresponding with us by post, telephone, e-mail, or otherwise. This includes personal data that you provide when (where relevant):
- you request our products or services;
- you create an account on our website;
- you register to subscribe to our service or publications;
- you request marketing to be sent to you;
- er a competition, promotion, or survey; or
- give us feedback or contact us.
- Automated technologies or interactions. When you interact with our website, we may automatically collect technical data about your device, browsing actions, and patterns. We collect this personal data using cookies and other similar technologies.
- Analytics. We may receive personal data about you of a technical character from analytics service providers such as Google.
- We may receive contact, financial and transactional information from technical, payment, and delivery service providers such as Paypal.
- How we use your personal data
We will only use your personal data if the law allows us to do so. We will most often use your personal data in the following circumstances:
- When we need to fulfill a contract we are about to enter into or have entered into with you.
- When it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- When we need to comply with a legal or regulatory obligation.
- To inform you about our products and services where you have consented to this. We will send you this information by [e-mail] [SMS message] [post]. You have the right to withdraw your consent to marketing at any time by contacting us at support@astariaascension.com or by clicking the “unsubscribe” button in our emails.
The purposes for which we will use your personal data
Below we have provided a table describing how we plan to use your personal data and which of the legal bases we rely on to do so. Where necessary, we have also identified what our rightful interests are.
Please note that we may process your personal data for more than one lawful reason, depending on the specific purpose for which we use your data.
Purpose/Activity | Data type | Legal basis for data processing including the basis of legitimate interest |
To register you as a new customer | (a) Identification data (b) Contact details | Performance of the contract with you |
Processing and including delivery of your order: (a) Administration of Payments, Rewards, and Fees (b) Collecting money you owe us | (a) Identification data (b) Contact details (c) Financial Data (d) Transaction Data (e) Marketing and Communications Data | (a) Performance of Contract with You (b) Necessary for our legitimate interests (collecting debts owed to us) |
Management of our relationship with you, which includes: (a) Notice of changes to our Terms or Privacy Policy (b) When we ask you to leave a review or take a survey | (a) Identification data (b) Contact details (c) Profile data (d) Marketing and Communications Data | (a) Performance of Contract with you (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests (to update our records and learn how customers use our products/services) |
To enter a competition or complete a survey | (a) Identification data (b) Contact details (c) Profile data (d) Usage data (e) Marketing and Communications Data | (a) Performance of Contract with you (b) Necessary for our legitimate interests (to research how customers use our products/services, for their further development, and also for the growth of our business) |
Administration and protection of our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting. and data hosting) | (a) Identification data (b) Contact details (c) Technical data | (a) Necessary for our legitimate interests (to run our business, provide administrative and IT services, network security, fraud prevention, and in connection with a business reorganization or group restructuring) (b) Necessary to comply with a legal obligation |
To deliver content and advertisements from the website relevant to you and to measure or understand the effectiveness of the advertising we serve you. | (a) Identification data (b) Contact details (c) Profile data (d) Usage data (e) Marketing and Communications Data (f) Technical data | Necessary for our legitimate interests (to research how customers use our products/services, for their further development and growth of our business, and information for our marketing strategy) |
To use data analytics to improve our website, products/services, marketing, customer relationships, and customer experience | (a) Technical data (b) Usage data | Necessary for our legitimate interests (to define the types of customers for our products and services, to keep our website updated and relevant, to develop our business, and to inform our marketing strategy) |
To make suggestions and recommendations about goods or services that may be interesting to you. | (a) Identification data (b) Contact details (c) Technical data (d) Profile data (e) Usage data | Necessary for our legitimate interests (to develop our products/services and develop our business) |
Marketing
We strive to provide you with choices regarding certain uses of personal information, particularly in the marketing and advertising area. Our lawful reason for processing your personal data for the purpose of sending you marketing communications is your consent or our legitimate interests (namely the growth of our business).
Under the rules concerning the protection of personal data and electronic communications, we may send you marketing communications if (i) you have made a purchase or requested information from us about our products or services, or (ii) you have consented to receive marketing communications and in each case have not opted out of receiving such communications thereafter. Under these regulations, we may send you marketing emails without your consent, if you are a limited company. However, you can unsubscribe from receiving marketing emails from us at any time.
Promotional offers from us
We may use your identity, contact, technical, usage, and profile data to get an idea of what we think you might want or need, or you might be interested in. Based on this, we decide which products, services, and offers may be relevant to you (we call this marketing).
We will send you marketing communications if you have requested information from us or purchased products or services from us and in any event you have not opted out of receiving such marketing.
Third-Party Marketing
We do not share your personal data with any third parties.
Cancellation of subscription
You can ask us or third parties to stop sending you marketing messages at any time by using the unsubscribe links in any marketing message sent to you by us or by contacting us at support@astariaascension.com. If you opt-out of receiving these marketing communications, this will not apply to personal information provided to us as a result of a product/service purchase, warranty registration, product/service experience, or other transactions.
Cookies
You can set your browser to reject all or some browser cookies or to notify you when websites are setting or accessing cookies. If you disable or reject cookies, please note that some parts of this website may become unavailable or may not function properly.
Change of purpose
We will only use your personal data for the purposes for which we collected it unless we reasonably believe that we need to use it for another reason and that the reason is compatible with the original purpose.
Please note that we may process your personal data without your knowledge or consent, in accordance with the above rules, if required or permitted by law.
Disclosure of your personal information
We may be required to share your personal data with the parties below for the purposes stated in the table above in paragraph 4:
- External third parties such as service providers, professional advisers, HMRC, and regulators; and
- Third parties to whom we may decide to sell, transfer or merge parts of our business or our assets with. Alternatively, we may seek to acquire or merge with other businesses. If there is a change in our business, then the new owners may use your personal data in the same way as stated in this Privacy Policy.
We require all third parties to respect the security of your personal information and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only allow them to process your personal data for the specified purposes and in accordance with our instructions.
International transfers
We do not transfer your personal data outside the European Economic Area.
Whenever we transfer your personal data outside the EEA, we ensure that a similar level of protection is provided by ensuring that at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries that the European Commission has deemed to provide an adequate level of personal data protection. For more details, see European Commission: Adequacy of personal data protection in non-EU countries.
- When we use certain service providers, we may use specific contracts approved by the European Commission that give personal data the same protection as it has in the European Union. For more details, see European Commission: Model agreements on the transfer of personal data to third countries.
- If we use US-based providers, we may transfer data to them if they are part of the Privacy Shield which the European Commission recognized to provide an adequate level of personal data protection. For more details, see European Commission: EU-US Privacy Shield.
Data security
We have implemented appropriate security measures to prevent the accidental loss, use, or unauthorized access, alteration, or disclosure of your personal data. In addition, we limit access to your personal data to those employees, agents, suppliers, and other third parties who do not necessarily need to know it for work purposes. Your personal data will be processed only based on our instructions and subject to the obligation of confidentiality.
We have procedures in place to deal with any suspicion of a personal data breach and we will notify you and all relevant regulatory authorities of the breach where we are required to do so by law.
Data retention
How long will you use my personal data?
We will only retain your personal information for as long as is necessary to fulfill the purposes for which we collected it, including complying with any legal, accounting, or reporting requirements. We may retain your personal information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation relating to our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm due to unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve these purposes by other means and applicable legal requirements.
By law, we must retain basic information about our customers (including contact, identification, financial, and transaction data) for six years after they cease to be customers for tax purposes.
If you are not a customer, we will keep your data for 2 years after your last contact with us.
In certain circumstances, you can ask us to delete your data: please see the "Deletion Request" section below for more information.
In certain circumstances, we may anonymize your personal data (so the data does not reveal your identity in any way) for research or statistical purposes, in which case we may use the information without further notice without restraint.
Your legal rights
In certain circumstances, under data protection laws, you have the following rights concerning your personal data:
- Request access to your personal data.
- Request correction of your personal data.
- Request deletion of your personal data.
- Object to the processing of your personal data.
- Request the restriction of the processing of your personal data.
- Request the transfer of your personal data.
- Right to withdraw your consent.
If you wish to exercise any of the above rights, please contact us.
Usually, there is no fee charged
You will not have to pay a fee to access your personal data (or to exercise any other rights). However, we may charge a reasonable fee if your request is evidently unreasonable, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
Changes to this Privacy Policy
We may change this privacy policy from time to time - in such a case we will notify you via our website.