Last updated on December 31st, 2021
SmallRig Technology (HK) Limited and its subsidiaries (collectively, “SmallRig”, “us”, “We” and “our”) , are concerned about protecting your personal data and respecting your privacy.
Here is how we do it:
Our duty and your privacy:
This information concerns you if you are already a customer of ours, if you are registered on our site, if you have signed up for our newsletter, or if you are visiting our website.
- I. About us:
As regards the management of your data concerned with registering with the site and the sale of products, the data controller is SmallRig, which jointly handles your data on the basis of specific agreements about whose essential contents we will gladly provide you with more information, should you require it.
As regards the management of your data regarding promotional and marketing activities, the data controller is SmallRig.
- II. Our responsibility:
If you are already a customer, you are registered with or are simply visiting the email@example.com, or you have signed up for our newsletter, we inform you that your data will be legitimately processed according to our decisions regarding the procedures and aims of that processing.
- III. Your commitment:
We would only ask you to read this policy carefully in order to be fully informed about how we process your personal data.
- IV. When and how we collect your personal data:
As soon as you begin to interact with www.smallrig.com, we start to collect your data. It may be collected through a specific communication from you and also automatically during your use of the website.
- V. The kind of data we collect:
- 1. Contact details
Your first name and surname, delivery and billing address, telephone number, email address;
- 2. Identification data
Your IP address, your login data, browser type and version, time zone setting, plug-in types, geopositioning information regarding your probable position, operating system and related versions, etc.
- 3. Data relating to the use of www.smallrig.com
Your browsing path through the website www.smallrig.com, your displaying of products and services, load times and page responsiveness, download errors, browsing time, behaviour and other actions, etc.
- 4. And what about sensitive data?
We do not collect any sensitive data that could concern you (i.e. personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or sex life or sexual orientation).
- VI. What we collect your data for
We process your data only for specific purposes and, nevertheless, always when there is a legal basis that will enable us to do so. Here is why we process your data:
- VII. Use of the site and management of services:
Your data is processed to allow registration on the Website, access to and supply of the services reserved to users registered on the Website and sending via the Website of a purchase order for the products available on the Website, with the consequent conclusion of the related contract of sale with SmallRig, including any administrative and accounting formalities.
- VIII. Customer support
Communicating changes to our services, customer support via live chat, phone or email, including the correction of any bugs.
- IX. Marketing
Your data is processed in order to send advertising material and newsletters, to provide commercial information by telephone, SMS, email, and also using traditional methods (e.g. sending catalogues by post), about promotional and sales initiatives of SmallRig, to conduct market research and surveys on customer satisfaction.
- X. Profiling
With the sole aim of offering things, as far as possible, in line with your interests, we will perform certain analyses on aggregate data but without conducting any profiling on your specific habits.
- XI. What we mean by legal basis:
- 1. Consent
This is the authorisation to process your personal data for a specific purpose.
- 2. You can change your mind whenever you like
You can withdraw your consent at any time, by sending us an email to the following address: firstname.lastname@example.org.
If you decide to withdraw your consent and there are no other reasons that authorise us to process your personal data, we will stop processing it. Conversely, if another legal basis were to authorise us, we would continue to process your data, still in compliance with your rights.
- 3. Contract
Processing your data is essential for gathering information prior to a purchase and for the performance of the relevant contract.
- 4. Legitimate interest
The processing of your data is possible on the basis of our legitimate interests or those of third parties, provided that these do not predominate over your rights and your freedoms. Legitimate interests may concern:
- · gathering information from the way you behave on our website and/or applications;
- · delivering, developing and improving our services;
- · allowing us to improve, customise or modify our services and offerings;
- · checking on the effectiveness of our marketing campaigns;
- · improving data protection.
- XII. How we process your data:
Data is processed mainly using electronic means, with the exception of product shipping operations which may also be performed using manual procedures.
- 1. Data retention:
Your personal data are kept for the time strictly necessary for the pursuit of the purposes for which they are collected and for the fulfillment of the applicable legal obligations and regulations. The data will be erased or permanently anonymized to achieve the aforementioned purposes, except in the case where SmallRig is required to keep the data for a further period to comply with legal obligations or regulations.
- XIII. Your choices and rights:
- 1. You can decide not to provide us with your data
In this case, you can continue to browse our website, but we will not be able to provide you with any services without your personal data.
- 2. You can disable cookies by changing your browser settings
- 3. You can ask us not to use your data for marketing purposes
Before starting to process your data, we will inform you about our intention (if any) to use your data for marketing purposes, and (where appropriate) of the involvement of any third parties. You can withdraw your consent to receiving promotional messages by clicking on the appropriate link you will find in all our communications or by sending an email to the following address: email@example.com
- 4. Your rights
You can always exercise your rights by sending us an email to the following address: firstname.lastname@example.org.
- 5. You have the right to access the information about you
This includes the right to ask us for further information about:
- · the categories of data we process;
- · the purposes of the processing;
- · the categories of any recipients who may be provided with your data;
- · the period that the data will be stored, or if that is not possible, the criteria used to determine that period;
- · the other rights regarding the use of your data.
We will provide you with the information within one month of receiving your request, unless this adversely affects the rights and freedoms of other parties (e.g. the confidentiality of another person or intellectual property) or if there are legal obligations that prevent us from doing so. We will inform you if we are unable to meet your request for these reasons.
- 6. You have the right to have your personal data rectified if it is inaccurate or not up to date
- 7. You have the right to have your personal data erased (right to be forgotten)
You can ask us at any time to erase your personal data in our possession, if the storage of your personal data is no longer required for processing purposes.
- 8. You have the right to transmit your data to another operator (data portability)
We will provide you with a copy of your data in an appropriate usable format, if you wish to transfer it to another operator. If you request it and it is technically feasible, we will directly transfer your data to the new operator. We will not make any transfer, in the event that the portability of your data also involves the disclosure of personal data to other individuals.
- 9. You have the right to object to us processing your personal data
You can at any time refer to the Supervisory Authorities to lodge any complaints you may have. But before doing that, try contacting us first. We will be pleased to resolve any issues regarding the processing of your personal data.
- 10. You have the right to object to the use of your data through automated decisions, including
We might use your data to identify information that may potentially be relevant for you (for example, sending you customized e-mails based on your preferences that we have detected). Otherwise, we will use your information solely to provide you with our services.
- 11. We guarantee your rights even if we process your personal data on behalf of third parties
If we process your personal data on behalf of third parties, we guarantee that any requests made regarding the exercise of your rights will be provided to them without undue delay.
What level of security do we adopt in order to process your data?
We guarantee that your data is processed with the utmost security: we have, in fact, adopted physical, IT and organisational measures to ensure the protection of your data.
- 12. Nevertheless, we should remind you that:
- · You provide us with your data at your own risk. We do everything within our power but,unfortunately, as the way things stand, there is no 100% secure means of data transmission.
- · You need to keep your username and password safe at all times: you are the only one who knows them.
- · If you feel that you have suffered a data breach, we would ask you to contact us immediately at email@example.com.
- XIV. Where is your data stored?
Your data is processed within the European Union and in the other data structures managed by the third parties identified below.
As soon as you provide us with your personal data, you consent to it being transferred, stored and processed by us.
If we needed to transfer and/or store your personal data outside where such personal data is stored, you will be properly informed of this. Also in this event, we will adopt all the appropriate measures to ensure maximum data protection.
- XV. How long will we keep your data?
We will stop active processing of your data within 12 months from the last use of the service or the closure of your account, unless there are legal obligations (e.g. sales invoices) that require us to keep your data for a longer period. As regards promotional activities targeted at you (which you may ask us to stop at any time), we will keep your data for a maximum of 24 months from the date you registered with the service.
- XVI. Third parties who may process your data:
To run our online business we need to avail ourselves of third parties which host the applications, communicate with our customers, manage emails, etc. For further information, contact us at this address firstname.lastname@example.org