​

1. How we collect, use, or disclose your personal data

 

We only collect, use or disclose your personal data where it is necessary or there is a lawful legal basis for collecting, using or disclosing it. Except in limited instances where we indicate that certain information is processed based on your consent, we collect, use, and/or disclose your personal data on the legal basis of (1) contractual basis, for performance of activity in relation to our relationship with you; (2) legal obligation, for fulfilment of our legal obligations; (3) legitimate interest, for the purpose of our legitimate interests and the legitimate interests of third parties, proportionate to your interest and fundamental rights and freedoms to the protection of your personal data; (4) vital interest, for the prevention or suppression of danger to a person's life, body, or health; (5) public interest, for the performance of task carried out in the public interest or for exercising of official authorities duties; and/or (6) the reason for an establishment and defenses of legal claims in the future.

​

1.1 The purposes on which we rely on your explicit consent.

We may collect, use, and disclose the following personal data based on your explicit consent for the following purposes, if we cannot rely on other appropriate legal basis:

​

• Sensitive personal data

  • Religion and/or Race (from the official documents), in which religion and/or race data may appear in the official documents and we may process your official documents for identification and authentication purposes.

• Marketing activities, we may process your personal data such as name, surname, personal information, contact details, and other necessary information for provision of marketing communications from DataX or its affiliated companies, for which we cannot rely on other legal bases.

​

Where legal basis is consent, you have the right to withdraw consent at any time. This can be done so, by contacting us through channels as specified in "How to contact us". The withdrawal of consent will not affect the lawfulness of the collection, use and disclosure of your personal data and sensitive personal data based on your consent before it was withdrawn. You are well aware that if you withdraw your consent for the collection, use and disclosure of personal data for purposes set out above, we may not be able to perform certain contractual obligations we have with you, or to pursue certain actions per your request.

​

1.2 The purposes on which we rely on other legal bases.

​

We may collect, use, and disclose your personal data for the following purposes:

 

1. Identity proofing and authentication;

2. Communications and marketing, including:

a. Communications and announcements of news, seminars, events, exhibitions, and other activities;

b. Communication and cooperation with customers, including their contact persons and stakeholders;

c. Preparation of marketing materials;

d. Preparation of marketing, product and service plans;

e. Developing our public relation and policy strategies;

f. Improving product marketing performance;

   3. Provision of seminars, trainings, tests, events, exhibitions and other activities, including:

a. Communication with event attendees, speakers, and service providers;

b. Delivery of souvenirs and awards;

c. Preparing lists of attendees;

d. Collecting and assessing feedback, and conducting survey;

e. Increasing the awareness of data protection;

   4. Record management, including retaining as legal evidence and for future reference;

   5. Provision and management of services and products, including:  

a. Planning, overseeing, carrying out, managing, and monitoring projects according to targets set;

b. Budget and resource allocation for each project;

c. Performing according to instructions;

d. Developing our products and services;

e. Developing, installing and delivering products as instructed;

f.  Setting prices and payment collection process;

g. Delivery of products;

h. Enhancing and analyzing data according to instructions;

i. Cooperating and working to resolve technical difficulties and delivering data-related products;

j. Overseeing the development and testing of products;

k. Setting and overseeing terms regarding levels of customer services;

   6. Entering into contracts and conducting transactions, including:

a. Conducting risk assessment before entering into contracts and conducting transactions;

b. Preparing, reviewing, revising and negotiating contracts before executing contracts;

   7. Risk management, including:

a. Designing, monitoring and developing risk management policies, procedures or reports;

b. Developing and implementing systems, measures or tools for risk management or assessment;

c. Assessing, monitoring, overseeing, and solving problems when risks occurred, including risks from data breach or cybersecurity breach;

   8. Business management and development, including:

a. Handling complaints and cooperating to address the issues;

b. Communication and cooperation;

c. Studying market forces and customer requirements so as to improve our business concepts and ideas;

d. Overseeing the management of concepts, implementation, strategies and guidelines of products and work plans;

e. Designing and developing internal systems;

f.  Developing dashboard reports, insights, analytics, and internal tools;

g. Internal and external report preparation;

h. Analyzing and enhancing business operation according to the needs and requirements of business;

i.  Researching and developing tools or ways to support data science;

j.  Monitoring and reviewing the progress and studies relating to business operation;

k. Operating our business;

l.  Performing according to suggestions from systems' owners;

m. Managing technology resources;

n. Improving database performance;

o. Preserving tools and provide information services;

p. Developing and improving software and applications;

q. Procuring and preserving technology assets;

r. Analyzing and developing technical and business processes;

s. Setting guidelines on data development and conversion, as well as improving database performance;

t. Business development;

u. Market research;

v. Providing advice on legal issues;

w. Maintenance of security and safety

  9.Financial and accounting, including:

a. Financial planning and financial management;

b. Recording and reporting our financial transactions;

c. Setting budgets;

d. Planning and developing our financial policies;

e. Implementing financial control;

f.  Financial close process, including preparing disbursement documents and account records;

g. Preparing relevant documents;

h. Performing duties according to rules, including filing of tax returns, financial statements, and other relevant documents to government agencies or other relevant agencies;

 10.Conducting audits, including:

a. Preparing, reviewing, analyzing and reporting audit plans;

b. Improving internal control;

 11.Compliance, data protection and data security, including:

a. Ensuring that our business operation, policies, strategies, work plans, and systems are carried out in compliance with relevant standards, policies, regulations, and laws;

b. Receiving complaints and conducting legal actions;

c. Designing and managing security architecture;

d. Developing and implementing systems / tools for cybersecurity, including measures to oversee the security of information;

e. Monitoring and developing policies / procedures for information security;

f. Investigating and responding to data breach;

g. Advising and managing data-related complaints;

 12.Provision of access to building and controlled premise;

 13.Protection of your vital interests or that of another individual;

 14.Business organization such as merger, sale, purchase, joint venture, assignment, transfer or other disposition of our business, assets, or stock, or rehabilitation, capital venture, or any similar transaction, we may disclose your personal data to our assignee(s) of rights as part of such transactions.

​