​

1. How we collect, use, or disclose your personal data

 

We only collect, use or disclose your personal data where it is necessary or there is a lawful legal basis for collecting, using or disclosing it. Except in limited instances where we indicate that certain information is processed based on your consent, we collect, use, and/or disclose your personal data on the legal basis of (1) contractual basis, for performance of activity in relation to our relationship with you; (2) legal obligation, for fulfilment of our legal obligations; (3) legitimate interest, for the purpose of our legitimate interests and the legitimate interests of third parties, proportionate to your interest and fundamental rights and freedoms to the protection of your personal data; (4) vital interest, for the prevention or suppression of danger to a person's life, body, or health; (5) public interest, for the performance of task carried out in the public interest or for exercising of official authorities duties; and/or (6) the reason for an establishment and defenses of legal claims in the future.

​

1.1 The purposes on which we rely on your explicit consent.

​

We may collect, use, and disclose the following personal data based on your explicit consent for the following purposes, if we cannot rely on another appropriate legal basis:

​

• Sensitive personal data

  • Religion and/or Race (from the official documents), in which religion and/or race data may appear in the official documents and we may process your official documents for identification and authentication purposes.

• Marketing activities, we may process your personal data such as name, surname, personal information, contact details, and other necessary information for provision of marketing communications from DataX or its affiliated companies, for which we cannot rely on other legal bases.

​

Where legal basis is consent, you have the right to withdraw consent at any time. This can be done so, by contacting us through channels as specified in "How to contact us". The withdrawal of consent will not affect the lawfulness of the collection, use and disclosure of your personal data and sensitive personal data based on your consent before it was withdrawn. You are well aware that if you withdraw your consent for the collection, use and disclosure of personal data for purposes set out above, we may not be able to perform certain contractual obligations we have with you, or to pursue certain actions per your request.

​

1.2 The purposes on which we rely on other legal bases.

​

We may collect, use, and disclose your personal data for the following purposes:

 

1. Identity proofing and authentication;

2. Communications and marketing include the dissemination of news and activity updates, engagement with customers and stakeholders, creation of marketing materials and strategic plans, development of public relations and policy strategies, and enhancement of product marketing performance.

3. Provision of seminars, trainings, tests, events, exhibitions, and other activities includes communication with event attendees, speakers, and service providers; delivery of souvenirs and awards; preparing lists of attendees; collecting and assessing feedback; conducting surveys; and increasing awareness of data protection.

4.  Record management, including retaining as legal evidence and for future reference;

5. Provision and management of services and products include planning, overseeing, carrying out, managing, and monitoring projects according to targets; budget and resource allocation; performing according to instructions; developing, installing, and delivering products and services; setting prices and payment collection processes; delivering products; enhancing and analyzing data; cooperating to resolve technical difficulties; overseeing development and testing of products; and setting and overseeing customer service terms.

6. Entering into contracts and conducting transactions include conducting risk assessments, and preparing, reviewing, revising, and negotiating contracts before execution.

7. Risk management includes designing, monitoring, and developing risk management policies, procedures, or reports; developing and implementing systems, measures, or tools for risk management or assessment; and assessing, monitoring, overseeing, and solving problems when risks occur, including those from data breaches or cybersecurity breaches.

8. Business management and development include handling complaints and cooperating to address issues; communication and cooperation; studying market forces and customer requirements; managing concepts, implementation, strategies, and guidelines of products and work plans; designing and developing internal systems; developing dashboard reports, insights, analytics, and internal tools; preparing internal and external reports; analyzing and enhancing business operations; researching and developing data science tools; monitoring and reviewing business operation progress; operating the business; performing according to system owners' suggestions; managing technology resources; improving database performance; preserving tools and providing information services; developing and improving software and applications; procuring and preserving technology assets; analyzing and developing technical and business processes; setting guidelines on data development and conversion; business development; market research; providing legal advice; and maintaining security and safety.

9. Financial and accounting include financial planning and management, recording and reporting financial transactions, setting budgets, planning and developing financial policies, implementing financial control, performing financial close processes, preparing relevant documents, and complying with regulations by filing tax returns, financial statements, and other documents with government or relevant agencies.

10. Conducting audits, which includes preparing, reviewing, analyzing, and reporting audit plans, as well as improving internal control.

11. Ensuring compliance with relevant standards, policies, regulations, and laws in business operations, handling complaints and legal actions, managing security architecture, developing and implementing cybersecurity systems, overseeing information security, responding to data breaches, managing data-related complaints, and protecting our security.

12. Provision of access to building and controlled premise;

13. Protection of your vital interests or that of another individual;

14. Business organizations such as merger, sale, purchase, joint venture, assignment, transfer or other disposition of our business, assets, or stock, or rehabilitation, capital venture, or any similar transaction, we may disclose your personal data to our assignee(s) of rights as part of such transactions.

15. We may use artificial intelligence (AI) technologies in our operations to enhance our products and services and improve your experience with us. AI may be used to analyze data (e.g. predictive analytics), automate processes (e.g. content generation), assist with document review, and analyze contracts. When processing your personal data, we ensure that AI-driven data processing is lawful, fair, and transparent, adhering to ethical and regulatory standards and complying with relevant data protection laws and regulations.

​