This privacy statement applies to any processing of personal data on westport.ba which is hereinafter referred to as the “Website”.
Personal data in this regard shall mean any information relating to an individual who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual.
Processing shall mean any operation which is performed on personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
How we process your personal data
Personal data automatically collected when you browse the Website
When you visit the Website for informational reasons, i.e. without being registered, we will automatically gather and store certain information (e.g. device type, the browser used, the date and time of visit, pages visited).
We use such data only to assist us in providing an effective service (e.g., to adapt our website to the needs of your end user device or to allow you to log into our website). The personal data collected is necessary to provide you with the website. The legal basis for this processing activity is Article 6 (1) 1 lit. b of the European General Data Protection Regulation (“GDPR”).
Registration for and use of our services and products
We will process personal data actively provided by you, e.g. when you register with us by setting-up a contact record, sending us requests or questions, prepare orders, or place orders or access downloads or conclude a service contract. Such personal data may contain inter alia your name, e-mail address, contact details, company affiliation, country, request and order information.
Westport Consulting collects and uses personal data only to provide you with the services you requested, to administer your contact record, identify you and to communicate with you. We also interact with you via our general enquiry sections or responding to complaints or general feedback given by you on our services or because we had or have a contract with you in place. For this, the legal basis is Article 6 (1) 1 lit. b GDPR (i.e., the processing is necessary for entering into or the performance of a contract with you).
As the case may be we may also contact you with regards to your satisfaction with our products and services and may conduct other surveys.
We use the personal data and contact data you provide by registration to inform you directly about our additional products and services. The use of your personal data for directly advertising related products and services is a legitimate interest for us as a provider of this website, Article 6 (1) 1 lit. f GDPR.
You can object to the use of your personal data for direct marketing at any time. We will then refrain from any processing to the extent it is related to such purposes. You can inform us about your objection by sending us an email at firstname.lastname@example.org
We process your personal data as far as necessary for compliance with legal obligations to which we as the data controller are subject, in particular the applicable commercial accounting obligations and tax law requirements. The legal basis for this processing activity is Article 6 (1) 1 lit. c GDPR.
Your personal data is, in the absence of exceptions within the specific services mentioned below, retained for as long as your user account is used. If there has been no activity on your account, your personal data will be erased once the purpose has been fulfilled. Statutory storage obligations or the need for legal actions that may arise from misconduct within the services and can lead to a longer retention of your personal data. In this case, we will inform you accordingly.
Data collected from third party sources
We may also collect personal data about you such as your name and contact details for providing you with information on products and services, coming from third party resources on trade fairs and webinar vendors we are participating in.
Legal basis for this processing is Article 6 (1) 1 lit. f GDPR as it is our company group’s legitimate interest to maintain our user base, bring new users to the Website and inform (potential) users about services organized and provided by Westport Consulting.
With your email address you can subscribe to our informational e-mails that provides you with the latest news about our products and services if you consent to receiving such e-mails. The legal basis for this processing is Article 6 (1) lit. a GDPR. Your email address will be retained for as long as you are subscribed to our informational e-mails and for 36 months of inactivity thereafter.
This service is partly provided by means of a double-opt-in. Thus, you will receive an email containing a link by which you can confirm that you are the owner of the email address and wish to be notified via our email service. If your subscription is not confirmed we will not send you informational e-mails.
You can unsubscribe from this service by opting-out via the link provided in each informational e-mail.
Automated decision making
We do not use your personal data for automated decision making which produces legal effects concerning you or similarly significantly affects you.
Recipient of your personal data
Your personal data will not be disclosed third parties.
Third party recipients
We engage third party companies and individuals who assist us in providing our services and products or support us with certain functions of this website. Your personal data will be shared with the following categories of third parties and partly their sub-processors:
- Hosting and content delivery network services (e.g., Globalhost doo)
- Billing and payment service providers
- Customer support services
The legal basis for this data transfer and processing activity is Art. 28 GDPR in conjunction with the data processing agreements we concluded with respective third party companies. Therefore, our contractors will only use your personal data to the extent necessary to perform their functions and will be contractually bound to process your personal data only on our behalf and in compliance with our requests.
We may disclose your personal data if legally entitled or required to do so (for example if required by law or by a court order). The legal basis for this processing is Art. 6 (1) 1 lit. C GDPR.
International data transfer
Within the scope of our information sharing activities set out above, your personal data may be transferred to other countries (including countries outside the European Union) which may have different data protection standards than your country of residence. Please note that data processed in a foreign country may be subject to foreign laws and accessible to foreign governments, courts, law enforcement, and regulatory agencies. However, we will endeavour to take reasonable measures to keep up an adequate level of data protection also when sharing your personal data with such countries.
In the case of a transfer outside of the European Union, this transfer is safeguarded by the EU Standard Contractual Clauses. You can find further information about the aforementioned safeguards under: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.
We strive to keep our processing activities with respect to your personal data as limited as possible. In the absence of specific retention periods set out in this policy, your personal data will be retained only for as long as we need it to fulfil the purpose for which we have collected it and, if applicable, as long as required by statutory retention requirements.
A cookie can be classified by its lifespan and the domain to which it belongs. By lifespan, a cookie is either a: