Privacy policy

Personal Data Protection Policy

This Personal Data Protection Policy informs you in a transparent manner about our policy regarding security, protection and confidentiality of the processing carried out on the personal data that you entrust to us when you browse the websites of the company KONTIKI MEDIA LTD (hereinafter referred to as the “website”) accessible via the following link:https://kontikimedia.com.

Le site kontiki Media is published by the company KONTIKI MEDIA LTD, located at 71-75 Shelton Street, Covent Garden, WX2H 9JQ London, United Kingdom, registered under number 8440460 and represented by its manager, Mrs Stéphanie Boehm.

1. Definitions

-         Data file:A personal data file is characterized by a structured set of personal data accessible according to determined criteria, whether this set is centralized, decentralized or distributed functionally or geographically. It is the container of personal data.

-        Personal data:Any information relating, directly or indirectly, to a natural person concerned, in this case you.

-         Data subject (“You”):A data subject, within the meaning of the GDPR, is deemed to be an "identifiable natural person" a natural person who can be identified directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, data location, an online identifier, or one or more specific elements specific to their physical, physiological, genetic, psychological, economic, cultural or social identity.

-        Data processing :Processing of personal data (processing) is characterized by any operation or set of operations, whether or not carried out using automated processes and applied to personal data or sets of data, such as the collection, recording, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, reconciliation or interconnection, limitation, erasure or destruction.” This word groups together all the operations and actions that can be performed on your data files.

-         Data controller (“We”):Data Controller is the natural or legal person, public authority, service or other body which, alone or jointly with others, determines the purposes and means of the processing; where the purposes and means of such processing are determined by Union law or the law of a Member State, the controller may be designated or the specific criteria applicable to its designation may be provided for by the law of the Union or by the law of a Member State;

• 2. Scope of this policy

2.1 Preamble

KONTIKI MEDIA LTD is an international company operating in the field of digital marketing and specializing in audience monetization. Its particular activity is the generation of qualified leads and the marketing to Advertisers of the right to use databases for commercial prospecting purposes.

By accessing our websites and using the services offered, you acknowledge having read and understood this General Policy relating to the protection of personal data, as well as the practices for obtaining consent, collecting and processing information described in this document.

In general, you can visit our Sites without it being necessarily necessary to communicate to usof data. However, in order to be able to provide you with certain services, we may ask you to provide us with certain Data.

This personal data protection policy applies in particular to all processing of data collected via our websites, the partner sites mentioned but also to all collections of information that you may communicate in “paper” format. or telephone.

2.2 Our commitment to the principles of the LIL and the GDPR

As such, we are committed to respecting the following principles:

- We only collect the data we need.

- We only process data fairly and lawfully collected.

- We only process your data for explicit, legitimate and specific purposes.

- We only process data that is adequate, relevant and not excessive in relation to the purpose of our processing.

- We only keep your data for the duration necessary to carry out the processing for which they were collected or, for the duration fixed by law.

- We only communicate your data to the companies and subsidiaries of our group as well as to partners who need to know it in the context of our professional activities.

- We do not communicate this data to third parties outside the company without informing you first.

- We rigorously ensure that we implement appropriate and reinforced security measures to ensure a high level of protection for your data.

- Our present policy aims to inform you in the most transparent way possible about how we collect and use your data as well as your various rights.

 

2.3 Strengthening our security measures and good governance of our data

We have taken measures to prevent any personal data breach, including:

- Appointment of a Data Protection Officer in charge of compliance control. Our DPO is registered with the CNIL under number DPO-132039

- Raising awareness among our teams about the protection of personal data and good security practices

- Information system security audit

- Implementation of a general data protection policy

- Right to demand that your data be kept secure

We ensure the security and durability of your Personal Data by implementing a series of physical and logical protections in the conservation and backup of your data, in order to prevent it from being destroyed, corrupted, modified, misused , or altered.

 

3. Conditions of use of our websites

 

3.1 Web Site

The content of our site, the general structure, the tree structure, the textual content, the animated or non-animated images and the logos of which the site is composed are the exclusive property of the company KONTIKI MEDIA LTD. Any representation, total or partial, of this site or its content, on any medium, for collective or professional use, even internally within the company, by any means whatsoever, without express prior written authorization of the company KONTIKI MEDIA LTD is prohibited and would constitute an infringement punishable by articles L.335-2 et seq. of the Intellectual Property Code, likewise the violation of these provisions subjects the offender and all persons responsible to the criminal and civil penalties provided for. by French law.

3.2 Social networks and other platforms belonging to third parties

KONTIKI MEDIA LTD may also collect certain Personal Data through certain social networks or other platforms belonging to third parties: by connecting to a service through a social network or another platform, you authorize KONTIKI MEDIA LTD to

- (1) collect, store, and use, in accordance with this general data protection policy, the information that you have agreed to provide via the social network or third-party platform in question, depending on your privacy settings on this social network or this third-party platform and

(2) share this information with that social network or third-party platform, through the social network or third-party platform's API. Your consent is given when you connect to the social network or third-party platform in one of our products and/or Services, or when you connect by clicking on the button, “accept” or “allow” (or any other similar terms) in one of our applications on a social network or platform owned by a third party.

KONTIKI MEDIA LTD may also use your Personal Data such as email, name, first name, landline and/or mobile telephone number, gender, date of birth, year of birth, postal code, city, a social network identifier, in order to offer you personalized advertisements on social networks (Facebook in particular) from the KONTIKI MEDIA LTD network and to allow the social network to identify profiles resembling yours and potentially interested in the same advertisements that you.

 3.3  Uses of your Personalized content

KONTIKI MEDIA LTD is likely to collaborate with marketing partners of trust in order to offer you more useful and interesting advertising content via our sites and via third party sites and services. Subject to validating the mention “I accept that my personal data above will be shared with partner companies and organizations of the “Site” (or any other similar mention of our sites or the sites of our collection partners), is checked and/or validated, we may do so by sharing or comparing the Personal Data that you have provided to us with the information (which may include Personal Data) that you have provided to third-party marketing partners. The list of said trusted marketing partners is regularly updated and is available here .

These partners can:

- Carry out commercial prospecting by electronic, postal or telephone means, database enrichments, or multi-channel rental;

- Carry out marketing analyses, recognition, matching, profiling, advertising targeting

- Carry out data mining or statistical cross-checking operations;

- Carry out “KYC” (“Know your customer”), anti-fraud and data cleaning operations.

KONTIKI MEDIA LTD may also use your data to carry out automatic profiling operations based on the Personal Data you have entrusted to us, crossed with statistical and socio-demographic data. These profiling operations do not produce legal or significant effects and allow KONTIKI MEDIA LTD to offer you targeted and personalized advertising.

KONTIKI MEDIA LTD may also keep your browsing, opening and clicking history on the newsletters sent, to establish interest center scores and allow us to send you targeted advertising offers according to the interests deduced from the history of your actions.

 

3.4 Cookie policy on the sites

You are informed that during your visits to our sites, a cookie may be automatically installed on your browser software.

Our cookies constitute sets of data which do not allow you to be identified, but whose main purpose is to record information relating to your browsing. Configuring the settings of your browser software allows you to be informed of the presence of our cookie and you have the right to refuse it.

A very effective tutorial from the CNIL can help you if you want to better control your navigation traces, we encourage you to consult it.

https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/

You can also read our Policy relating to the deposit of cookies which can be consulted from the link at the bottom of this page.

4. Collection and use of collected data

4.1 Legal basis for our data processing

We are only entitled to process your data from the moment you explicitly give us authorization by validating the “I accept…” box (or any other similar mention) present on the consent collection form.

Then subsequently, if we have a contractual relationship, the processing will be legitimate and necessary as part of its monitoring, to the extent that you will be party to or associated with the execution of the pre-contractual or contractual measures undertaken with us.

4.2 Direct and indirect collections

We refrain, with regard to the personal information that you entrust to us, from any misuse, and more generally, from any act likely to harm your private life or your reputation.

When using or consulting our sites and applications, we collect:

-         (i) Direct collections

The data that you communicate to us directly via the kontikimedia[.]com site, in particular when creating your online account or when you fill out a contact form or when you use one of the following email addresses:contact[@]kontikimedia[.]com, dpo[@]kontikimedia[.]com or hr[@]kontikimedia[.]com

-         (ii)Indirect collections

Data that we obtain indirectly, in particular through cookies or trackers (and subject to your choices). This data may for example be your connection data, navigation data, IP address, preferences and interests, etc.

When you fill out a form, the data accompanied by an asterisk (*) is mandatory and is necessary to process your requests.

KONTIKI MEDIA LTD may collect information about you indirectly via its partners. In this case, the company KONTIKI MEDIA LTD ensures with its partners that you have consented to such collection being carried out.

4.3 What data do we collect? (Compliance with the principles of proportionality and minimization of collections)

We refrain, with regard to the personal information that you entrust to us, from any misuse, and generally speaking, from any act likely to harm your private life or your reputation.

We therefore ensure that we only collect data strictly necessary for the declared purpose of the various processing operations implemented by the company.

As part of its commercial activities, the following data is notably collected from Users:

-   Name ; First name ; Civility;

-   Date of birth ;

-   Email Address ;

-  IP address, which is an identification number of a device connected to a network using the Internet protocol as well as various information linked to this data such as the "geo ip" ip of the browser which opens an email, the "geo country" country where the geo ip is located or even “geo city/state/zipcode” where the geo ip is located

-   TimeStamp (time stamp), which allows you to associate a date/time with data/computer action;

-   Collection URL, which corresponds to the address of a site or Internet page

-  Browser type, screen type (size, resolution), device type (Android/IOS mobile/mac computer or PC) to allow the content sent or displayed on our sites to be adapted

-  Telephone number (landline and/or mobile). Before any action by telephone, we check with Bloctel that you have not objected to telephone canvassing.

-   The postal address.

4.4 Purpose of collection

The company KONTIKI MEDIA LTD uses the personal data entrusted to it directly by Users or indirectly by its partners exclusively:

- For processing applications;

- For processing requests of informations sent via the website;

- To make contact by telephone or electronically (email) with the people who have contacted us;

- For prospecting purposes by telephone (excluding call machines) KONTIKI MEDIA LTD has a legitimate interest in contacting you as part of a prospecting campaign via these channels (Recital No. 47 of the GDPR, code of consumption relating to lists of opposition to prospecting other than by electronic means). In order not to be canvassed, you can register for free on this site : https://www.tpsonline.org.uk/

In addition, when collecting your data, we check that you have received sufficient information prior to the transmission of your data. You can object to your data being transmitted to our partners by contacting us directly contact[@]kontikimedia.com or dpo[@]kontikimedia.com to exercise your rights.

- Carry out commercial prospecting (direct or in the case of commercial intermediaries, those of their advertisers) by electronic, postal or telephone means, database enrichments, or multi-channel rental; this may include prospecting of a political or union nature. The data transmitted will allow advertisers to send you a message asking you to consent to being contacted electronically. These commercial intermediaries may in turn transfer your information to partners subject to having obtained your consent.

- Carry out marketing analyses, recognition, requalification or emulation, matching, advertising targeting, deduplication, enrichment

- Carry out email or display retargeting operations

- Carry out data mining or statistical cross-checking operations;

- Carry out KYC, anti-fraud and data cleaning operations.

- For the management of contracts, files or customer files

- In order to update our databases;

- To carry out profiling operations (Automatic profiling operations do not produce legal or significant effects and allow KONTIKI MEDIA LTD to offer you targeted and personalized advertising), enrichment of data from our partners third parties, implementation of artificial intelligence devices; statistics or the fight against fraud.

- To meet our obligations arising from the GDPR and relating to the storage and deletion of data collected and processed.

4.5. Information relating to minors under 18 years old

The sites published by the company KONTIKI MEDIA LTD are intended for an adult audience.

KONTIKI MEDIA LTD does not offer, through its sites, services intended for minors under the age of 18 and is therefore not intended to collect personal data.

In the event that a child aged 18 sends personal data to KONTIKI MEDIA LTD, it will do everything possible to delete the transmitted data.

4.6. Call recording

In order to optimize the quality of our services and offer the best possible experience to our contacts, calls made by our advisors may be recorded. Recording telephone conversations is a common practice in the field of call centers which allows us to train and evaluate advisors in order to improve the quality of our services. The advisor systematically informs the interlocutor that the conversation may be recorded and warns them of the possibility of objecting. The retention of listening is limited in time (6 months) and listening to recordings is strictly limited to the Quality and Training departments as well as to people authorized by our ordering client.

5. Recipients of your data

Your personal data will not be transmitted to third parties, except for the sole purposes of the purposes that you have accepted when obtaining your consent.

We may, however, share the Data collected with our technical service providers for the achievement of the purposes described above. The list of its service providers is available here.

We strictly require our partners to always act in compliance with applicable Data protection laws and to pay particular attention to the confidentiality of this Data.

In accordance with current regulations, any subcontractor who may process personal data on behalf of KONTIKI MEDIA LTD undertakes in particular to:

• Process the data only for the purpose(s) which are the subject of the subcontracting;

• Process the data in accordance with the instructions of KONTIKI MEDIA LTD;
• Guarantee the confidentiality and security of Data.

5.1 Internal recipients:

• The management of our company;
• People responsible for commercial monitoring
• People responsible for technical development

5.2 External recipients (full list available here)

• Subcontractors for data hosting;
• Subcontractors for data cleaning
• Technical subcontractors for improving KONTIKI MEDIA LTD services (deliverability, tool development; deduplication, etc.)
• As part of sending newsletters, employees, technical service providers, for targeting and carrying out mailings
• As part of its commercial relations, with its partners

KONTIKI MEDIA LTD may also disclose or transfer your personal data to third parties in the following specific circumstances:

• By law, in the context of legal proceedings, litigation and/or a request from the public authorities of your country of residence or otherwise;
• If disclosure is necessary for national security, law enforcement or other public interest purposes;
• In the event of restructuring, transfer, merger or sale, to the third party concerned.

6.Transfer of personal data outside the European Union

KONTIKI MEDIA LTD carries out all processing of your Personal Data on the territory of the European Union (EU) in accordance with Article 13, paragraph 1, point f), and Article 14, paragraph 1, point f ), of Regulation (EU) 2016/679.

However, for certain specific services, KONTIKI MEDIA LTD may use subcontractors or its sites established outside the EU.

Certain Personal Data may then be communicated to them for the strict needs of their missions. These cases are governed by the following different mechanisms:

Protection by standard contractual clauses

In this case, in accordance with the regulations in force, KONTIKI MEDIA LTD requires its subcontractors or sites established outside the EU to provide the necessary guarantees, for the continuity of protection, in particular by signing clauses standard contractual agreements of the European Commission as defined by COMMISSION IMPLEMENTING DECISION (EU) 2021/914 of 4 June 2021 (and available on request) and by the implementation of additional and appropriate security measures in order to ensure the protection of your personal data.

 

Countries classified as adequate or partially adequate

Personal data is transferred to countries recognized as offering an equivalent level of protection.   

         

Particular case

UK, in the context of Brexit

7. How long we keep your information

The company KONTIKI MEDIA LTD, in compliance with current legislation, will not retain the Personal Data of candidates and of the people concerned only for the duration necessary to process the projects or for defined by law:

• Customers' personal data will be kept on an active basis for a maximum of five years, after the end of the contractual relationship.
• The data collected from the people concerned via registrations for competitions and/offers from collection partners will be kept for 3 years on an active basis from the last activity observed.
• The data collected from the persons concerned via their subscriptions to the KONTIKI MEDIA LTD newsletters will be kept until the unsubscribe request from the persons concerned and for a period of three (3) years on an active basis from the last activity observed at most.
• For employees, the texts have variable durations for the retention of certain data. (employment contracts, invoices, tax declarations,pension funds, etc.) without prejudice to legal retention obligations or limitation periods.

Beyond these periods, the data may be anonymized and kept exclusively for proof purposes and will not give rise to any exploitation of any kind whatsoever.

8. Reminder of your different rights and the principles defined by the GDPR

 

Under the provisions of the GDPR, you have the right to obtain clear, concise and transparent information from our company. The purpose of this document is mainly to meet the obligations of conciseness and transparency referred to in Article 13.

The GDPR guarantees you a base of rights:

-     General rights that we must respect whenever we process your data.

-   The exercise rights granted to you, allowing you to control the use made of your data, then to concretely exercise these rights by a request addressed to the Data Controller or the DPO of the organization: dpo[@]kontikimedia [.]com.

 

-      Right to information and its transparency

art. 13 of the GDPR (Why are my data collected?)

You have the right to know, at the time of collection, in simple and clear language, in a concise, understandable and accessible manner, the following information:

O  Why we collect your data

O  For what goals or objectives, for what purposes, in what context

O  What are the retention and destruction periods for your information?

O   To whom is your data transmitted and why

O   To know the legal basis and lawfulness of data processing

O   To know the origin of your data (direct or indirect source)

 

-      Right to know the purpose of processing that concerns you

art. 5.1.b of the GDPR (What is the purpose of this program that processes my information)

You have the right to have all the processing we implement for a specific, explicit and legitimate purpose.

We must bring to your attention the objective, purposes, and possible sub-purposes of each processing of personal data.

 

-      Right to compatible subsequent purposes

art. 5.1.b of the GDPR (I want to know if my data is not used by you to do “something else”)

You have the right that your data cannot be further processed in a manner incompatible with the purposes initially determined, and that it is processed only for these purposes.

 

-      Right to minimize the collection of your data

art. 5.1.c of the GDPR (Why are I asked for so much information about me)

The data collected must be adequate, relevant and limited to what is necessary for the purposes for which they are processed. Not beyond.

 

-      Right to accuracy of data collected and stored

art. 5.1.d of the GDPR (Am I sure my information is up to date?)

You have the right to have the data collected accurate and, if necessary, kept up to date. More particularly, all reasonable measures must be taken to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay if necessary.

 

-      Right to have your data not kept indefinitely

art. 5.1.e of the GDPR (How long do we keep my information?)

The data collected must be kept in a form allowing identification for a period not exceeding that necessary for the purposes for which they are processed. (retention limitation)

 

-      Right to demand that your data be kept secure

art. 5.1.f of the GDPR - art. 32 of the GDPR (How can I be sure that my personal information is protected?)

You have the right to have your data processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing, loss, alteration, unwanted modification, destruction or to be protected from damage of accidental origin, using appropriate technical or organizational measures (integrity).

We ensure the security and durability of your Personal Data by implementing a series of documented physical and logical protections in the conservation and backup of your data, in order to prevent it from being destroyed or corrupted. , modified, diverted, or altered.

 

-      Right to have your data remain strictly confidential

art. 5.1.f of the GDPR (Am I sure that everything will remain confidential?)

You have the right to have your data remain confidential and only people authorized for the purposes can have access to it. (strict confidentiality of your information)

 

-      Right for processing to be lawful

art. 6.1 of the GDPR (Under what conditions do I have the right to use my data?)

The processing of your data will only be lawful if

OConsent: you have consented to the processing of your personal data for one or more specific purposes,

OContract: or the processing is necessary for the performance of a contract to which you are party or for the execution of pre-contractual measures taken at your request,

OLegal obligation: or the processing is necessary for compliance with a legal obligation to which we are subject

OVital interest: or the processing is necessary to safeguard the vital interests of a natural person

OPublic interest: the processing is necessary for the execution of a mission of public interest or relating to the exercise of the public authority vested in us

OLegitimate interest: processing is necessary for the purposes of the legitimate interests pursued, unless overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

 

-      Right to have the existence of processing confirmed

art. 15-1 of the GDPR (I want to know if I appear in the company files)

You have the right to obtain confirmation that personal data concerning you are or are not being processed, and to know whether in one capacity or another you appear in our files.

 

-      Rights of access to your data

art. 15-3 & 4 of the GDPR (I want to obtain a copy of the information held about me)

You have the right to obtain confirmation that your Personal Data is or is not processed, and, if it is, to access all the information concerning you by obtaining an electronic or paper copy.

You have the right to have this request communicated to all departments of our company and to all our subcontractors.

 

-      Rights to obtain any information relating to processing concerning you

art. 15-3 & 4 of the GDPR (I want to know the reasons and details of the processing)

For each processing of personal data concerning you, present in our company or at any of our subcontractors, you have the right to have the following information communicated to you:

O the purposes of the processing; (art. 15-1a of the GDPR)

O the categories of personal data concerned; (art. 15-1b of the GDPR)

O the recipients or categories of recipients to whom the personal data have been or will be communicated; (art. 15-1c of the GDPR)

O where possible, the envisaged period of retention of personal data, or the criteria used to determine this period; (art. 15-1d of the GDPR)

O You can send any request to this effect to the Data Protection Officer referred to below.

 

-      Rights of rectification

art. 16 of the GDPR (I want to modify the data held about me)

You have the right to obtain the rectification of inaccurate, erroneous, incomplete or outdated data. The rectification of personal data must be carried out as soon as possible.

You also have the right to have personal data completed, including by providing a supplementary statement.

 

-      Right to erasure or “right to be forgotten”

art. 17 of the GDPR (I want to have all the data held about me deleted)

You have the right to obtain the erasure, as soon as possible, of Personal Data concerning you.

You have the right to request the erasure of your data for the reasons provided for by the applicable regulations and in particular when:

O The Data is no longer necessary for the purposes for which it was collected or otherwise processed;

O You have withdrawn the consent on which the processing is based, and there is no other legal basis for the processing;

O You object to the processing and there are no overriding legitimate grounds for the processing;

O You consider that your data has been the subject of unlawful processing;

O Your data must be erased to comply with a legal obligation.

 

-      General right to object

art. 21.1 of the GDPR (I object to data processing to which I have not consented)

You have the right to object, at any time, for reasons relating to your particular situation, to the processing of personal data concerning you based on legitimate interest or a mission of public interest.

We will no longer process this personal data unless there are compelling legitimate grounds for the processing which override your interests and your rights and freedoms of the data subject, or for the establishment, exercise or defense of claims. legal rights.

 

-      Right to withdraw previously given consent

art. 7-3 of the GDPR (I now object to data processing to which I had initially consented)

You have the right to:

O withdraw your consent at any time

O to be informed of this right when you give it

O that the revocation is as easy to carry out as when you gave your initial consent.

The withdrawal of this consent does not compromise the lawfulness of the processing based on the consent given before this withdrawal.

 

-      Special right to object to any commercial prospecting

art. 21.2 of the GDPR (I object to the processing of my data for prospecting purposes)

When personal data is processed or used for prospecting purposes, in an advertising, commercial or promotional context, you have the right to object at any time to the processing of your data without having to justify the reason.

 

-      Right to limit the processing of your data

art. 18 of the GDPR (I want to “freeze” my data without erasing them to subsequently exercise a right)

You have the right to obtain restriction of processing where one of the following applies:

 

O You contest the accuracy of the Data concerning you;

O You consider that the processing is unlawful and you object to the erasure of your data;

O The data concerned is still necessary for the establishment, exercise or defense of legal claims although we no longer need it.

 

-      Right to portability

art. 20 of the GDPR (I want to send a copy of my data to another organization)

You have the right to receive the Personal Data concerning you that you have provided to us, in a structured, commonly used and machine-readable format, and to transmit this data to another organization without us being able to obstruct it, when :

O the processing is based on consent or a contract

O processing is carried out using automated processes

 

-      Right to know if the provision of information about you is obligatory

art. 13-2-e (ii) of the GDPR (I want to know if I am obliged to respond to requests for information)

You have the right to know whether the requirement to provide personal data is a condition for entering into a contract and how you may be required to provide your information.

 

-      Right to know the consequences of refusing to provide information

art. 13-2-e (iii) of the GDPR (I want to know what will happen if I refuse to respond)

You should be aware of the possible consequences of not providing this data. In accordance with article 32 of the Data Protection Act, the information that you communicate to us through our collection forms is necessary to respond to your request and is intended for the services responsible for responding to your request for follow-up purposes.

However, you have the right to refuse to transmit this data to us, but you are informed that in this case, we may in turn refuse to respond to your requests.

 

-      Right to know the origin of the data we have about you

art. 15-1g of the GDPR (I want to know how you obtained my data and by whom)

Where your personal data is not collected directly from you, you have the right to know any information available to us as to its origin.

 

-      Right to be informed in the event of data transfer outside the EU

art. 15-2 of the GDPR (I want to know whether or not my data is transferred outside Europe)

You have the right to be informed of the appropriate guarantees taken by our organization if your data is transferred to a third country, outside the European Union.

 

-      Right to give the Controller  instructions in the event of death

art. 40-1 of the Data Protection Act (I wish to make arrangements for my data in the event of death)

You have the right to give us instructions on the fate of your personal data after your death.

 

-      Right to be notified of a data breach in the event of high risk

art. 34 of the GDPR (I must be informed if my data is hacked)

You have the right to be notified, as soon as possible, if we experience a personal data breach that may result in a high risk to your rights and freedoms.

In the event that we would take becoming aware of illegal access to personal data concerning you and corresponding to processing for which we are responsible, we undertake to notify you of the incident as soon as possible if this meets a legal requirement.

 

-      Right to complain to the supervisory authority

art. 15-1f of the GDPR - art. 77 of the GDPR (My rights are not respected, I file a complaint)

You have the right to lodge a complaint with a supervisory authority if you believe that your rights have been violated.

Nevertheless, We suggest that you first contact the DPO dpo[@]kontikimedia[.]com designated within our organization, in order to request information or clarifications and share your comments with them.

Under this link you will find information regarding the referral procedure provided by the ICO https://ico.org.uk/

 

-      Right to object to automatic profiling processing

art. 22-1 of the GDPR - art. 15-1h of GDPR (I refuse to have a robot make decisions for me)

You have the right to know and verify the existence of automated decision-making, including profiling, and in this case, the importance and possible consequences of this processing.

You have the right not to be subject to a decision based exclusively on automated processing, including profiling, producing legal effects concerning you.

In this case, you can ask for someone to review your evaluation, and for the decision to be made by a human.

 

-      Right not to be subject to an automated decision

art. 22-1 of the GDPR (I refuse to allow a robot to evaluate my information)

You have the right not to be subject to a decision based exclusively on automated processing, which could produce legal effects concerning you.

In this case, you can ask for someone to review your evaluation, and for the decision to be made by a human.

 

-      Right to dereference of published data

art. 17-2 of the GDPR (I would like to have public information deleted on my account)

You have the right, when he has made personal data public and is obliged to erase them, to require the controller, taking into account the technologies available and the costs of implementation, to take reasonable measures, including of a technical nature, to inform controllers who process such personal data that you have requested erasure by such controllers of any links to such Personal Data, or of any copies or reproduction of these.

This measure will not apply if the published data is necessary:

a) the exercise of the right to freedom of expression and information;

(b) to comply with a legal obligation which requires processing provided for by Union law or by the law of the Member State to which the controller is subject, or to carry out a task in the public interest or covered by the exercise of public authority vested in the controller;

(c) for reasons of public interest in the field of public health

(d) for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes, insofar as the exercise of this right is likely to make impossible or seriously compromise the achievement of the objectives of the said treatment

e) the establishment, exercise or defense of legal rights.

 

• Designation of a DPO with the ICO

art. 37 to 39 of the GDPR (Who will take care of the exercise of my rights?)

The company Kontiki Media, as Data Controller, is committed to respecting the regulations in force applicable to the processing of personal data and in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 known as the “European Data Protection Regulation” (GDPR), and Law 78-17 of January 6, 1978 amended by Law No. 2018-493 of June 21, 2018, known as the “Informatics and Liberties Law” amended.

In accordance with this regulation, by proving your identity, you benefit from the right of access, rectification, erasure or portability of your personal data, as well as the right to withdraw your consent previously given to processing. .

You can also, for legitimate reasons, totally or partially oppose data processing, or request its limitation.

You will find complete information on your various rights on the ICO’s site : https://ico.org.uk/for-the-public/

To exercise your various defined rights, you will need to prove your identity, and optionally in the event of a right of access request:

O      Tell us the reasons why you wish to exercise them;

O      Precisely define the scope of the data you want to copy;

O      Tell us the data format you want in return.

In certain cases involving the restitution of your data, an additional request relating to proof of your identity may be required. Otherwise, we will “freeze” the use of your data until receipt of proof. The request can only be granted after verification of the identity of the applicant.

Kontiki Media informs you that it reserves the right not to respond to requests that are manifestly abusive (for example due to their number, repetitive or abusive nature).

Partial opposition (or simple request to unsubscribe) is a right that you can exercise at any time during sending, through a link present on each email that you receive from us, there is no need to enter the DPO to that.

You can exercise your various rights by contacting the organization’s Data Protection Officer, preferably by email at:

dpo[at]kontikimedia[.]com 

or by mail to:

Kontiki Media LTD

For the attention of the Data Protection Officer

71-75 Shelton Street

Covent Garden

London - WC2H 9JQ - United Kingdom

-      Comprehensive information about all your rights

For more information on your rights, connect to the CNIL website at the address:

https://ico.org.uk/for-the-public/

You also have the right to contact the Commission directly if you believe that your rights have been violated, or that our company is not respecting its data protection commitments.

Furthermore, we inform you that if you do not wish to be the subject of commercial prospecting by telephone, you can register free of charge on a list opposing telephone canvassing. You can carry out this process online :https://www.tpsonline.org.uk/

9. Modification of this Data Protection policy

The company KONTIKI MEDIA LTD reserves the right to modify this Data Protection policy at any time, for example to take into account new data collected, modifications to our processing or our purposes, but also to bring us into compliance. case of change in certain legislative and regulatory provisions, in particular with regard to the Data Protection Act, or the GDPR.

We encourage you to review this document regularly to stay informed of any changes. However, in the event of a material change to our data privacy policy, you will be notified by email or when you log in to the site.