3. Information about us
4. Legal bases for collecting your data
5. When do we collect your data?
6. What personal data do we collect?
9. Minors and Children’s Privacy
10. How do we use the personal data we collect?
11. Do we share your data?
12. Where do we store your data?
13. How do we keep your data safe?
14. How long will we keep your personal data?
15. Your rights
17. Getting in touch
1. Introduction QUBS AG (“QUBS”, “we”, or “us”) understand that your privacy is important to you and that you care about how your personal data is used and shared online. We respect and value the privacy of everyone who visits our websites, qubs.toys and any current or future subdomains, and will only collect and use personal data in ways that are described here, and in a manner that is consistent with our obligations and your rights under the law.
2. Definitions Account – means an account required to access and/or use certain areas and features of our Sites; Cookie – means a small text file placed on your computer or device by our sites when you visit certain parts of our sites and/or when you use certain features of our sites Cookie Law – means the relevant parts of the Privacy and Electronic Communications (EC Directive) Regulations 2003; Personal data – means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case, it means personal data that you give to us via Our Site. This definition shall, where applicable, incorporate the definitions provided in the EU Regulation 2016/679 – the General Data Protection Regulation (“GDPR”) We/us/our – means QUBS AG a company registered in Switzerland.
3. Legal bases for collecting your data The law on data protection sets out a number of different reasons for which a company may collect and process your personal data, including:
• Consent – We collect and process your data with your consent via positive opt-in • Contractual obligations – We require the personal data to fulfill our contractual obligations • Legal compliance – If the law requires us to, we may need to collect and process your data • Legitimate interest – In specific situations, we collect and process your data for our legitimate interests in a way that can be reasonably expected as part of running our business and which does not materially infringe upon your rights, freedom or interests
45. When do we collect your data? • When you visit any of our sites • When you make an online purchase • When you create an account with us • When you engage with us on social media • When you download or install one of our apps • When you contact us by any means with customer support requests • When you enter competitions • When you choose to complete any surveys we send you • When you’ve given a third party permission to share with us the information they hold about you • We collect data from publicly-available sources when you have given your consent to share information or where the information is made public as a matter of law
6. What personal data do we collect? Depending upon your use of Our Site, We may collect some or all of the following personal and non-personal data :
• Name; • Date of Birth; • Business/company name; • Job title; • Contact information such as email addresses and telephone numbers; • Demographic information such as postcode, preferences, and interests; • IP address; • Username; • Password; • Social media username (if you interact with us); • Images and correspondent titles shared
We use the following cookies:
• Strictly necessary cookies. These are cookies that are required for the operation of our Website and Service. They include, for example, cookies that enable you log into secure areas of our Website or Service. • Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our Website and Service when they are using it. This helps us to improve the way our Website and Service works. • Functionality cookies. These are used to recognise you when you return to our Website. This enables us to personalise our content for you. • Targeting cookies. These cookies record your visit to our Website, the pages you have visited and the links you have followed. We will use this information to make our Website and the advertising displayed on it (if any) more relevant to you. We may also share this information with third parties for this purpose.
You can find more information about some of the individual cookies we use and the purposes for which we use them here.
We take measures to protect the technical information collected by our use of Google Analytics. The data collected will only be used on a need to know basis to resolve technical issues, administer the Site and identify visitor preferences; but in this case, the data will be in non-identifiable form. We do not use any of this information to identify Visitors or Users.
9. Minors and Children’s Privacy Protecting the privacy of young children is especially important. We do not knowingly collect the personal data from children under the age of 16 without obtaining parental consent. If we learn that personal data has been collected on our sites from persons under the age of 16 without verifiable parental consent, then we will take appropriate steps to delete this information. None of the data we collect from children is used for marketing purposes. We comply with both the Children’s Online Privacy Protection Rule (COPPA) in the United States and the General Data Protection Regulation (GDPR) in the European Union.
10. How do we use the personal data we collect? We may use your data for the following purposes:
• Providing and managing your account; • Providing and managing your access to our sites; • Personalising and tailoring your experience on our sites; • Supplying our products and/or services to you (please note that we require your personal data in order to enter into a contract with you); • Personalising and tailoring our products and/or services for you; • Replying to emails from you.
11. Do we share your data?
In certain circumstances, we may be legally required to share certain data held by us, which may include your personal data, for example, where we are involved in legal proceedings, where we are complying with legal requirements, a court order, or a governmental authority.
• Sharing on our sites. When you share and communicate using our sites, the shared content will be visible to all users of the site, including if they don’t have an account. • Sharing with third party partners. We may sometimes contract with third parties to supply products and services to you on our behalf. These may include payment processing, delivery of goods, search engine facilities, advertising, and marketing. In some cases, the third parties may require access to some or all of your data. Where any of your data is required for such a purpose, we will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, our obligations, and the obligations of the third party under the law.
12. Where do we store your data? Some or all of your data may be stored outside of the European Economic Area (“the EEA”). You are deemed to accept and agree to this by using our sites and submitting information to us. If we do store data outside the EEA, we will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the UK and under the GDPR.
We will take reasonable steps to maintain appropriate technical and organizational measures to protect the personal data you provide to us against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to your personal data.
13. How do we keep your data safe? We follow generally accepted industry standards to protect the information submitted to us, both during transmission and once we receive it. We maintain appropriate administrative, technical and physical safeguards to protect personal data against accidental or unlawful destruction, accidental loss, unauthorised alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of the personal data in our possession. This includes, for example, firewalls, password protection and other access and authentication controls. We use SSL technology to encrypt data during transmission through public internet, and we also employ application-layer security features to further anonymise personal data.
14. How long will we keep your personal data? Whenever we collect or process your personal data, we’ll only keep it for as long as is necessary for the purpose for which it was collected. At the end of that retention period, your data will either be deleted or anonymised so that it can be used in a non-identifiable way for statistical analysis.
15. Your rights You retain the right to request us to refrain from processing your data for the purposes of marketing. To exercise such right, you may reply to any information we send you, detailing your request that we refrain from sending any marketing correspondence, or you can exercise this same right by clicking unsubscribe on any marketing emails. If at any time we intend to use your data for such marketing purposes however, it is standard practice for us to make you aware in advance of collecting such data.
We may at times provide links on our Website to third party websites, including without limitation those owned or managed by our partner networks, affiliates or advertisers. These websites have separate privacy policies, and we, therefore, cannot accept any responsibility for the content. As such, choosing to follow these links is a choice you make at your own risk, and we advise that you check these websites’ individual privacy policies before submitting any personal data.
You retain at all times the right to access / amend / delete any personal data we hold about you or to exercise your right of data portability or to object to, or restrict, the purposes for which your personal data is processed on certain grounds. You may exercise this right by making a request in accordance with Data Protection Laws, by emailing firstname.lastname@example.org. You may also lodge a complaint with the UK data protection regulator, the Information Commissioner’s Office should you be dissatisfied with the way that we handle your personal data.