Data Privacy Notice

Objective of this Notice

This Data Privacy Notice (hereafter referred to as the "Notice") outlines how Chispa Lucro Oil ("Chispa Lucro Oil" or "We" or "Us") as the data controller, processes your personal data provided by you during your visit to our website chispalucrooil.org (the "Website"), or that we receive from third parties. The intent is to facilitate your connection with professionals relevant to your interests.

How do we gather your data?

We gather your personal data in the following ways:

• Directly from you when you share your Identification Data on our Website; and/or
• Indirectly through:
  • Receiving Identification Data about you from third parties
  • Collecting data related to your navigation on our Website using cookies or similar technologies (please refer to our Cookies Policy for more details).

While providing your personal data is voluntary, failing to do so might hinder us from connecting you with professionals who align with your interests.

What types of personal data do we process?

Chispa Lucro Oil gathers and processes the following categories of your personal data:

Category of personal data	Description
Identification Data	Includes your full name and contact details (phone number and email address).
Browsing Information	Details such as IP address, access times and dates, pages visited on our web and mobile sites, language preferences, reports on software crashes, browser type, device-related information, and online activities that are automatically collected, e.g., via cookies, web server logs, pixels, and web beacons.

Why and on what legal grounds do we process your data?

Chispa Lucro Oil processes your personal data for the following reasons:

Purpose	Legal basis	Categories of personal data processed
Connecting you with professionals offering services that may interest you	Your consent	Identification Data
Managing requests and adhering to legal requirements from regulators or other authorities, both within and outside your country.	Compliance with relevant legal and regulatory obligations.	Identification Data Browsing Information
Defending and enforcing our rights	Our legitimate interest in protecting our rights against users (including you), judicial, administrative, and/or law enforcement bodies.	Identification Data Browsing Information
Maintaining the functionality and security of our Website	Our legitimate interest in ensuring a secure and efficient Website.	Browsing Information

Your Rights Concerning Data Privacy

Under current data protection laws, you are granted a wide array of rights, including:

1. Right of Access: You can ask Chispa Lucro Oil for confirmation if your personal data is being processed and, if so, gain access to that data. This includes information about the purposes of processing, types of personal data processed, and possible data recipients.
   You are entitled to a copy of the processed data. For any additional copies, we may charge a reasonable fee based on administrative costs.
2. Right to Rectification: If your personal data is incorrect, you have the right to have it corrected. For processing purposes, you also have the right to complete any incomplete personal data, including through additional statements.
3. Right to Erasure ("Right to be Forgotten"): You can request that Chispa Lucro Oil erase your personal data under certain conditions.
4. Right to Restrict Processing: You can request the processing of your personal data to be restricted. In such cases, the data will be marked and processed by us only for specific purposes.
5. Right to Data Portability: You have the right to receive your personal data, which you've provided to Chispa Lucro Oil, in a structured, commonly used, and machine-readable format. Moreover, you have the right to transmit this data to another controller without obstruction from us.
6. Right to Object: You can object to the processing of your personal data based on your specific situation, at any time. If you object, we will stop processing your data for the objected purposes, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
7. Right to Withdraw Consent: If data processing is based on your consent, you can withdraw this consent at any time, without affecting the legality of processing based on consent before its withdrawal.
8. Post-Mortem Right to Data: You have the right to set guidelines regarding the handling of your personal data after your death.

Note: The exercise of these rights may be subject to certain conditions and limitations under local data protection law.

To exercise any of these rights, please contact us as mentioned in the "Contact Us" section below.

You also have the right to file a complaint with the competent French data protection authority, the CNIL.

Our Data Sharing Practices

We may share your personal data as follows:

• Within our corporate group;
• With our partners, for their processing purposes, provided you have consented to this sharing, to inform you about services/products that may interest you;
• With service providers who support our operations (e.g., storage, hosting, analytics, technical support);
• With our legal advisors, for compliance with our statutory obligations, including accounting, auditing, and internal controls;
• In the event of a business sale, asset transfer to a third party, or during company restructuring or reorganization;
• Where mandated or permitted by law, to government bodies, courts, external advisors, and similar third parties.

Cross-Border Data Transfers

Personal data collected by Chispa Lucro Oil may be transferred outside the European Economic Area (EEA). Transfers to countries recognized by the European Commission as providing adequate protection (e.g., Israel) are deemed to ensure an appropriate level of data protection. For transfers to countries not recognized as providing adequate protection, we ensure data protection through standard contractual clauses or other approved mechanisms, guaranteeing adequate safeguards.

Data Retention Policies

We retain your personal data only for as long as necessary for the purposes outlined in this Notice and in accordance with applicable laws. Once your personal data is no longer needed, it will be deleted or anonymized.

Contact Us

If you have any queries about this Notice, please contact us at [email protected].

Amendments to this Notice

This Privacy Notice may be updated from time to time. We will inform you of any significant changes as required by law.

Last updated: 01.11.2023