This page complements our Terms and Conditions and Privacy Policy. |
|
Last Updated: 25/05/18 |
|
BACKGROUND |
|
Bluepark Solutions Limited collects and stores the Personal Data of its direct Client and processes the Personal Data its Client collects from natural persons or organisations, through its online website. |
|
1 | DEFINITIONS |
|
1.1 | In this document, unless the context otherwise requires, the following expressions have the following meanings: |
|
| "Data Protection Laws and Legislation" means all laws and regulations, including laws and regulations of the European Union, the European Economic Area and their member states, Switzerland and the United Kingdom, applicable to the Processing of Personal Data; |
|
| "GDPR" means the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation); |
|
| "Data Controller" means the entity that determines the purposes and reasons of Processing of European Personal Information; |
|
| "Data Processor" means the entity that Processes European Personal Information on behalf of a Data Controller; |
|
| "Data Subject" means an identified or identifiable natural person to which European Personal Information relates; |
|
| "Process" and "Processing" mean any operation or set of operations that is performed upon European Personal Information, whether or not by automatic means, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure, or destruction; |
|
| "Subprocessor" means an entity engaged to assist in performing Services to Process European Personal Information or to which some European Personal Information Processing functions are outsourced; |
|
| "Subprocessing" means Processing of European Personal Information by a Subprocessor; |
|
| "Personal Data" means any information relating to (i) an identified or identifiable natural person and (ii) an identified or identifiable legal entity. Such data may be referred to as Customer Data; |
|
| "Privacy Policy" means the protection and security of the Personal Data held, the details of which can be found at https://www.bluepark.co.uk/privacy.html. |
|
2 | DATA PROTECTION AND PROCESSING |
|
2.1 | The Bluepark Solutions Client that engages with Data Subjects through its online website business, activity, or shop, is entirely responsible for Personal Information collected from Data Subjects (Customer Data) under the GDPR. Bluepark Solutions responsibilities are limited to the processing of that data, as a Data Processor, within the context of the Services provided to the Client as part of the Agreement and in accordance with Data Protection Laws and Legislation that prevail. |
|
2.2 | Bluepark Solutions will process the Personal Data of its Client, as a Data Processor, in accordance with the provision of the Services supplied under the Agreement. |
|
| 2.2.1 | The collection and use of the Personal Data will be limited to that which is necessary for the provision of the Services. |
|
| 2.2.2 | Consent to process the Personal Data will be required as part of the order process. To gain access to the Services the Client must accept the Terms and Conditions. Failure to comply will result in the Services not being made available to the Client. |
|
2.3 | Bluepark Solutions will implement and maintain appropriate technologies and organisational systems and procedures, to prevent data misuse, loss, or breach, by unauthorised persons or unlawful processes. |
|
| 2.3.1 | Bluepark Solutions personnel will take all necessary steps to preserve the confidentiality of the Personal Data in accordance with the Agreement and the Bluepark Solutions Privacy Policy. |
|
| 2.3.2 | The Client will be notified of: |
|
| 2.3.2.1 | any third party requests to share or divulge the Personal Data for any purposes, outside of the provision of the Services. The Personal Data will not be disclosed, unless required by Law; |
|
| 2.3.2.2 | any enquiries or complaints by any natural person or entity related to the processing of the Personal Data; |
|
| 2.3.2.3 | any security incident that results in the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, Personal Data. Notification will be without undue delay and in compliance with the Data Protection Laws and Legislation. |
|
2.4 | Bluepark Solutions may engage with Subprocessors in order to fulfil its contractual obligations within the context of provision of the Services, and by consenting to the Bluepark Solutions Terms and Conditions the Client signifies agreement to such use. Any contracted Subprocessor engaged must be compliant with the Data Protection Laws and Legislation. |
|
2.5 | Bluepark Solutions retains Personal Data sufficient to provide the Services under the Agreement. A specific request by the Client to access, modify, restrict, copy, return, or erase Personal Data will be complied with, without delay, but in compliance with any Legal or Regulatory requirements that may apply for the retention of any particular Data. |
|
3 | GENERAL |
|
3.1 | This Addendum and the existing Agreement complement each other. The purpose of this Addendum is to expand the Agreement in scope and nature. The relevant background, provision and parts should be read in conjunction with each other, where appropriate. Where any contradictions, inconsistences or conflicts between the terms of the Agreement and the Addendum arise, the Addendum will supersede the Agreement. All of the terms of the Agreement remain in full force except where modified by this Addendum. |
|
3.2 | Any amendments or modifications to the Addendum will be published on the Bluepark Solutions website, together with the publication date which will serve as the modification date. |
|
3.3 | The Client will agree to the Addendum and any modifications thereafter by the continuance of use of the Services under the Agreement. |
|