Introduction
At ARKY, we work to offer you the best possible experience through our products and services. In some cases, it is necessary to collect certain information to achieve this goal. We care about your privacy and believe we should be transparent about how we handle your data.
Therefore, and for the purposes of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016 (hereinafter, the “GDPR”), regarding the protection of natural persons with respect to the processing of personal data and the free movement of such data, we inform you as follows.
Data controller
Identity: ARKY SÀRL (hereinafter ARKY) Address: Avenue du Prieuré 13, 1009, Pully
Commercial Register ID: CH-550.1.193.967-4
Email: dpo@arky.art
ARKY has appointed a Data Protection Officer (DPO) within its organization. If you wish to make an inquiry regarding the processing of your personal data, you can contact them at dpo@arky.art.
Collection and processing of personal data
Below we detail the personal data that may be processed through our website, as well as the legal basis for such processing:
Browsing and cookie data: If you accept cookies when browsing our website, we may process data such as your IP address and non-personal data including user agent, date and time of access, browser type, and operating system details. More details can be found in our Cookie Policy.
Legal basis for data processing
The legal bases for processing your personal data are as follows:
Consent of the data subject for service and product contracting, contact forms, information requests, newsletter subscriptions, and optional cookies accepted by the user.
Compliance with legal obligations for fraud prevention, communication with public authorities, and third-party claims.
Retention of personal data
Your personal data will be processed for as long as necessary to fulfill the purpose for which they were collected, as well as to comply with applicable legal obligations. Data may also be retained as necessary for the establishment, exercise, or defense of potential legal claims.
For more information, please contact us at dpo@arky.art.
Recipients of personal data
In some cases, and only when necessary, ARKY may share your data with third parties. However, your data will never be sold.
External service providers assisting ARKY in the processing of data may have access to your information, strictly following ARKY’s instructions and solely for the purpose of correctly executing the contractual relationship.
ARKY works with the following providers:
PROVIDER
Amazon Web Services
PURPOSE
Data storage
DATA LOCATION
Ireland - EUA
ARKY ensures that personal data remain secure when transferred outside the company and that third-party service providers maintain confidentiality and appropriate data protection measures.
In certain cases, the law may require disclosure of personal data to public authorities or other parties. In such cases, only what is strictly necessary will be shared.
Storage of personal data
In general, data is stored within the European Union (EU). However, if data processing involves international transfers outside the European Economic Area (EEA), ARKY commits to implementing the necessary security measures to ensure an adequate level of protection.
This may include data processing agreements, Binding Corporate Rules (BCRs), or EU Standard Contractual Clauses.
For more information about our service providers, please contact us at dpo@arky.art.
Exercising your rights
You may send your communications or exercise your rights by contacting dpo@arky.art. Under the GDPR, you may exercise the following rights:
Right of access: Request information about the personal data we hold about you.
Right to rectification: Communicate any changes to your personal data.
Right to erasure (“right to be forgotten”): Request deletion of your personal data.
Right to restriction of processing: Request limitations on how we process your data.
Right to data portability: Obtain a copy of your data in a structured, commonly used, and machine-readable format to transfer it to another controller.
Right to object and automated decision-making: Request not to be subject to automated decisions, including profiling, that have legal or significant effects on you.
In some cases, a request may be denied if deletion of data conflicts with legal obligations. You also have the right to file a complaint with the relevant data protection authority.
Accuracy and veracity of data provided
You are solely responsible for the accuracy and correctness of the data you provide, holding ARKY harmless from any liability.
Users guarantee and are responsible for the accuracy, validity, and authenticity of the personal data provided and commit to keeping them updated. ARKY reserves the right to terminate services if data provided are false, incomplete, inaccurate, or outdated.
ARKY is not responsible for the accuracy of information not created by ARKY or for content sourced from third parties. ARKY also reserves the right to update, modify, or delete information on its website and may restrict or deny access to it.
Security measures
ARKY has adopted legally required levels of security for personal data protection and has implemented additional technical measures within its reach to prevent the loss, misuse, alteration, unauthorized access, or theft of personal data provided.
However, users should be aware that Internet security measures are not infallible. ARKY shall not be held responsible for damages resulting from system interruptions, computer viruses, telephone failures, or unauthorized third-party intrusions beyond its control.
11. Changes to the privacy policy
This Privacy Policy may be modified at any time. We recommend reviewing it periodically.