Published Date: December 31, 2019
Protecting your privacy is important to Kastor Studio SAS.
Personal Data is any information that would identify a person directly, or indirectly in combination with data from other sources. For example, a full name, home or work address, phone number, national identification number (SSN, SIN, etc.), email address, banking details, IP address, biometric data, usage data, or any information that may individually identify a person.
##Consent and Collection of Personal Data If you use a Kastor Studio website, or conduct a transaction through a Kastor Studio Service where Personal Data is essential, your consent is implied to collect and use your Personal Data to facilitate that use or complete that transaction requested or initiated by you only. Examples of instances in which Personal Data may be collected by Kastor Studio are, without limitation:
When you install a Kastor Studio App,
If you make or return a purchase through a merchant who uses aKastor Studio App,
When you access and navigate a Kastor Studio website, or engage in communication and/or business transactions with Kastor Studio Professional Services, Managed Services, Client Success, or any other Kastor Studio entity,
If you knowingly submit Personal Data through a Kastor Studio website for the purpose of registering for a service, a contest, or authentication.
During these instances, we may collect data such as, but not restricted to: areas of the Services or Kastor Studio websites you visit, transaction type(s) you engage in or request (and amounts thereof), content you view, your IP address, data downloaded or submitted by you, payment information provided by you, shipping and billing information entered by you, as well as the nature, quantity and price of the goods or services you exchange and the individuals or entities with whom you communicate or transact business using the Services.
In the event Kastor Studio requests Personal Data for scenarios independent of the above, such as marketing-related questions via questionnaires, surveys, and profile data, it will include a specific consent request. The consent request will include a clear purpose and goal for the collection of Personal Data, along with a means of withdrawing consent. In these scenarios, we may ask for data such as, but not limited to: your contact information (name, telephone numbers, email address, mailing address), date of birth, product and/or cosmetic concerns, which brands and products you use, user authentication and security information (e.g. username and password).
Age of Consent
The Services offered by Kastor Studio are directed towards and designed for the use of persons above the age of majority in your province, state, or country. Persons under the age of majority are not permitted to use the Services on their own, and Kastor Studio will not approve applications of, or establish, or maintain accounts or memberships for, any persons below their respective region’s age of majority.
Personal Data Use
Kastor Studio may use collected Personal Data for such purposes as:
Helping to establish and verify the identity of users, and to keep user accounts secure,
Opening, maintaining, administering and servicing users’ accounts or memberships,
Providing Services and support to users,
Improving Kastor Studio’s websites, including tailoring its websites to users’ preferences,
Providing users with product or Service updates, promotional notices and offers, and other information about Kastor Studio and its affiliates,
Corresponding with you, and responding to your questions, inquiries, comments, and instructions,
Maintaining the security and integrity of Kastor Studio systems, and,
Complying with applicable laws.
Personal Data will only be retained by Kastor Studio for the length of time required to fulfill the purpose or complete the transaction for which it was collected, or as may be required by law. Beyond that point, Personal Data in the possession or control of Kastor Studio will be anonymized or securely destroyed.
Legal Basis for Processing
Lawful Basis for Processing
For the performance of a contract: To perform our contractual obligations to you, including account registration, fulfilling orders or purchases you have made (including processing of payment), contacting you in relation to any issues with your order, in relation to the provision of the Services, where Kastor Studio needs to provide your Personal Data to our service providers to provide the Services, or to aggregate and centralize data for the performance of the Services.
To meet legal obligations: To comply with laws, regulations, court orders, or other legal obligations or to assist in an investigation.
For legitimate interests: To operate Kastor Studio’s business and provide the Services, other than in performing our contractual obligations to you, except where overridden by the interests or fundamental rights and freedoms that require protection of Personal Data. For example, the following areas include processing permitted due to legitimate interests:
Communication. To communicate with you regarding the Services, including to provide you important notices regarding changes to Kastor Studio’s Terms of Service, and also to address your requests, inquiries, and complaints. Kastor Studio may send strictly necessary communications, including emails, even if you have opted out of receiving other Kastor Studio emails or communications. These types of communications do not require consent. Kastor Studio also processes your Personal Data for our legitimate interests when you communicate with us, including when you sign up for promotional materials and Kastor Studio has not asked you for your consent in that regard.
Respond to Your Requests. To respond to your requests for technical support, online services, product information or to any other communication you initiate. This includes accessing your account to address technical support requests.
Promotional Messages. Kastor Studio processes your non-sensitive Personal Data to provide you with promotional messages, including when you communicate with Kastor Studio or sign up for promotional materials, when you participate in special activities, offers, or programs, when we aggregate and centralize data, and when we share Personal Data with our service providers and vendors.
Surveys. To send you surveys in connection with our Services, unless commercial in nature. In those cases, a survey request may be sent to you if you have given Kastor Studio your consent to receive marketing from us.
Compliance with Law and Public Safety . To assist in the investigation of suspected illegal or wrongful activity, including sharing information with other entities for fraud, loss, and crime prevention purposes. To protect and defend Kastor Studio’s rights and property, or the rights or safety of third parties.
Improvement and Development. To develop, provide, enhance, and improve Kastor Studio Services and your experience, including to enable you to use the full range of our Services. For internal purposes related to certain research, analytics, innovation, testing, monitoring, customer communication, risk management, and administrative purposes.
Merger or Acquisition (Note that certain country/region-specific disclosures may also apply, depending upon the jurisdiction in which you reside). To support a contemplated reorganization or an actual reorganization of Kastor Studio’s business, in connection with financing, a sale, or other transaction involving the disposal of all or part of our business or assets, including for the purpose of permitting the due diligence required to decide whether to proceed with a transaction.
Consent as a Basis for Processing
In some cases, Kastor Studio will ask for your consent to process your Personal Data. You may indicate your consent in a number of ways, including, as may be presented by Kastor Studio and permitted by law, ticking a box (or equivalent action) to indicate your consent when providing us with your Personal Data through our Services or a form, or registering or creating an account with us. Note that certain country/region-specific rules regarding consent may also apply, depending upon the jurisdiction in which you reside.
Kastor Studio maintains reasonable physical, technical, and administrative security measures to minimize the risk of unauthorized loss, theft, copying, misuse, access, disclosure, alteration, or destruction of your Personal Data.
If transactions are offered as part of a Kastor Studio Service, transaction information is transmitted to and from Kastor Studio in encrypted form using industry-standard Secure Socket Layer (SSL) connections to help protect such information, including Personal Data transmitted in the course of these transactions, from interception.
Kastor Studio also restricts access to your Personal Information to only those persons who have a legitimate business need or legal requirement to view it in connection with the Services. You, as a Personal Data owner, may also authorize any persons you may choose to have access to your Personal Data.
Although Kastor Studio does utilize security measures appropriate to the level of risk, no method of data transfer or storage on the internet is 100% secure and security risks cannot be eliminated entirely. As such, Kastor Studio cannot guarantee perfect security, integrity, or confidentiality of Personal Data.
Kastor Studio maintains a security incident response protocol to be put in place in the event that the security of your Personal Data in the possession or control of Kastor Studio is compromised. In the event of a data breach or security incident involving the Services, Kastor Studio will apply this protocol to enable Kastor Studio to effectively and efficiently respond to, and contain, the breach or incident. Kastor Studio may also seek to notify you in such an event. If notification is appropriate or required, Kastor Studio may notify you by email, messaging to your device, or other reasonable means.
Disclosure of Personal Data
Kastor Studio does not provide Personal Data to unaffiliated third parties for their use in marketing directly to you. We may use unaffiliated companies, or trusted third party service providers, to help maintain and operate our Services for reasons related to our business operations and to better serve you, and those companies may receive your Personal Data for that purpose. For example, Kastor Studio may use third party payment processor services in connection with the Services and its websites, and the payment information that you provide to Kastor Studio may be disclosed to and used by these payment processors for the purposes of completing and executing transactions requested or initiated by you. When Kastor Studio shares Personal Data with third-party services that support our delivery of the Services, we require that they use your Personal Data only for the purposes we’ve authorized, and that they protect your Personal Data to at least the same standards used by Kastor Studio.
As part of agreements with merchants who have installed Kastor Studio Apps and the execution of transactions on behalf of merchants that make use of Kastor Studio Apps in connection with their online stores, we may disclose Personal Data which has been collected by us that is specific to that merchant’s store and your transactions in connection therewith.
Kastor Studio may also disclose Personal Data about you in connection with legal requirements, such as in response to an authorized subpoena, governmental request or investigation, or as otherwise permitted by applicable law (including, without limitation, to prevent fraud or abuse, or to protect Kastor Studio’s legal rights, property, or the safety of Kastor Studio, its employees, users or others).
Finally, as Kastor Studio’s business develops, it may sell or buy corporate assets, and in such transactions Personal Data may be one of the transferred business assets. If Kastor Studio, its internet businesses, or substantially all of its shares or assets, is acquired or an acquisition is contemplated, Personal Data may be one of the assets assessed or transferred in connection with that transaction.
Transfers of Your Personal Data to Other Countries
Where Personal Data is transferred from the European Economic Area to a country that has not received an adequacy decision by the European Commission, Kastor Studio relies on appropriate safeguards, such as for example the European Commission-approved Standard Contractual Clauses and EU-U.S. Privacy Shield Frameworks, to transfer the Personal Data.
“Cookies” and Advertisers
The Kastor Studio websites, or the third-party companies used to host, operate, or maintain these websites, may place a “cookie” on your computer in order to allow you to use these websites and to personalize your experience.
A “cookie” is a small piece of data, or an alphanumeric identifier, that can be sent by a web server to your computer or device, which then may be stored by your browser on your computer or device. Cookies allow Kastor Studio to recognize your computer or device while you are on our websites and help customize your online experience and make it more convenient for you. Cookies are also useful in allowing more efficient log-in for users, tracking transaction histories, and preserving information between browsing sessions. The information collected from cookies may also be used to improve website functionality.
Most web browsers have features that can notify you when you receive a cookie or prevent cookies from being sent. If you disable cookies, however, you may not be able to use certain personalized functions of Kastor Studio websites.
Rights with Respect to Personal Data
In certain circumstances, you may have the right to have your Personal Data, or certain components of your Personal Data, erased by Kastor Studio, to have your Personal Data moved, copy or transmitted from Kastor Studio’s systems to other systems, or to object to or restrict certain processing of your Personal Data by Kastor Studio. In the event that you wish to inquire about, or seek to exercise any of these rights (as they may be applicable), please contact Kastor Studio.
European Economic Area and the United Kingdom
To the extent that Kastor Studio’s processing of your Personal Data is subject to the General Data Protection Regulation, (or applicable laws covering the processing of Personal Data in the United Kingdom), Kastor Studiorelies on its legitimate interests, described above, to process your data. Kastor Studio may also process other information that constitutes your Personal Data for direct marketing purposes, and you have a right to object to Kastor Studio’s use of your Personal Data for this purpose at any time.
If you are a customer of a merchant who uses Kastor Studio’s Apps and wish to exercise these rights, please contact the merchants you interacted with directly – we serve as a processor on their behalf, and can only forward your request to them to allow them to respond.
If you are unhappy with the response that you receive from us, we hope that you would contact us to resolve the issue but you also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction at any time.
Kastor Studio Services may contain links to other websites, apps, or services, including those of advertisers or third-party content providers who offer downloads as part of a Kastor Studio Service. Kastor Studio is not responsible for the privacy practices or the content of other websites, apps, or services. We encourage you to read the Privacy Policies published by such third parties before divulging your Personal Data to them.
Contact & Questions