As a company based both in the USA and the UK, we are required to adhere to separate privacy standards, namely, the New Mexico Data Breach Notification Statute (“Section 57-12C-1”) and the UK`s Data Protection Act which implements the General Data Protection Regulation (“GDPR”). Given that the Section 57-12C-1 requirements are enshrined in the GDPR, we have for the sake of consistency elected a universal approach and ensure the processing of your personal data in line with the GDPR across all our business operations.
What is personal data?
Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
The Data Controller
The entity responsible for processing personal data is:
Blugency LLC
530-B Harkle Road, STE 100,
Santa Fe, NM 87505, USA
and
Blugency LTD
7 Bell Yard,
London WC2A 2JR, UK
Each mandate is exclusively handled by one of the above-mentioned firms - depending on the geographical location area of the mandate.
This privacy policy applies to the joint offer of Blugency LLC and Blugency LTD (hereinafter " Blugency"), which can be accessed under www.blugency.net (hereinafter "our website").
General Principles
Blugency processes your personal data for the purpose of fulfilling our (pre-) contractual obligations towards our clients. In this context, we process, for example, information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior on our website.
The processing of personal data (e.g., collection, retrieval, use, storage or transmission) always requires a legal basis or your consent.
Processed personal data will be deleted as soon as the purpose of the processing has been achieved and there are no longer any legally required retention obligations. If we process your personal data for the provision of certain offers or services, we will inform you below about the specific procedures, the scope, and purpose of the data processing, the legal basis for the processing, and the respective storage period. For further details on data processing when using our services please refer to our Data Processing Addendum. .
Data processing of users of our website
Log Files
When you access and use our website, we collect the personal data that your browser automatically transmits to our server, i.e., every access to our website and every retrieval of a file stored on the website are logged. This information is temporarily stored in a so-called log file. When you use our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security:
• name of the website accessed
• name of the retrieved file
• date and time of the retrieval
• amount of data transferred
• message about successful retrieval
• browser type and version
• the user's operating system
• the website from which you accessed our site
• IP address and the requesting provider
In the following cases, we partially disclose your personal data to the aforementioned service providers:
• Where appropriate, for the purposes described in the section "Processing Purposes and Legal Basis", including disclosure within Blugency
• If we believe that such disclosure is appropriate to enforce or apply terms of engagement and other agreements or otherwise protect and defend the rights, property, or safety of Blugency
• to comply with any judicial proceeding, court order or other legal process, or to comply with any governmental or regulatory investigation, or
• with your consent.
As a matter of policy, we only work with third-party service providers who provide an appropriate level of privacy, security, and confidentiality and who comply with all applicable legal requirements for the transfer of personal data outside the country in which it was originally collected.
Data security and security measures
We are committed to protecting your privacy and keeping your personal data confidential. To prevent manipulation or loss or misuse of your data stored with us, we take extensive technical and organizational security precautions, which are regularly reviewed and adapted to technological progress.
These include, among other things, the use of recognized encryption procedures (SSL). However, we would like to point out that, due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures are not observed by other persons or institutions outside our area of responsibility. In particular, data disclosed unencrypted - e.g., if this is done by e-mail - can be read by third parties.
We have no technical influence on this. It is the user's responsibility to protect the data he or she provides against misuse by encrypting it or in any other way.
Where do we store your information?
The personal data we collect in our offices is stored on the servers of our data storage provider Amazon AWS. In addition, technical and organizational security measures are used to protect the personal data you have provided against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons.
Websites of other providers
On our website there are so-called hyperlinks to the websites of other providers. When you activate these hyperlinks, you will be redirected from our website directly to the website of the other provider. You will recognize this by the change of URL, among other things.
We cannot accept any responsibility for the confidential handling of your data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please inform yourself about the handling of your personal data by these companies directly on these websites.
Facebook Remarketing
Our site uses the Facebook pixel and Signals, also known as the "conversion pixel" or visitor action pixel, from Meta Platforms Inc, ("Facebook"). When you visit our site, your browser loads this pixel. As a result, Facebook can recognize whether a Facebook ad was successful, e.g., led to a certain interaction on our site. This data is provided to us by Facebook anonymously and without reference to a specific person. Using this statistical data, we can evaluate the effectiveness of Facebook ads and record them for market research purposes. The legal basis for the data processing is your consent pursuant to Art. 6 (1) lit. a GDPR.
Google Analytics
On our website we use Google Analytics, a web analytics service provided by Google, Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about the use of this website by the users is usually sent to a Google server in the USA.
In the event that IP anonymization is activated on this website, however, Google will shorten the user's IP address beforehand within member states of the European Union and the UK. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymization is active on this website.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Users may refuse the use of cookies by selecting the appropriate settings on their browser, however, please note that if you do this you may not be able to use the full functionality of this website. The legal basis for the data processing is your consent pursuant to Art. 6 (1) lit. a GDPR.
Your rights in connection with data processing
You are entitled to the following Data Subject Rights:
• Right to object to processing
You are entitled to object to the processing of your personal data in certain cases.
• Right of access
You have the right to be informed whether and, if so, to what extent we are processing your data.
• Right of access
Subject to certain exceptions, you have the right to obtain confirmation as to whether or not we are processing your personal data. If this is the case you have a right of access to your data.
• Right to rectification
If the personal data we process is incomplete or inaccurate, you have the right to request that we complete or rectify the data at any time. If the personal data we process is incomplete or inaccurate, you have the right to request that the data be completed or corrected at any time.
• Right to erasure ("right to be forgotten")
Subject to certain exceptions, you have the right to request the erasure of all or some of your personal data if you consider that processing should cease. However, there may be reasons why immediate erasure is not possible (for example, where retention is required by legal or regulatory obligations).
• Right to restrict processing
You are entitled to request us to restrict the processing of your personal data in certain cases:
o If you dispute the accuracy of your personal data, you may request that its processing be restricted while we verify its accuracy.
You are entitled to request us to restrict the processing of your personal data in certain cases:
o If the processing of your personal data is deemed to be unlawful but you refuse to erase your personal data.
o If we no longer need the data for the purposes of its processing but you need it for the assertion, exercise or defense of legal claims.
o If you object to our processing of your data on the basis of our legitimate interests.
• Right to data portability
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or you can request that it be transferred to another controller.
• Right to complain
If you suspect that there may have been a data protection breach by Blugency, you can contact us at any time.
You also have the right to lodge a complaint with the competent data protection authority. As a rule, you can contact the supervisory authority of the federal state of your usual place of residence, your place of work, or our company headquarters for this purpose.
• Right to restriction of processing
You are entitled to request that we restrict the processing of your personal data in certain cases:
o If you dispute the accuracy of your personal data, you may request that its processing be restricted while we verify its accuracy.
o If the processing of your personal data is deemed to be unlawful but you refuse to erase your personal data.
o If we no longer need the data for the purposes of its processing but you need it for the assertion, exercise, or defense of legal claims.
o If you object to our processing of your data on the basis of our legitimate interests.
• Right to withdraw your consent
If your personal data is processed on the basis of your consent, you have the right to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of the processing based on your consent until you withdraw it.
Miscellaneous and Closing
Section 57-12C-1 Disclosure
It is in the nature of the internet that databases storing personal data may be breached inadvertently or through wrongful intrusion, we will, upon becoming aware of a breach notify all affected individuals without undue delay, along with the required notices, actions taken by us, and remedies considered.
Automated Decision Making and Profiling
No automated decision making, and profiling takes place at Blugency.
Do Not Sell
We do not sell personal data
Children
We do not process or collect personal data of children.
Accuracy
Pease discloses all relevant information necessary for us to provide services to you and ensure all information submitted to us is up-to-date, complete, and accurate.
Changes to this Privacy Policy
We reserve the right to change this privacy policy at any time in compliance with the applicable data protection regulations or any other change in the factual or legal situation. Therefore, please inform yourself at the beginning of each use of our website about the privacy policy applicable at that time.
This Privacy Policy was last updated on Wednesday, October 19, 2022