MULTI PARTS Data Protection and Privacy Policy

Overview

This Privacy Policy provides mandatory information as required under Articles 13 and 14 of the European General Data Protection Regulation (GDPR) regarding the transparency of personal data processing.

What information do we collect?

‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

How do we use and store the personal data?

The Personal Data collected by MULTI PARTS will only be those specifically required to fulfil orders, conduct business, or related requirements. Such data may be collected directly from the Data Subject or provided to MULTI PARTS via business partner. Such data will only be processed for the following purposes:

– Customer account set-up and personalization

– Delivery marketing and events communication

– Research and development

– Providing goods and services

– Legal obligations

– Meeting internal audit requirements

Personal Data shall only be retained for as long as it is required to fulfil contractual requirements or until such time as it is requested the data be removed.

Personal Data shall be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are collected and/or processed. Personal Data shall be accurate and, where necessary, kept up to date.

Legal basis for processing data:

MULTI PARTS will only process personal data under the following relevant conditions:

Consent: the individual has given clear consent for the processing of their personal data for a specific purpose.

Contract: the processing is necessary for compliance with a contract.

Legal obligation: the processing is necessary to comply with the law (not including contractual obligations).

Legitimate interests: the processing is necessary for the legitimate business interests of MULTI PARTS unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.

When do we share personal data?

MULTI PARTS treats the personal data confidentially and only discloses it or shares when this is necessary to provide services or conduct business operations as outlined in our purposes of processing.

If MULTI PARTS needs to pass the data outside of the European Economic Area it will provide an appropriate level of data privacy protection such as contractual clauses, data transfer agreements, etc.

How do we secure personal data?

Here are the technologies and procedures used by MULTI PARTS to protect the personal data:

– Employees are trained every year on data protection measures and information security

– Third party risks are managed through use of contracts and security reviews

– The access to private information is restricted by two distinct employee security credentials and limited to those individuals that require the data as part of their job duties

– The data is protected against accidental loss by frequent, redundant, and encrypted backups

– The unauthorized access is prevented by appropriate physical, technological, and organizational security measures

Your rights in relation to personal data:

If personal data is being processed, the data subject pursuant to the GDPR has the following rights:

1. Right of access (Art. 15 GDPR)

Upon request the data subject can obtain from us confirmation as to whether his/her personal data is being processed by us. If this is the case, the data subject can request us to give access to the information provided for by law (see Art. 15 (1) GDPR). We will also notify the data subject of appropriate safeguards pursuant to Art. 46 GDPR in the context of data transfer in case the data subject’s personal data is being transferred to a third country or to an international organization.

2. Right to rectification (Art. 16 GDPR)

The data subject has a right to rectification and/or completion if the processed personal data is inaccurate or incomplete. We must rectify the data without due delay.

3. Right to restriction of processing (Art. 18 GDPR)

Provided that the legal requirements are met (see Art. 18 (1) GDPR), the data subject has the right to restrict processing of the personal data. For consequences of the restrictions please refer to Art. 18(2) and (3) GDPR.

4. Right to erasure (Art. 17 GDPR)

The data subject has the right to demand from us erasure of personal data without undue delay, and we are obliged to immediately erase this data if any of the reasons pursuant to Art. 17 (1) GDPR applies. The right to erasure does not apply in cases of Art. 17 (3) GDPR.

5. Right to notification

If the data subject has exercised the right to rectification, erasure, or restriction of processing, we are obliged to notify each recipient to whom the personal data have been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. We must inform the data subject about those recipients upon your request.

6. Right to data portability (Art. 20 GDPR)

The data subject has the right to receive the personal data that he/she has provided to us in a structured, commonly used, and machine-readable format. For details, please refer to Art. 20 GDPR.

7. Right to object (Art. 21 GDPR)

The data subject has the right to object at any time to the processing of his/her personal data that is based on Art. 6 (1)(e) or (f)GDPR on grounds relating to his/her particular situation. Further details can be found in Art. 21 GDPR.

Data Protection Officer:

In case of any request concerning our use, integrity and/or accuracy of personal data or in the data subject wants to assert any of his/her rights mentioned above, the data subject may reach us by email at dataprotection@multiparts.net or by contacting us at the following address:

1649 Park Lane South,
Jupiter, FL 33458, USA