PRIVACY STATEMENT – SiGMA
Privacy Policy
We ask that you read this website Privacy Policy carefully as it contains important information on who we are, how and why we collect, store, use and share personal information, your rights in relation to your personal information and on how to contact us and/or the supervisory authorities in the event you have a complaint.
gENERAL INFORMATION
This website is operated by S.G. Worldwide Media Company Ltd, with registration number HE 415670 (hereinafter referred to as the “Controller” or “Company” or “We” or “Us”).
We collect and use certain personal information about you. When we do so, we are regulated under the General Data Protection Regulation 2016/679 (hereinafter referred to as the “GDPR”), which applies across the European Union, and the national law on the protection of personal data Law 125(I)/2018 (hereinafter referred to as the “Privacy Law”). We are responsible as ‘controller’ for that personal information pursuant to the GDPR.
our website
This Privacy Policy relates to SiGMA Website, hosted at https://www.xiaoqiushui.com/ (hereinafter referred to as the “Website”), and/or to the affiliated websites of SiGMA Group hosted at https://sigmaworld.events/, https://sigmamalta.events/,https://match.www.xiaoqiushui.com/,https://shop.www.xiaoqiushui.com/,https://adr.www.xiaoqiushui.com/ (hereinafter referred to as the “Affiliated Websites”).
The Website, is an informational website about our Company’s vision and goals, exhibiting at the same time our Company’s products, services and events that our Company proudly hosts worldwide.
S.G. Worldwide Media Company Ltd is one of the legal entities which constitute the SIGMA Group and S.G. Worldwide Media Company Ltd is the relevant company of the group responsible for processing your personal data.
Sigmaworld Events Website: Kindly note that, in case you are booking tickets for an event that is taking place in the EU, we will transfer you for payment processing to the site sigmaworld.events. On this website personal data is processed by Viking PC Health Ltd, which is part of the SIGMA Group. Such processing of personal data is subject to this Privacy Policy.
Sigmamalta Events Website: In case you are booking tickets for an event that is taking place outside of EU (worldwide), we will transfer you for payment processing to the site sigmamalta.events. On this website personal data is processed by SG Worldwide Media Company Ltd. Such processing of personal data is subject to this Privacy Policy.
Sigma Match Website: Is an informative website regarding our free networking tool which can be used by our attendees during our events. Through the website you can create your account and use our networking tool for free.
Sigma Shop Website: Whereas through Sigma shop website you may find a wide range of merchandise and event tickets.
Sigma ADR Website: Is serving as a mean for alternative dispute resolution. Through the said website the users will be able to file and resolve their complaints.
Throughout our Website and Affiliated Websites we may link to other websites, owned and operated by certain trusted third parties and partners. These other third-party websites may also gather information about you in accordance with their own separate privacy policies. For privacy information relating to these other third-party websites, please consult their privacy policies as appropriate.
What information we collect
We collect personal information about you when you access our Website and Affiliated Websites.
We collect personal information from you either directly, such as when you contact us via our contact us form, register as attendee or speaker for our events, chat with us via our online chatbot and/or registering to our newsletter or indirectly, such as when you are browsing while on our Website, via cookies (see section ‘Cookies’ below).
The personal information we collect about you, depends on the particular activities carried out through our Website and Affiliated Websites.
This information include cookies (hereinafter referred to as “Cookies”) and/or the below personal information, which are being collected when you are trying to connect with us via our ‘contact us form’:
- First Name;
- Last Name;
- Email Address;
- Country; and
- Phone Number.
And/or via our registration forms to attend our various events/buy tickets:
- First Name;
- Last Name;
- Business Email Address;
- Phone number or whatsapp number;
- Job title;
- Company name;
- Company website;
- Business type;
- Country; and
- Nationality.
And/or via our registration forms to use our networking tool at match.www.xiaoqiushui.com:
- First Name;
- Last Name;
- Email Address;
- Country; and
- Phone number or whatsapp number;
- Job title;
- Company name;
- Company website;
- Business type; and
- Country
And/or via our registration forms to purchase our merchandise or other products at shop.www.xiaoqiushui.com:
- First Name;
- Last Name;
- Email Address;
- Phone number or whatsapp number;
- Company name;
- Address;
- Country.
And/or via our speaker registration forms to speak to one of our various events:
- First Name;
- Last Name;
- Job title;
- Company name;
- Email address;
- Phone number;
- Type of business;
- LinkedIn profile;
And/or via our alternative dispute resolution tool at adr.www.xiaoqiushui.com:
- First Name; and
- Email address.
And/or via our online chat:
- Email address(when we are offline).
Moreover, we are collecting your email address when you are requesting to be registered to our newsletter.
(hereinafter referred to as your “Personal Information”)
For the purposes of completing any purchase through our Website or Affiliated Websites, you will be redirected to websites and/or platforms of some of our trusted third party service providers for checkout purposes. These other third-party websites and/or platforms may also gather information about you in accordance with their own separate privacy policies. For privacy information relating to these other third-party websites and/or platforms, please consult their privacy policies as appropriate.
Purpose of the collection
The purpose of collecting Cookies is in order to,
– enable the smooth operation of our Website in general and provide you with constant, uninterruptible and error-free access to our Website;
– monitor how effective and popular our Website is, how to improve it, tailoring it to our visitors and their interests and needs.
While, the purpose of collecting your Personal Information via our ‘contact us form’ or via our online chat is to enable us to revert and respond to your request/inquiry.
Whereas, the purpose of collecting your Personal Information while registering you as an attendee or speaker to our events or while you are registering to use our networking tool or while you are buying our merchandise is to enable us to enter into a contract with you and successfully register you as an attendee or speaker to our events, register you in our networking tool or provide you with our products, upon your request.
Moreover, through our website and our ‘contact us form’ we are providing you the option to opt-in to our newsletter in order to start receiving news and marketing material regarding SiGMA products, services, events etc. In case you opt-in to our newsletter, we will be giving you the option, through every email that you will be receiving from us, to opt-out from our newsletter list.
We do not collect and we do not use any personal information other than that specifically mentioned above, without your explicit consent.
This Website is not intended to be used by children.
We do not use automated decision-making processes or profiling while processing your personal data.
OUR LEGAL BASIS FOR PROCESSING YOUR PERSONAL INFORMATION
When we use Cookies and/or your Personal Information we are required to have a legal basis for doing so. There are various different legal bases on which we may rely on, depending on what personal information we process and why.
– Consent: where you have given clear consent for us to process your Personal Information for a specific purpose, such as when you are submitting a request/inquiry via our ‘contact us form’, or via our online chat or when you opt-in to our newsletter or when you enable analytic cookies on our Website;
– Performance of Contract: when you are buying a ticket/registering as an attendee of our events and/or when you are registering to become a speaker to our events and/or when you are registering to use our networking tool and/or when you are placing an order through our online shop, we are obliged to perform our obligation under our agreement to proceed your order/request.
– Legitimate interests: where the use of your personal information is necessary for our legitimate interests or the legitimate interests of a third party (unless there is a good reason to protect your personal information, which overrides our legitimate interests), such as ensuring website and user security, improving user’s experience, user interface design and overall performance of the website, i.e. strictly necessary cookies and/or where needed, to establishment, exercise or defense legal claims, disputes and judicial investigations.
COOKIES AND OTHER TRACKING TECHNOLOGIES
A cookie is a small text file which is placed onto your device (e.g. computer, smartphone or other electronic device), when you use our Website. We use Cookies on our Website. These help us, amongst other things, to recognize you and your device and store some information about your preferences or past actions.
For further information on cookies, our use of ‘cookies’ and/or on relevant similar technologies, please see our Cookie Policy.
HOW TO KEEP YOUR DATA
We process your personal information at our offices, in Limassol, Cyprus and/or Malta and then we are using third party cloud services, located in Germany, where the information is safely kept and stored.
For the storage and security of your personal data the Company takes all the necessary technical and organizational measures to ensure that the processing is carried out in accordance with the applicable local laws and the GDPR (access control, firewalls, antivirus, cryptography, etc.).
data recipients
Within our Company, your personal data is only accessible by the strictly required personnel and only for the purposes mentioned above.
Outside our Company, recipients of your personal data may be any subcontractors or third parties who cooperate and/or provide services in the context of its business, such as companies that provide email services, web hosting services, information technology services, legal representatives, event hosting etc. Some of our trusted third party service provides who may be recipient of your personal data are:
- Google Analytics(Google Inc);
- HubSpot Inc;
- Asana;
- Xero Limited;
- Malta Tourism Authority(MTA);
- Dubai Government/Department of Tourism and Commerce Marketing (DTCM)
We choose our associates very carefully, after the necessary checks have been carried out and sufficient guarantees have been provided to implement appropriate technical and organizational measures in such manner that processing will meet the requirements of the GDPR and the relevant laws and ensure the protection of your rights.
We may also need to:
– disclose and exchange information with law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations;
– share some personal data with other parties, such as potential buyers of some or all of our business or during a restructuring. Your information in such cases will be anonymized, but this may not always be possible, however, the recipient of the information will be bound by confidentiality obligations.
If you would like more information about who we share our data with and why, please contact us (see ‘How to contact us’ below).
RETENTION PERIOD
Personal data provided to us via our Website or Affiliated Websites will only be stored until the purpose for which they were processed has been fulfilled or – in the case of consent – until you withdraw your consent.
Insofar as retention periods under commercial and tax law must be observed, the storage period for certain data can be up to 7 years. However, storage periods may also be amended due to our legitimate interest (e.g. to guarantee data security, to prevent misuse or to prosecute criminal offenders).
After this period, your personal data will be irreparably destroyed. Any data kept by us for marketing and information purposes, if applicable, will be retained until you inform us that you no longer wish to receive such information.
Any requests for further information in relation to the continued processing of specific data and requests for destruction of data should be made to [email protected].
TRansfers of data outside the eu/eea
In the event that you are purchasing tickets for our events in Brazil and Dubai, your personal information may be transferred to some trusted third party companies/organizations located within the aforesaid countries for the purposed of the ticket purchase procedure. In such cases, where your data will be transferred to entities or other third parties whose headquarters or place of data processing is not located in a member state of the European Union or the European Economic Area, we ensure before forwarding the data that, outside of legally permitted exceptional cases pertaining to the recipient, either an appropriate level of data protection exists (e.g. through an adequacy decision of the European Commission, through suitable guarantees, or through the agreement of EU standard contractual clauses between us and the recipient), or your sufficient consent exists.
security
We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorized way. These measures include, but are not limited to, access control, internal audit etc. Furthermore, we limit access to your personal information to those who have a genuine business and need to know it. Those processing your information will do so only in an authorized manner and are subject to a duty of confidentiality. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
Your Rights
As a data subject, you may contact us at any time to make use of your rights, which are, the right to:
(a) receive information about the data processing and a copy of the processed data;
(b) demand the rectification of inaccurate data or the completion of incomplete data;
(c) demand the erasure of personal data;
(e) receive the personal data concerning the data subject in a structured, commonly used and machine-readable format and to request the transmittance of these data to another controller in certain situations;
(f) object to the data processing;
(g) withdraw a given consent at any time to stop a data processing that is based on your consent;
(h) complain to a competent supervisory authority.
In response to such requests, we reserve the right to require the individual making the request to provide certain details about herself/himself so that the we can validate that the individual is indeed the person whom the data refers to. We are required to respond to the request of the individual within 30 days and we will endeavour to do so wherever possible. We reserve the right to charge a reasonable fee to cover any expenses that may arise from the request.
In cases a data subject chooses not to provide any personal data, or where any of the rights set out above are exercised to limit the processing of personal data, we may be unable to provide relevant services, or there may be restrictions on the services which can be provided.
In certain circumstances your right of access may be lifted in whole or in part in accordance with the provisions of the Privacy Law:
(a) for purposes of proper fulfilment of our or the supervisory authorities’ duties and supervisory authorities, as these are derived from the AML Law; or
(b) to avoid obstruction of official or legal inquiries, analyses, investigations or procedures for the purposes of the AML Law and to ensure that prevention, investigation and detection of money laundering and terrorist financing is not jeopardised.
Further, as per the GDPR, your right to erasure can also be lifted to the extent that processing is necessary:
(a) for exercising the right of freedom of expression and information.
(b) for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject;
(c) for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) of the GDPR as well as Article 9(3) of the GDPR;
(d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) of the GDPR in so far as the right referred to in paragraph 1 of Article 89 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
(e) for the establishment, exercise or defence of legal claims.
For further information on each of those rights, including the circumstances in which they apply, please contact us (see ‘How to contact us’ below).
In the event that you wish to complain about how we have handled your personal data, you may contact us (see ‘How to contact us’ below). We will then look into your complaint and work with you to resolve the matter.
If you still feel that your personal data has not been handled appropriately according to the law, you can submit your complaint with the Office of the Commissioner for Personal Data Protection, at Kypranoros 15, Nicosia 1061, Cyprus, Tel. +35722 818456 Email: [email protected].
HOW TO CONTACT US
You can contact us by post or email if you have any questions about this Privacy Policy or the information we hold about you, to exercise a right under data protection law or to make a complaint. Our contact details are shown below:
S.G. WORLDWIDE MEDIA COMPANY LTD
Postal address: Agias Marinas 6, Germasogeia 4044, Limassol, Cyprus
Email address: [email protected]
CHANGES TO THIS PRIVACY POLICY
This Privacy Policy was last updated on 13th of May 2024.
We may change this Privacy Policy from time to time and when we do so, we will inform you via a notification on our Website or via other means of contact, when this considered necessary.