Last updated: 3/14/2022
- “Client” means a client of M*CARBO, whether retail or wholesale, who creates an Account (defined below) and purchases products through the Website.
- “Data Processor,” for the purposes of the GDPR (General Data Protection Regulation), refers to M*CARBO as the legal person which processes Personal Data.
- “Data Subject”, “You”, or “Your” means any person whose Personal Data is collected or processed by M*CARBO.
- “Facebook Fan Page” is a public profile named @M*CARBOtriggers specifically created by M*CARBO on the Facebook social network, accessible from http://www.facebook.com/M*CARBOtriggers.
- “Personal Data” or “Data” is defined as any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; (Art. 4, GDPR).
- “Website” means the <mcarbo.com> website and associated products and services.
- “User” means any user of the Website.
- “Account” means an account provided by M*CARBO to Client, which provides access to the Website.
2. Data Privacy in General.
- We respect data privacy and all data privacy rights. We aim to process and store any Personal Data received from Users and Clients or any third party in accordance with applicable data protection laws.
- We will not share Personal Data with any third parties except where necessary for the performance of legal contracts, and to provide services Users have requested and consented to. We aim not to collect, process, or store Personal Data for any purpose other than to provide Our services and comply with Our obligations to Users and Clients.
- We realize that data transmission over the Internet (for example, when communicating via e-mail) may have security gaps. Therefore, whenever possible We use encrypted communication connections and up-to-date security software.
3. What Data does M*CARBO Receive?
M*CARBO receives many types of data from our Clients, Users, and other parties including:
- Communication Data: Data sent to us when someone contacts us including via website contact forms, email, social media messaging, or social media posts.
- Customer Data: Data related to purchases and contracts created with M*CARBO including name, title, billing and/or shipping address, email address, phone number, other contact information, purchase details, and financial information.
- Marketing Data: Contact information and user preferences related to marketing and communications from M*CARBO.
- Third Party Data: M*CARBO Clients may provide Us with contact information of third parties for Us to execute Our contractual obligations when performing drop shipping services. Also, M*CARBO may receive data from third party vendors or service providers such as Google, Facebook, etc., related to marketing or advertising.
4. What does M*CARBO do with this Data?
- M*CARBO uses Personal Data to:
- Respond to and initiate business related and marketing communications;
- Execute contractual relationships, including accounts with Clients;
- Provide the Website and its associated services; and
- Improve User experiences on our Website and other platforms.
- M*CARBO may disclose Your Personal Data to:
- Service Providers to monitor and analyze the use of our Service, for payment processing, or to contact You;
- Business partners to offer You certain products, services or promotions; and
- Other users when You share Personal Data or otherwise interact in the public areas with other users as such information may be viewed by all users and may be publicly distributed outside.
- M*CARBO may also disclose Your Personal Data:
- When required by law. We may share Your Personal Data with third parties when required by law, such as upon receipt of a duly authorized subpoena or court order or in the event of an audit.
- For business transfers. We may share or transfer Your Personal Data in connection with, or during negotiations of, any merger, sale of M*CARBO, its assets, financing, or acquisition of all or a portion of M*CARBO to another company; and
- With Your consent.
5. Where and How does M*CARBO store this Data?
- All Data is securely stored on servers that are assigned to Our company and are located in the United States. Data will only be transferred to third parties to facilitate provision of Our services.
- Data will be deleted when M*CARBO no longer needs to keep it or if You have instructed Us to delete it.
6. What is M*CARBO’s legal basis to collect and process Data?
- M*CARBO collects and processes the above-described Data in order to comply with its contractual obligations, for communicating with Users and to administer the Website and Our business. Our lawful ground for processing this Data is our legitimate interest in providing Our services, maintaining business records, communicating with Users and Clients, performing our contractual obligations, and growing Our business through marketing.
- M*CARBO also obtains Your consent to collect and process Data. You provide this consent upon account creation and on our checkout page by selecting the checkbox confirming your agreement to these policies, and thereby using our Website.
- Cookies are pieces of information about when and how individuals use websites. M*CARBO collects some cookies about Your use of the Website to improve Your experience and Our services.
- You can set Your external browser to notify You when a cookie is sent. You can decide whether to accept or refuse the tracking of cookies. But, if You choose to turn off cookies, it may affect Your ability to access or use the Website.
8. Third Party Services.
- M*CARBO may need to share or transmit Data to third-party service providers to provide the services through the Website. M*CARBO will advise Users when Data is shared with third-party service providers or vendors.
9. Facebook Fan Page
- Data Controller for the Facebook Fan Page
- M*CARBO is the operator of its Facebook Fan Page, a third-party web service located at https://www.facebook.com/MCARBOtriggers, and, as such, M*CARBO and Facebook are joint controllers of Personal Data gathered by a User’s use of the Facebook Fan Page. M*CARBO has entered into agreements with Facebook that define the terms for use of the Facebook Fan Page, among other things. These terms are mostly based on the Facebook Terms of Service, which can be accessed at: https://www.facebook.com/terms.php.
- Facebook Insights
- We use the Facebook Insights function in connection with the operation of the Facebook Fan Page, and based on the GDPR, to obtain anonymized statistical data about Our Users. For this purpose, Facebook places a Cookie on the device of the User visiting Our Facebook Fan Page. Each Cookie contains a unique identifier code and remains active for a period of two years, except when it is deleted before the end of this period. Facebook receives, records and processes the information stored in the Cookie, especially when the User visits the Facebook services, services that are provided by other members of the Facebook Fan Page, and services by other companies that use Facebook services.
10. California Privacy Rights.
- California residents have a right to request that M*CARBO disclose what Personal Data We collect from you and whether, and how, We disclose or sell that Personal Data. California residents may also request that We delete any Personal Data collected or maintained by Us from You. To submit a request for a list of the categories of Personal Data collected from You or to request that M*CARBO delete Your personal information, please email us at email@example.com or send a letter to our US-based legal counsel at the following address:
American Safety Equipment, Inc. d/b/a M*CARBO
c/o Revision Legal, PLLC
444 Cass St., Suite D
Traverse City, MI 49684
United States of America
2. To verify Your request, M*CARBO may request certain information from You to confirm that You are a bona fide User of the Website, such as Your phone number, username, email address, city, state, or geographic location. You may also designate an authorized agent to make a request to M*CARBO to disclose or delete Your Personal Data. To do so, You must provide M*CARBO with proof that the individual or business has been appointed as Your agent, such as by providing a signed power of attorney form and accurate responses to any information requested by M*CARBO that may be necessary to confirm that You are a bona fide User of the Website, such as Your phone number, username, email address, city, state, or geographic location. California residents have a right not to receive discriminatory treatment by M*CARBO for their exercise of these rights conferred under California law.
11. Data Security.
- M*CARBO makes security a priority and utilizes security measures to protect against unauthorized access to or the unauthorized modification, publication, or destruction of Personal Data. These security measures include internal audits of Data collection, storage and processing practices and security as well as physical security measures to protect against unauthorized access to the systems where we store Data.
- M*CARBO restricts Data access to M*CARBO employees, contract workers, and agents who need such information to provide, develop, or improve the Website. These individuals are subject to confidentiality obligations and may be subject to disciplinary action, including dismissal and prosecution if they fail to meet these obligations.
12. Data Rights.
- Right to Access and Correction: You may request that We confirm to You whether We are processing Your Personal Data and what Data We are processing. If Your information is incorrect or incomplete, You may request that Your information be corrected or completed. If We have shared Your information with third parties, We will inform them of the correction, to the extent required by law.
- Right to Erasure: If the legal requirements exist, You can request We immediately delete Your Personal Data. This is especially the case when:
- Your Personal Data is no longer needed for the purposes for which it was collected;
- The legal basis for the processing of Your Personal Data was Your consent only and You have revoked it;
- You have objected to Data processing for promotional purposes;
- You have objected to Data processing based on the legal basis balance of interests for personal reasons and We cannot prove that there are legitimate reasons for processing;
- Your Personal Data has been processed unlawfully; or
- Your Personal Data must be deleted to comply with legal requirements.
- If We have forwarded Your data to third parties, We will inform them about the deletion, insofar as required by law. Please note that Your erasure right is subject to restrictions. For example, We may not or must not delete Data that We still need to retain due to legal retention requirements. Also, Data that We need in order to assert, exercise or defend Our legal rights is excluded from Your cancellation right.
- Right to Object to Processing
- If the legal requirements are met, You can request a limitation of Data processing from us. Relevant circumstances include when:
- You dispute the accuracy of Your Personal Data that We have (We must have the opportunity to verify this);
- We no longer need Your information for the purposes of processing, but You need it to assert, exercise, or defend Your rights;
- You have raised an objection for personal reasons and We can halt Data processing until your objection has been evaluated.
- If You can show a valid right to restrict Data processing, We mark the Data in question to ensure that it is processed only within the limits that apply to such restriction (for example, to defend legal claims or within the parameters of Your consent).
- Right to Data Portability
- You have the right to receive personally identifiable information You have given to us for fulfillment of the contract or on the basis of consent in a transferable format. In this case, You can also request that We transmit this data directly to a third party, insofar as this is technically feasible.
- Right to Revoke Your Consent
- If You have given us consent to the processing of Your data, You can withdraw it at any time for future processing. The lawfulness of the processing of Your data prior to revocation remains unaffected.
- Right to Object to Direct Marketing
- You can also object at any time to the processing of Your Personal Data for advertising purposes. Please note that there may be an overlap between Your revocation and the use of Your Data as part of an ongoing campaign.
- Right to Object for Personal Reasons
- You have the right, for reasons that arise from Your particular situation, to object to Our processing of Your Data to the extent that the processing is based on a legitimate interest basis. We will then stop processing Your Data, unless We can, in accordance with legal requirements, prove compelling legitimate reasons for further Data processing that outweigh Your rights.
- European Union Right of Appeal to a Supervisory Authority
- European Union residents have the right to file a complaint with a data protection authority. In particular, EU residents can contact the data protection authority, which is responsible for their place of residence or state, or who is responsible for the place where the violation of data protection law has taken place.
13. Asserting Your Rights
- If you wish to assert any of the above described rights, please address Your request by stating Your current address, Your date of birth and Your e-mail address to:
We will use Your information provided in this request exclusively for comparison with the information in Our database and thus for the protection of Your Personal Data against access by unauthorized third parties.
15. Questions and Suggestions
If You have any questions or suggestions about data protection, We look forward to receiving Your e-mail.
Please send electronic inquiries to: firstname.lastname@example.org.