Privacy Policy

This Privacy Policy applies to our website www.umami.law (the "website" or the "site"). The website is owned and operated by Julie Schmitt ("We", "Us", or "Our"). This Privacy Policy describes how we collect, use, share and secure the personal information you provide via the website. It also describes your choices regarding use, access and correction of your personal information. Personal information is information, or a combination of pieces of information that could reasonably allow you to be identified.

 

Personal information we use

You can generally visit our website without actively revealing any personal information about yourself. However, in certain areas of this site, we may ask you to contact us with questions or comments, or request more information about our services. In these cases, we will collect personal information from you directly as described below.

 

Information we collect directly from you

The categories of information that we may collect directly from you are:

• Personal details (e.g. name, title, employer or organisation)
• Contact details (e.g. phone number, email address, postal address or phone number)
• Additional information about your organization
• Demographic information (e.g. education status, etc.)
• Information we collect automatically from you, including data collected using cookies and other device identifying technologies.

We do not ask you for, access to track any location-based information from your mobile device at any time while downloading or using our services. 

 

Information we collect from other sources:

We may receive information about you from other sources, including third parties that help us: update, expand, and analyse our records; identify new customers; or prevent or detect fraud. We may also receive information about you from social media platforms including but not limited to when you interact with us on those platforms or access our social media content. The information we may receive is governed by the privacy settings, policies, and/or procedures of the applicable social media platform, and we encourage you to review them.

 

How we use your personal information and the basis on which we use it

We use your personal information to:

• communicate with you with respect to the services that we provide and respond to your questions or requests
• provide, improve and personalise our services
• send you newsletters and updates about our latest events and products
• personalise the marketing messages we send you to make them more relevant and interesting
• comply with the legal obligations to which we are subject and cooperate with regulators and law enforcement bodies.

We must have a legal basis to process your personal information. In most cases the legal basis will be one of the following:

• to fulfil our contractual obligations to you, for example to provide the services you request and to ensure that invoices are paid correctly. Failure to provide this information may prevent or delay the fulfilment of these contractual obligations
• to comply with our legal obligations, for example to respond to legally binding requests from regulators, law enforcement authorities or other government authorities
• to meet our legitimate interests, for example to understand how you use our services and to enable us to derive knowledge that enables us to develop new services. When we process personal information to meet our legitimate interests, we put in place robust safeguards to ensure that your privacy is protected and to ensure that our legitimate interests are not overridden by your interests or fundamental rights and freedoms
• to exercise our legal rights where it is necessary to do so, for example to detect, prevent and respond to fraud claims, intellectual property infringement claims or violations of law.

 

Your rights over your personal information

You have certain rights regarding your personal information, subject to local law. These include the following rights to:

• access your personal information
• rectify the information we hold about you
• erase your personal information
• restrict our use of your personal information
• object to our use of your personal information
• receive your personal information in a usable electronic format and transmit it to a third party (right to data portability)
• lodge a complaint with your local data protection authority.

If you would like to discuss or exercise such rights, please contact us at the details below.

We encourage you to contact us to update or correct your information if it changes or if the personal information we hold about you is inaccurate.

We will contact you if we need additional information from you in order to honour your requests.

 

Information Sharing

We may share your personal information with third parties under the following circumstances:

• Service providers and business partners. We may share your personal information with our service providers and business partners that perform marketing services and other business operations for us. For example, we may partner with other companies to offer customer service. These companies are authorized to use your personal information only as necessary to provide these services to us. 
• Law enforcement agency, court, regulator, government authority or other third party. We may share your personal information with these parties where we believe this is necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights or the rights of any third party. Where permitted by law or regulation and reasonably practicable, we will attempt to notify you of such requirements.
• The company or organisation that has made you an authorised user of the services, upon request.
• Asset purchasers. We may share your personal information with any third party that purchases, or to which we transfer, all or substantially all of our assets and business. Should such a sale or transfer occur, we will use reasonable efforts to try to ensure that the entity to which we transfer your personal information uses it in a manner that is consistent with this Privacy Policy. You will be notified via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.

Because we operate as global business, the recipients referred to above may be located outside the jurisdiction in which you are located (or in which we provide the services). See the section on "International Data Transfer" below for more information.

 

Information Security and Storage

We implement technical and organisational measures to ensure a level of security appropriate to the risk to the personal information we process. These measures are aimed at ensuring the on-going integrity and confidentiality of personal information. We evaluate these measures on a regular basis to ensure the security of the processing.

We will keep your personal information for as long as we have a relationship with you. Once our relationship with you has come to an end, we will retain your personal information for a period of time that enables us to:

• Maintain business records for analysis and/or audit purposes
• Comply with record retention requirements under the law
• Defend or bring any existing or potential legal claims
• Deal with any complaints regarding the services
• Enforce our commercial agreements.

We will delete your personal information when it is no longer required for these purposes. If there is any information that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further processing or use of the data.

 

International Data Transfer

Your personal information may be transferred to, stored, and processed in a country that is not regarded as ensuring an adequate level of protection for personal information under European Union law or by the European Commission. We have put in place appropriate safeguards (such as contractual commitments) in accordance with applicable legal requirements to ensure that your data is adequately protected. For more information on the appropriate safeguards in place, please contact us at the details below.

 

Links to other sites

Our site includes links to other websites whose privacy practices may differ from our practices. If you submit personally identifiable information to any of those sites, your information is governed by their privacy policies. We are not responsible for the privacy practices or the content of any sites to which the website provides links. We encourage you to carefully read the privacy statement of any website you visit.

Our website includes Social Media Features and Widgets, such as the Share this button or interactive mini-programs that run on our website (the "Features"). These Features may collect your Internet protocol address, which page you are visiting on our website, and may set a cookie to enable the Feature to function properly. Social Media Features and Widgets are either hosted by a third party or hosted directly on our website. Your interactions with these Features are governed by the privacy statement of the company providing it.

 

Contact Us

Umami is the controller responsible for the personal information we collect and process.

If you have questions or concerns regarding the way in which your personal information has been used, please contact office@umami.law.

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you have the right to make a complaint to the data protection authority.

 

Changes to the Policy

You may request a copy of this Privacy Policy from us using the contact details set out above. We may modify or update this Privacy Policy from time to time.

If we change this Privacy Policy, we will notify you of the changes. Where changes to this Privacy Policy will have a fundamental impact on the nature of the processing or otherwise have a substantial impact on you, we will give you sufficient advance notice so that you have the opportunity to exercise your rights (e.g. to object to the processing).

 

27 DECEMBER 2019