Identity of the controller
The following entity is responsible for the processing of personal data collected in connection with your use of this site and our solutions:
Info-System (UK) Ltd
Registration No. 05033169 (incorporated in England and Wales)
VAT No. MT17304212
Registered Address: 207 Regent Street, 3rd Floor, London, W1B 3HH, UK
Operational Address: 121, Mediterranean Street, St. Julians, STJ 1870, Malta
Why do we collect your data?
We collect your personal data for specific purposes and on different legal bases.In addition, and in accordance with Regulation 2016/679 of 27 April 2016 on the processing of personal data (“GDPR”), we have defined a legal basis for each of the treatments.Finally, we keep your personal data for a period of time in accordance with the applicable legal and regulatory provisions; and failing that, for a period strictly necessary and proportionate to the accomplishment of the purposes for which your data were collected. When we no longer need to use your personal data, we delete it from our information systems or anonymize it in order to prevent its identification irreversibly.
Your personal data may be collected on the following legal bases:
- based on your consent;
- for the execution of a contract or pre-contractual measures taken at your request;
- in accordance with a legal obligation to which we are subject;
- for the legitimate interests of the company and the controller.
| Processing purpose |
Period |
| Manage contact or information requests on our website |
10 years |
| Manage incoming email |
10 years |
| Manage requests to send a marketing document |
10 years |
| Accounting and financial management |
10 years |
Data collected
Information you provide to usOur website contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes an e-mail address. If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.
Depending on the form used, we collect the following data:
- first and last name;
- email address;
- telephone;
- organization/company, function, activity;
- form responses and comments.
Automatically collected data
We collect certain information through log files (log file) and cookies (cookie). This is mainly the following information:
Depending on the form used, we collect the following data:
- IP address;
- operating system, browser;
- Pages visited and queries;
- Login time and day;
- keywords and search query.
Using this information allows us to improve service and personalized welcome and produce statistics.For more information on cookies placed on the site, please see our Cookie Page.
Sharing personal data
In order to comply with legal and regulatory obligations, we may disclose this personal data to public bodies, administrative or judicial authorities and supervisory bodies, also called “authorized third parties”.
Human rights
The GDPR provides you with rights that you can exercise at any time. These include:
- IP address;
- Right to information means the right to clear, accurate and complete information on our use of personal data.
- Right of access means the right to obtain a copy of your personal data that we hold on the applicant.
- Right to rectification : the right to have your personal data rectified if it is inaccurate or out of date and/or to complete it if it is incomplete.
- Right to erasure/right to be forgotten : the right, under certain conditions, to have your data deleted or deleted, unless we have a legitimate interest in keeping them.
- Right to object: the right to object to the processing of personal data by us for reasons related to your particular situation (subject to conditions). You can do it by expressing your objection in the email that you send us.
- Right to withdraw your consent : the right at any time to withdraw your consent when processing is based on consent.
- Right to restriction of processing: the right, under certain conditions, to request that the processing of your personal data be temporarily suspended.
- Right to data portability : the right to request that your personal data be transmitted in a reusable format allowing it to be used in another database.
- Right not to be subject to an automated decision : the right to refuse fully authorized decision-making and/or to exercise the additional guarantees offered in this regard.
- Right to define post-mortem directives: the right to define directives regarding the fate of personal data after your death.
To exercise your rights, you can contact us at the email address that you can find on our website.:When you send us a request for the exercise of a right, we ask you to specify as far as possible the scope of the request, the type of right exercised, the processing of personal data concerned and any other relevant element, to facilitate the examination of your application. In addition, in cases of reasonable doubt, you may be asked to prove your identity.
Depending on the case, we will not always be legally obliged to respond positively to requests related to these rights.
Safety
The personal information we collect is kept in a secure environment. The people working for us are obliged to respect the confidentiality of your information.
To ensure the security of your personal information, we use the following measures:
- Access Management – authorized person;
- Login/Password;
- Firewalls.
We are committed to maintaining a high degree of confidentiality by integrating the latest technological innovations to ensure the confidentiality of your transactions.
However, as no mechanism offers maximum security, there is always a risk when using the Internet to transmit personal information.
Provision of personal data as statutory or contractual requirement;
Requirement necessary to enter into a contract;
Obligation of the data subject to provide the personal data;
possible consequences of failure to provide such data
We clarify that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual provisions (e.g. information on the contractual partner). Sometimes it may be necessary to conclude a contract that the data subject provides us with personal data, which must subsequently be processed by us. The data subject is, for example, obliged to provide us with personal data when our company signs a contract with him or her. The non-provision of the personal data would have the consequence that the contract with the data subject could not be concluded. Before personal data is provided by the data subject, the data subject must contact any employee. The employee clarifies to the data subject whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and the consequences of non-provision of the personal data.
Legal basis for the processing
Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6(1) lit. b GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services. Is our company subject to a legal obligation by which processing of personal data is required, such as for the fulfilment of tax obligations, the processing is based on Art. 6(1) lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or any other third party. Then the processing would be based on Art. 6(1) lit. d GDPR. Finally, processing operations could be based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 GDPR).
The legitimate interests pursued by the controller or by a third party
Where the processing of personal data is based on Article 6(1) lit. f GDPR our legitimate interest is to carry out our business in favour of the well-being of all our employees and the shareholders.