Arkessa | About Us | Global IoT Connectivity

Privacy Notice

Privacy Statement

We understand that privacy and the security of your personal information is extremely important. For this reason, this policy sets out what we do with your information and what we do to keep it secure. It also explains where and how we collect your personal information, as well as your rights over any personal information we hold about you.

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy policies. When you leave our website, we encourage you to read the privacy policy of every website you visit.

Data protection principles

We will comply with data protection law. This says that the personal information we hold about you must be:

Used lawfully, fairly and in a transparent way.
Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
Relevant to the purposes we have told you about and limited only to those purposes.
Accurate and kept up to date.
Not kept in a form which permits identification of Data Subject and kept only as long as necessary for the purposes we have told you about.
Kept securely and processed in a manner that ensures its security using appropriate technical an organisational measures to protect against unauthorised or unlawful processing and against accidental loss, destruction or damage.
Not transferred to another country without appropriate safeguards being in place.
Made available to Data Subjects and allow Data Subject to exercise certain rights in relation to their Personal Data.

Who are we?

Arkessa Limited is a technology leader in the provision of platforms, management tools and connectivity to the IoT and M2M markets.

When we say ‘we’ or ‘us’ in this policy, we’re generally referring to the separate and distinct legal entities that make up Arkessa Limited and Arkessa GmbH (“Arkessa”), although it doesdepend on the context. These include:

Arkessa Limited (registered office: Horizon, Honey Lane, Hurley, Berkshire SL6 6RJ United Kingdom)
Arkessa GmbH (registered office: eine Gesellschaft nach deutschem Recht (AmtsgerichtKempten, HRB 14018) mit Sitz in 87616 Marktoberdorf, Alte Marktoberdorfer Str. 14, Deutschland)

What information do we collect about you?

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We will collect, store, and use the following categories of personal information about you:

Information that you provide to us such as your name, title, addresses, telephone numbers, mobile numbers, email addresses, billing addresses, delivery addresses and any feedback you give to us, including by telephone, email, post, or when you communicate with us via social media.
Your account login details, including your username.
Information about the services that we provide to you (for example, the products and services we have provided to you, when and where, what has been paid, the way you use our products and services, and so on).
Information about any device you have used to access our services (such as your device’s make and model, browser, or IP Address) and how you use our services. For example, we try to identify which of our features you use and when and how you use them. If you use our websites, we try to identify when and how you use those websites too.
The details of the emails and other electronic communications you receive from us, including whether that communication has been opened and if you have clicked on any links within that communication. This is to help us improve our services and what we communicate with you.

There are “Special Categories” of more sensitive personal data which require a higher levelof protection. We do not usually collect sensitive data about you unless there is a clear and valid reason for doing so and data protection laws allow us to.

Our legal basis for processing your personal information

We will only use your personal information when the law allows us to. The different legal bases we rely on are:

Consent: You have told us that you are happy for us to process your personal information for a specific purpose.
Legal obligation: We are required to process your personal information by law.
Legitimate interests: The processing is necessary for us to conduct our business, but not where our interests are overridden by your interests or rights.

Performance of a contract: We must process your personal information to perform the contract we have entered with you.
Vital interests: The processing of your personal information is necessary to protect you orsomeone else’s life.
Public task: The processing is needed in the public interest or for official purposes.

Where we rely on your consent, you have the right to withdraw such consent at any time. Where you withdraw consent, we will stop using your data for the specific purpose, unless we have an alternative legal basis to use it.

How do we use your information?

The kind of information we hold about you primarily allows us to perform our contract with you and to enable us to comply with legal obligations. In some cases, we may use your personal information to pursue legitimate interests of our own or those of third parties, provided your interests and fundamental rights do not override those interests.

If you fail to provide certain information when requested, we may not be able to perform the contract we have entered with you, or we may be prevented from complying with our legal obligations.

We may use your information in the following ways:

Process orders that you have submitted.
Manage your account.
Carrying out our obligations under any contracts entered between you and us.
Keeping a record of your relationship with us.
Contact you if necessary.
Send information to you about our products and services from time to time by email or other means (subject to an objection or preference you may indicate).
Seek your views or comments on the services we provide.
Notify you of changes to our services.
Analyse and produce reports, perform market research and statistical analysis and to monitor usage behaviour. We may pass this data to certain third parties.
Enhance and personalise the products and services that we offer you and to develop new products and services.
Help answer your questions, solve any issues, investigate any complaints or other enquiries that you submit to us.

Some of the above grounds for processing will overlap and there may be several grounds which justify our use of your personal information.

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Who might we share your information with?

We may pass your information to our third-party service providers, suppliers, agents, sub- contractors and other associated organisations for the purposes of completing tasks and providing services to you on our behalf.

We require third-parties to respect the security of your data and to treat it in accordance with the law.

We will share your personal information with third-parties where required by law, where it is necessary to administer the working relationship with you or where we have another legitimate interest in doing so

All our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal information data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.

We may share your personal information with our third-parties, for example in the context of the possible sale or restructuring of the business. We may also need to share your personal information with a regulator or to otherwise comply with the law.

We will not sell your information to third-parties nor will we share your information with third- parties for direct marketing purposes.

Keeping you informed about our products and services

We would like to send you information about products and services of ours which may be of interest to you from time to time. If you have consented, we may do this through email, post, text message, online, social media, app notifications or by any other electronic means.

Our aim is not to be intrusive, and we undertake not to ask irrelevant or unnecessary questions. The information you provided will be subject to rigorous measures and procedures to minimise the risk of unauthorised access or disclosure.

You have a right at any time to stop us from contacting you for marketing purposes, but we will still need to send you occasional service related messages. You can amend your marketing preference by selecting to un-subscribe from the message.

Data security

We have put in place measures to protect the security of your information. Details of these measures are available upon request.

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed.

In addition, we limit access to your personal information to those employees, agents, contractors and other third-parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Data Retention

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances, we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.

The length of time we retain your personal information for is determined by operational and legal considerations. For example, we are legally required to hold some types of information to fulfil our statutory and regulatory obligations e.g. 6 years for accounting purposes.

We review our retention periods on a regular basis.

Your rights as a data subject

You have several rights under data protection legislation which, in certain circumstances, you may be able to exercise in relation to the personal information we process about you.

These include:

Right of access – you have the right to request a copy of the information that we hold about you.
Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete and you should do so as soon as you become aware that the data we hold is incorrect or out of date.
Right to erasure – in certain circumstances you can ask for the data we hold about you to be erased from our records where there is no good reason for us continuing to process it.
Right to restriction of processing – where certain conditions apply to have a right to restrict or suspend the processing of personal information about you.
Right to request transfer – of your personal data to you or to a third party. e will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Right to object – of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Right to withdraw consent at any time – where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your working relationship with us.

If you want to review, verify, correct, or request erasure of your personal information, object to the processing of your personal data, or request that transfer a copy of your personal information to another party, please contact us using the details in the ‘How to contact us’section below.

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if you request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Transferring your information outside of Europe

TRANSFERRING DATA INTERNATIONALLY

In order to provide our goods and services we may need to transfer your information from your country of residence to another country in the usual course of our business. By dealing with us and submitting your personal information, you agree to the transfer, storage, and/or processing of your personal information outside of your country of residence as set out below.
Wireless Logic only transfers personal data to those third parties where we can be sure that we can protect data subjects’ privacy and rights, for example where the third party is located in a country deemed to have adequate data protection laws in place, or where we have a contract in place with that third party, including the European Commission's standard data protection clauses. We also conduct data transfer impact assessments to ensure that, where a third party is located in a country whose local laws may cause a risk of undermining data protection rights, that appropriate technical, organisational or contractual supplementary measures are in place with that third party.
Now that the UK has left the EU, the UK has become a ‘third country’ for data protection transfers from the European Economic Area ('EEA') under the GDPR. However, the EU Commission announced on 28 June 2021 that adequacy decisions for the UK have been approved to allow the continued free flow of personal data from the EEA to the UK. For data transfers from the UK, there are currently no changes to the way personal data is sent to the EU/EEA and other countries deemed adequate by the EU. The UK government has stated their commitment to maintaining the high standards of the GDPR (General Data Protection Regulation) and the GDPR has been retained in UK law alongside the existing Data Protection Act 2018.

Use of ‘cookies’

We use cookies to ensure you get the most from your visit. ‘Cookies’ are small text files placed on your computer and stored on your hard drive to allow the website to recognise you when you visit. They collect statistical data about your visitor behaviour and browsing actions. This helps us to improve our website and deliver a better more personalised service.

It is possible to switch off cookies by setting your browser preferences. For more information on how to switch off cookies on your computer visit, www.arkessa.com/cookies. Turning off cookies may result in a loss of functionality when using our websites.

Website monitoring and recording

Our websites may use website recording services. These services may record mouse clicks, mouse movements, page scrolling, and any text entered website forms. The information collected does not include any sensitive personal data.

Data collected is for Arkessa’s internal use only for improving the usability of our services and used for aggregated and statistical reporting.

Links to other websites

Our websites contain links to other websites, which are not under our control. Therefore, we will not be liable to you for any issues arising about their use of your information. We advise you to read the privacy policy and terms and conditions on each website to see how they may process your information.

How to contact us

If you would like to contact us to exercise one of your rights as set out above, or if you have a question or a complaint about this policy, or the way your personal information is processed by Arkessa (or third parties), please contact us via one of the following methods:

Email: privacy@arkessa.com
Post: FAO GDPR Owner, Arkessa Limited, Riverside House, Riverside, Bishop’s Stortford,Hertfordshire, CM23 3AJ, UK

You have the right to lodge a complaint directly with the UK supervisory authority, the Information Commissioner. For further information visit www.ico.org/concerns to find out more.

Changes to our privacy policy

We reserve the right to update this privacy policy at any time, and we will provide you with a new privacy policy when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information. We encourage you to periodically review this page for the latest information on the policy.