Welcome to Karam Kattan and our website at www.karamkattan.com (our “website”). At Karam Kattan we are committed to protecting and respecting your privacy.
This privacy policy sets out the basis on which we will process any Personal Information that we may collect about you as a visitor to our website or our customers or potential customers, or other business partners or in any other cases where we specifically state that this policy will apply. This policy further sets out how we protect your privacy and your rights in respect of our use of your Personal Information.
WHAT IS PERSONAL DATA?
Personal Information is information that makes it possible to identify a natural person. This includes in particular, your name, date of birth, address, telephone number, e-mail address, but also your IP address. Anonymous data exists if no personal reference to the user can be made.
WHAT IS PROCESSING?
"Processing" means and covers virtually any handling of data.
WHAT LAW APPLIES?
We will only use your Personal Information in accordance with Australia’s Privacy Act and the 13 Privacy Principles (“APA”), the UK's Data Protection Act (“DPA”) and the EU's General Data Protection Regulation (“GDPR”), and of course only as described in this Privacy Policy.
WHO IS RESPONSIBLE FOR DATA PROCESSING?
The responsible party within the meaning of the above is Karam Kattan PTY LTD with ABN 45 672 285 415, of 5 Cockatiel Pl, Diamond Creek, VIC 3089, Australia (“Karam Kattan”, “we”, “us”, “our”). If you want to contact us or if you have any questions, you can reach us by email using Karam@karamkattan.com.
WHAT ARE THE LEGAL BASES FOR PROCESSING PERSONAL DATA
In accordance with the APA, the DPA and the GDPR, we have to have at least one of the following legal bases to process your Personal Information: a) you have given your consent, b) the data is necessary for the fulfilment of a contract / pre-contractual measures, c) the data is necessary for the fulfilment of a legal obligation, or d) the data is necessary to protect our legitimate interests, provided that your interests are not overridden.
WHAT PERSONAL DATA DO WE COLLECT FROM YOU?
We may collect and process the following Personal Information about you:
a) Personal Information that you give us:
This is information about you that you give to us, or when you use our services, or correspond with us by telephone, post, email or otherwise. It may include, for example, your name, address, email address and telephone number; information about your business and relationship with us; and information about your requirements, background and interests.
We also process the Personal Information involved in your use of our services in order to be able to provide our contractual services. This includes in particular our support, correspondence with you, invoicing, fulfilment of our contractual, accounting and tax obligations. Accordingly, the data is processed on the basis of fulfilling our contractual obligations and our legal obligations.
b) Personal Information that our website and other systems collect about you:
If you visit our website it will automatically collect some information about you and your visit, including the Internet protocol (IP) address used to connect your device to the Internet and some other information such as the pages on our site that you visit. This is used to monitor the performance of the website and improve the experience of visitors to the website.
We use so-called cookies on our website. Cookies are pieces of information that are transmitted from our web server or third-party web servers to your web browser and stored there for later retrieval. Cookies may be small files or other types of information storage. As set out in the APA, the UK’s Privacy and Electronic Communications Regulations (“PECR”) and the EU`s Privacy and Electronic Communications Directive (“PECD”), we need to obtain consent for the use of Non-essential Cookies. For further information on the cookies we use, please refer to our Cookie Policy.
Our website uses a cookie consent tool to obtain your consent to the storage of cookies and to document this consent. When you enter our website, the following Personal Information is transferred to us: i) Your consent(s) or revocation of your consent(s); ii) Your IP address; iii) Information about your browser; iv) Information about your device; v) Time of your visit to our website.
c) Other information:
We may also process some information from other sources. For example:
Aggregated Data such as statistical or demographic data for any purpose including improving our website and services. Aggregated Data could be derived from your Personal Information but is not considered Personal Information in law as this data will not directly or indirectly reveal your identity. However, if we combine or connect Aggregated Data with your Personal Information so that it can directly or indirectly identify you, we treat the combined data as Personal Information which will be used in accordance with this privacy policy.
DATA PROCESSING THROUGH THIRD-PARTY SERVICES
We use content or service offers of third-party providers on the basis of our legitimate interests in order to integrate their content and services ("content"). This always requires that the third-party providers of this content are aware of the IP address of the user, as without the IP address they would not be able to send the content to their browser. The IP address is therefore necessary for the display of this content.
The following provides an overview of third-party providers and their content, together with links to their privacy policies, which contain further information on the processing of data and so-called opt-out measures, if any: a) Hosting and Content Management System: Framer by Framer Inc; b) Analytics: Google Analytics by Google LLC.
HOW WILL WE USE YOUR PERSONAL DATA?
We may collect, store and use your Personal Information for the following purposes:
We will only process your Personal Information as necessary so that we can pursue the purposes described above and where we have a legal basis for such processing. Where our lawful basis for processing is that such processing is necessary to pursue our legitimate interests, we will only process your Personal Information where we have concluded that our processing does not prejudice you or your privacy in a way that would override our legitimate interest. In exceptional circumstances we may also be required by law to disclose or otherwise process your Personal Information.
DATA SHARING
In certain cases, it is necessary to transmit the processed Personal Information in the course of data processing. In this respect, there are different recipient bodies and categories of recipients.
a) Internal
If necessary, we transfer your Personal Information within Karam Kattan. Access to your Personal Information is only granted to authorised employees who need access to the data due to their job, e.g., to provide our services or to contact you in case of queries.
b) External bodies
Personal Information is transferred to our service providers in the following instances:
c) International transfers
We may transfer your Personal Information to other companies as necessary for the purposes described in this Privacy Policy. In order to provide adequate protection for your Personal Information when it is transferred, we have contractual arrangements regarding such transfers. We take all reasonable technical and organisational measures to protect the Personal Information we transfer.
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We will delete your Personal Information when we no longer need such Personal Information, for instance where:
Sometimes, however there are legal or regulatory requirements which may require us to retain your Personal Information for a specified period, and in such cases we will retain your Personal Information for such specified period; and we may need to retain your Personal Information for certain longer periods in relation to legal disputes, and in such cases we will retain it for such longer periods to the extent required.
DATA SECURITY
Our website uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact requests that you send to us. We have also implemented numerous security measures (“technical and organisational measures”) for example encryption or need to know access, to ensure the most complete protection of Personal Information processed through our website.
YOUR RIGHTS AND PRIVILEGES
You can exercise the following rights:
If you believe that the information we hold about you is inaccurate or request its rectification, deletion, or object to legitimate interest processing, please do so by contacting us.
In the event you want to make a Data Subject Access Request, please contact us. We will respond to requests regarding access and correction as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days, we will tell you why and when we will be able to respond to your request. If we are unable to provide you with any Personal Information or to make a correction requested by you, we will tell you why.
You have the right to complain about our processing of Personal Data to a supervisory authority responsible for data protection. The competent data protection authority in Australia is: The Office of the Australian Information Commissioner, GPO Box 5288 Sydney, NSW 2001, www.oaic.gov.au
HOW DO WE MAKE CHANGES TO THIS POLICY?
We may change our Privacy Policy from time to time. When we change our Privacy Policy, we will publish the updated policy on our website. Please check this Privacy Policy regularly. Subject to applicable law, all changes will take effect as soon as we publish the new Privacy Policy, but where we have already collected information about you and/or where legally required to do so, we may take additional steps to inform you of any material changes to our Privacy Policy and may request that you agree to these changes.
EFFECTIVE DATE
Saturday, 29th of June, 2024
