When you open the Website, our servers may automatically record certain information that your browser sends to us (“Usage Data”).

This Usage Data may include information such as:

• The device’s the Internet Protocol (“IP”) address, browser type and version, operating system type and version;
• the webpage you were visiting before you came to the Website;
• location information where you have accessed the Website on a device which is transmitting location data and such data may include country, province, city and neighborhood information;
• how you found our website, including, whether you discovered us through a search engine, partner website, ad campaign or email campaign;
• the pages of the Website that you visit and the time and date of your visit;
• the time spent on those pages, information you search for on the Website;
• the access times and dates; and
• other statistics.

Information collected automatically is used only to identify potential cases of abuse and establish statistical information regarding the usage and traffic of the Website and Services. This statistical information is not otherwise aggregated in such a way that would identify any particular User of the system.

If, through your use of the Website, you provide information about someone else you must ensure that you are authorized to disclose such information to us and that we not required to take any steps to ensure the receipt of this data is in accordance with any applicable law.

If you have provided us with Personal Information about someone else or someone has provided Personal Information about you and you would not like it to be retained please contact us to arrange for its deletion.

We use ‘cookies’ and similar tracking technologies to track the activity on the IBA website, hold certain information and to help personalize your online experience.

Cookies are files with small amounts of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags and scripts to collect and track information and to improve and analyze the IBA website.

Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie to you.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies. If you do not accept cookies, you may not be able to use some portions of the IBA website.

Session Cookies are temporary cookies that are used during the course of your visit to the Website, and they expire when you close the web browser.

Persistent Cookies are used to remember your preferences within our Website and remain on your desktop or mobile device even after you close your browser or restart your computer. They ensure a consistent and efficient experience for you while using the Website and Services.

Preference and Functionality Cookies – these are required for the operation of the Website. For example, necessary cookies enable us to recognize that you have created an account, have logged into that account, to permit you access to secure areas of the Website and let us operate the Website in accordance with the choices you make such as your chosen username, region, and language.

Analytical Cookies – Analytical cookies enable us and third-party services to collect aggregated data for statistical purposes to count the number of visitors and see how our visitors use the Website.

Social Media Cookies – Third party cookies from social media sites (such as Facebook, Twitter, etc) let us track social network users when they visit or use the Website, or share content, via social media by using a tagging mechanism provided by those social networks.

What is meant by ‘Processing’ of Personal Information will be dependent on how you interact with the Website and where you are located in the world.

We note that under some legislations we may be allowed to ‘Process’ information until you object to such processing (by opting out), without having to rely on consent or any other of the following legal bases below.

Processing is normally permissible in the following contexts:

• you have specifically, clearly given your consent without ambiguity for one or more specific purposes;
• processing is of Personal Information that has become available and known to the public by an act of the data subject;
• provision of information is necessary for the performance of an agreement with you and/or for any pre-contractual obligations thereof;
• processing is necessary for compliance with a legal obligation in connection with the data subject;
• processing is necessary to protect the interests of the data subject;
• processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in us; and/or
• processing is necessary for the purposes of the legitimate interests pursued by us or by a third party.

In any case, we will be happy to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Information is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

We will retain and use your Personal Information for the period you continue to use our Website and only otherwise as necessary to comply with any contractual obligations with you, our legal, financial or auditing obligations, to resolve disputes, and enforce our agreements unless a longer retention period is required or permitted by law.

We may use any aggregated data derived from or incorporating your Personal Information after you update or delete it, but not in a manner that would identify you personally.

Once the retention period expires, Personal Information shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after the expiration of the retention period.

You are entitled to request the deletion of your account and Personal Information. To delete your account, you can do so simply by contacting us. Where you request the deletion of your account and Personal Information we shall arrange for the anonymization of any and all Personal Information you have provided to us which shall not be utilized for any purposes beyond our legal, financial or auditing obligations, to resolve disputes, and enforce our agreements unless a longer retention period is required or permitted by law.

Your information, including Personal Information, may be transferred to — and maintained on — computers located outside of your country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

Your consent to this Privacy Policy followed by your submission of such information represents your acknowledgement of this.

IBA will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Information will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

We do not share, sell, trade or rent any Personal Information with any unaffiliated third parties.

Depending on the services you have requested through our Website, we may contract with other companies and share your information (with your consent) with our trusted third parties that work with us, any other affiliates and subsidiaries we rely upon to assist in the operation of the Website available to you.

We may share your Personal Information for these purposes only with third parties whose privacy policies are consistent with ours or who agree to abide by our policies with respect to Personal Information. These third parties are given Personal Information they need only in order to perform their designated functions, and we do not authorize them to use or disclose Personal Information for their own marketing or other purposes.

Any contracted third party or service provider is not authorized to use or disclose your information except as necessary to perform services on our behalf or comply with legal requirements.

• We may disclose Personal Information we collect, use or receive, in good faith, if required or permitted: to comply as required with a legal obligation under applicable law;
• to comply with a court order, subpoena, or similar legal process; to protect and defend the rights or property of the IBA and protect against legal liability; to protect your safety or the safety of others
• to investigate fraud, or possible wrongdoing in connection with the IBA website; to protect the personal safety of members of the IBA or the public;
• to respond to a government request

In the event we go through a business transition, such as a merger or acquisition by another company, or sale of all or a portion of its assets, your user account, and Personal Information will likely be among the assets transferred.

The security of your Personal Information is important to us, we maintain reasonable administrative, technical, and physical safeguards in an effort to protect against unauthorized access, use, modification, and disclosure of Personal Information in its control and custody.

However, remember that no method of transmission over the Internet or method of electronic storage is 100% secure.

While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security and you therefore acknowledge that

• there are security and privacy limitations of the Internet which are beyond our control;
• the security, integrity, and privacy of any and all information and data exchanged between you and the Website cannot be guaranteed; and
• any such information and data may be viewed or tampered with in transit by a third party, despite best efforts.

In the event we become aware that the security of the Website has been compromised or users Personal Information has been disclosed to unrelated third parties as a result of external activity, including, but not limited to, security attacks or fraud, we reserve the right to take reasonably appropriate measures, including, but not limited to, investigation and reporting, as well as notification to and cooperation with law enforcement authorities.

In the event of a data breach, we will make reasonable efforts to notify affected individuals if we believe that there is a reasonable risk of harm to the user as a result of the breach or if notice is otherwise required by law. When we do, we will send you an email.

Where Personal Information is processed for the public interest, in the exercise of an official authority vested in us or for the purposes of the legitimate interests pursued by us, you may object to such processing by providing a ground related to your particular situation to justify the objection.

You must know that, however, should your Personal Information be processed for direct marketing purposes, you can object to that processing at any time without providing any justification.

To learn whether we are processing Personal Information for direct marketing purposes, you may refer to the relevant sections of this document.

If you are a resident of the European Economic Area (EEA), you have certain data protection rights and we aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Information.

If you wish to be informed what Personal Information we hold about you and if you want it to be removed from our systems, please contact us.

In certain circumstances, you have the following data protection rights:

• You have the right to request access to your Personal Information that we store and have the ability to access your Personal Information.
• You have the right to request that we correct any Personal Information you believe is inaccurate. You also have the right to request us to complete the Personal Information you believe is incomplete.
• You have the right to request the erase your Personal Information under certain conditions of this Policy.
• You have the right to object to our processing of your Personal Information.
• You have the right to seek restrictions on the processing of your Personal Information. When you restrict the processing of your Personal Information, we may store it but will not process it further.
• You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.
• You also have the right to withdraw your consent at any time where selfologi DMCC relied on your consent to process your Personal Information.

You have the right to complain to the appropriate data protection authorities about our collection and use of your Personal Information.

For more information, please contact your local data protection authority in the European Economic Area (EEA).

Any requests to exercise your rights can be directed to us through the contact details provided on the website.

Please note that we may ask you to verify your identity before responding to such requests. You must provide sufficient information that allows us to verify that you are the person you are claiming to be or that you are the authorized representative of such person. You must include sufficient details to allow us to properly understand the request and respond to it. We cannot respond to your request or provide you with Personal Information unless we first verify your identity or authority to make such a request and confirm that the Personal Information relates to you.