Privacy policy
Holiroots considers privacy an important issue, which is why we build and operate our online services in compliance with any privacy regulations.
This Privacy Policy (“notification”) describes the types of personal information we collect from you when you use our website, how we collect and process that information, with whom we share it, and certain rights you have in relation to that information. This statement applies to this “www.holiroots.com” website owned and operated by Holiroots and all other websites operated by Holiroots that link to this statement.
Who is responsible for your personal data
Holiroots is responsible for your personal data. For the purposes of applicable data protection law, the controller of your data is the company affiliated with Holiroots products that provides services or communicates with you. This notification applies to all these companies.
Collecting your personal data
We may collect limited personal information that your browser makes available during your visit to our website. This log information includes your internet protocol address, browser type, browser language, the date and time of your visit and one or more cookies that may uniquely identify your browser (for more information see the cookies section below). We use this information to pursue our legitimate interests of better understanding user behaviour to further improve our offerings and to prevent malicious use such as hacking and denial of service attacks.
Some of our services require you to register for an account. We will ask you for some personal information to create an account and we will use that information to provide the requested service. For certain services, we may request credit card or other payment information, which we store in encrypted form on secure servers. We collect this information to pursue our legitimate interests or to perform a contract, or take steps in connection with a contract, with you or your organisation.
When we ask you to provide additional personal data, we will inform you at that time about the types of information we collect, how we use it, with whom it is shared and how long we will keep it. We hope this will help you make an informed decision about sharing your personal data with us.
We will only use the personal information you provide to fulfil the purpose for which we obtained it. Your data will not be used for other purposes, such as direct marketing, unless we have informed you of this and, where required by law, have your express consent.
User-generated content
We offer certain services that allow you to post information on the site that is then available to other visitors to the site. Examples include discussion forums and comments on blogs.
When you post a message, basic information that identifies you as the poster along with your posted information is made available to other visitors. This information includes your name or alias and, where relevant, may include other information such as your country or the name of the company or organisation for which you work. You have control over this data in your user profile and can determine what is displayed in your messages.
We may also display statistical, reputational and other similar information relating to your user account. Examples include the number of forum posts you have made or a rating that shows how useful other visitors have found your posts. Please refer to the help pages for each service for more information.
Sharing information
We may share such information in one of the following limited circumstances:
- We have your explicit and documented consent.
- We provide such information to trusted companies or individuals for the sole purpose of processing your request on our behalf. This processing is subject to agreements which require those parties to process such information only on our behalf and in accordance with applicable data protection laws and appropriate confidentiality and security measures, and you will be informed accordingly.
- We conclude that we are required by law or believe in good faith that access, preservation or disclosure of such information is reasonably necessary to protect the rights, property or safety of moonpop snacks, its users or the public.
We will share your personal data with our affiliated companies in order to deliver our services as described in this statement. You can see more about our group entities in the list above. We continue to implement policies and guarantees for all Holiroots companies in the countries where we operate to ensure that personal information is stored and processed according to the same privacy and security standards in all cases. If your personal data is transferred to our affiliated companies outside the European Economic Area or to a territory without a decision of the European Commission that provides adequate safeguards, this will be addressed in the relevant information notice and we will seek your consent if required by the applicable data protection law.
In the event of a transfer of ownership of parts of Holiroots, such as acquisition by or merger with another company, we will notify you and (if legally required) obtain your consent before personal data is transferred and becomes subject to a different privacy policy.
We may share your personal information with some service providers and partners to the extent necessary to provide you with a seamless experience and to improve the quality of our services. Some of these partners may be located in countries outside the European Economic Area that do not offer the same level of data protection as the country where you live and which are not recognised by the European Commission as offering an adequate level of data protection. We transfer personal information to these countries only subject to guarantees that ensure the protection of your personal information, such as standard contractual clauses approved by the European Commission.
We will not disclose your personal information to other people or non-affiliated companies, except in the limited circumstances described in this policy or with your consent.
For how long will we store your personal data?
Unless otherwise specified in the privacy statement for the relevant service, we will retain your data for the minimum time necessary to fulfil the purposes for which we collected it, including to meet legal, accounting or reporting requirements (including, if necessary, for moonpop snacks to defend itself against legal claims). For example, if we ask for your personal data when you register for a seminar, we will retain your data until the seminar is over, plus a reasonable period of time thereafter to respond to questions or complaints. Once your data is no longer needed, we will delete it permanently in accordance with applicable law.
Information security
We take appropriate security measures against unauthorised access to or unauthorised alteration, disclosure or destruction of data.
We limit access to your personal information to Holiroots staff who need to know that information in order to fulfil your request or provide our services.
Links
Links to external sites on Holiroots websites are developed by people over which are not controlled by Holiroots. These other sites may place their own cookies on your computer, collect data or ask for personal information. Please consult the privacy statement on each site for more information.
Your rights
You are entitled to:
- Correct or update any errors in your personal data.
- Receive a copy of your personal data that we hold.
- Delete your personal data for which we no longer have a legitimate reason for using it.
- Transfer your personal data to a new supplier (if applicable).
- Object to the processing of your personal data on the basis of legitimate interests (provided that our reasons for processing do not outweigh any harm to your data privacy rights), or restrict how we use your personal data while a complaint is being investigated.
In certain circumstances, we may need to restrict the above rights in order to protect the public interest (e.g. the prevention or detection of crime) and our interests (e.g. the enforcement of legal privileges).
In cases where we have requested your consent to use your data for a particular purpose, you can withdraw your consent at any time. You can do so by sending an e-mail to hello@holiroots.com. In such cases, we will no longer use your data for the specified purpose and will delete it.
If you wish to make a complaint about how we have handled your personal data, please contact our Data Protection Officer by sending an e-mail to hello@holiroots.com.