Privacy

We are committed to the protection of privacy and personal data of all of our clients and other contacts derived from the use of our web page.

We hereby inform you as data subject on the collection and use by DE PAOR DISPUTE RESOLUTION, as controller, that your personal data is treated in accordance with applicable laws and, in particular, with the new EU General Data Protection Regulation (GDPR) 2016/679 from 27 April 2016 that entered into force on 25 May 2018.

The collection of personal data by DE PAOR DISPUTE RESOLUTION is ruled
by the principles of data minimisation:  we only collect personal data that is
relevant and limited to what is necessary in relation to the purposes for which
they are processed.

Processing of your personal data only takes place in conformity with applicable regulations and, in particular:

• whenever it is necessary to determine disputes referred to any of us as an arbitrator or to avoid conflicts of interest to disputes that may be referred to us
• whenever it is necessary to perform or enter into a contract;
• whenever you have given us your express and unambiguous consent (for marketing communications, for instance);
• whenever it is necessary for us to comply with legal obligations (e.g., compliance with money laundering regulations, etc.);

Personal data is collected and processed for specific, explicit and legitimate purposes. Depending on the case, your personal data may be processed for the purpose of:

• resolving the dispute referred to us as counsel or determining the dispute referred to any of us as an arbitrator;
• communicating with you within the context of matters we work on;
• receiving or subscribing communications, newsletters or invitations;
• considering your curriculum vitae to be part of our team;
• participating in surveys on our services to improve client or user experience.

To preserve the security of your personal data, only authorised members of the team can have access to it.  We undertake our best efforts and diligence to preserve the confidentiality and integrity of your personal data, prevent data security breaches, deliberated manipulations, alterations and loss of data and non-authorised accesses and have appropriate technical and organisational measures to ensure that personal data is processed and stored adequately.

To the extent required for the purposes outlined above, we may share your personal data with:

• Service providers such as translators, virtual hearing service providers and expert consultants;
• Co-arbitrators (if any) ;
• The Tribunal Secretary (if any);
• The appointing/administering arbitral institution (if any);
• A Court, should the arbitration result in legal proceedings to which we are a party or in which we are a witness;
• Legal advisers in the event of a dispute or other legal matter;
• Law enforcement official, government authorities or other third parties in order to meet our legal obligations;
• Any other party where we ask you and you consent to the sharing. 

Countries located outside the EEA may not have data protection laws and regulations comparable to the ones applicable in the EU. To the extent that no statutory level of security comparable to the European data protection laws exists in such countries, we will adopt appropriate measures to ensure that your personal data will be adequately protected in these countries.

Subject to the limits under applicable regulations, you are entitled to exercise the following rights on your personal data:

• Right of access and information (art. 15 GDPR): in particular, you have the right to request from us information on the purposes of the processing of your personal data, the specific categories of data concerned, the recipients of your personal data, the source of your personal data if they were not collected from you, the envisaged storage period and the existence of any automated decision-making.
• Right to rectification (art. 16 GDPR): obtain the rectification of your personal data that are inaccurate as well as, in view of the purposes for processing, the right to have incomplete personal date completed.
• Right to erasure (art. 17 GDPR): obtain the erasure of your personal data provided that the processing is not required to comply with legal obligations or necessary for the establishment, exercise or defense of legal claims or due for reasons of public interest.
• Right to restriction of processing (art. 18 GDPR): obtain a restriction of processing of your personal data where (i) you have informed us on the inaccuracy of your personal data and for the period necessary to verify the accuracy of said data, (ii) the processing of your data is not in accordance with applicable regulations and you decide to request appropriate restrictions instead of erasure; or (iii) you have objected to a specific processing of your personal data pursuant to art. 21 GDPR but there are legitimate grounds for us to continue other processing and verification thereunder is pending.
• Right to portability (art. 20 GDPR): within the limits established by applicable regulations, when processing is based on your consent or on a contract, this right allows you to receive the personal data you have made available to us in a structured, commonly used and machine-readable format and to transmit this data to another data controller without hindrance from us. When technically feasible, provided you so request, we shall transmit directly your personal data to another controller.
• Right to withdraw your consent (art. 7.3 GDPR): where the processing of your personal data is based on your consent, you will be entitled to withdraw your consent at any time.

Right to lodge a complaint (art. 77 GDPR): if, despite our efforts to preserve the security and confidentiality of your personal data, you consider that your rights have been infringed, you are entitled to lodge a complaint with a supervisory or control authority, in particular, the authority of your habitual residence, place of work or place of the alleged infringement. In any event, a list of supervisory and control authorities should be made available by the European Commission in its website (http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm)

For exercising your rights as well as for any questions and clarifications that you might need on this Policy, you may contact us at risteard@depaordr.com