The protection of your privacy when processing your data is a matter of importance to Haya that is taken into consideration in all of our business processes.
Therefore, we would like to take this opportunity to explain the basic principles we apply in handling your personal data.
This and possibly additional information is always provided whenever such data is collected.
If not otherwise indicated in the following sections, Art. 6 (1, b) of the General Data Protection Regulation (GDPR)
forms the legal basis for the handling of your data in order to provide you the services you request.
Rules for the processing of personal data by HAYA.
The personal data provided by you in the contact form will be processed only to answer the question. They will be stored for the necessary period to correspond with the question asked, and for archiving purposes no longer than for 3 years.
Providing data is voluntary, however, failure to provide them may prevent you from answering and correspondence.
Your email address can be used to send commercial information, but only if your consent has been granted (legal basis: art.6 par.1 lit.a) GDPR).
Data for the purpose of sending commercial information by electronic means will be processed until you withdraw your consent to such operations.
According to the GDPR, you have the right to:
- Receive information on your personal data stored by us.
- Request the rectification or erasure of your personal data or a restriction of the processing.
- Object to a processing that serves our legitimate interest, a public interest, or profiling, unless we can demonstrate compelling legitimate grounds for this processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
- Have your data transmitted to the extent regulated by law, such as in Art. 20 GDPR, and submit a complaint to a supervising authority.
You can withdraw your consent to the collection, processing, and use of your personal data at any time, with future effect.
A written letter sent to the Group Data Privacy Office is sufficient.
Please be advised that we do not make decisions in an automated manner and your data is not profiled.