Privacy and Terms

By clicking “Accept”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.

Company & Website Information

Introduction

This is the privacy policy for  https://www.thetnk.com

The responsible controller for the processing on this site is

THETNK LTD

London, United Kingdom

data@thetnk.com

Definitions

Personal data means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, including both processors and controllers.

Data Processing Activities

We collect certain personal information to provide specific services and functionalities on our website.

The following sections describe the different data processing activities we conduct on our website. The information particularly reflects the processing purposes, what personal data we process for this purpose as well as the legal basis for the processing.

Informational use of our website

a) If you visit our website for informational purposes only, i.e. surfing on our website without specifically providing personal data, we will process the following information about you. The information may include a limited amount of personal data:

IP Address

Referrer URL

Browser Information

Device Information

Date and time of the user request

This information is processed to enable you to use our website (e.g. by adapting our website to the needs of your device or browser).

The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. b GDPR, as we need the information for the effective provision of our website, and Art. 6 para. 1 sentence 1 lit. f GDPR, as the processing serves our legitimate interest in ensuring the stability and security of the website.

Users may create a user account on

a) You have the possibility to register for a user account on our website. During registration we will process the following personal data about you:

First Name

Last Name

Email Address

Address

Payment Info

b) The lawfulness of this data processing follows from Art. 6 para. 1 sentence 1 lit. b GDPR. The processing is required for the effective provision and the ad-ministration of your user account. Without providing the data required for regis-tration, it is not possible to create a user account on our website.

c) You can delete your customer account as follows:

i. Please contact us by e-mail at [email address] with your written request for deletion. If you decide to delete your customer account, the account data will be deleted, unless further data retention is required or justified under the applicable law.

ii. You can also delete your entire account within your customer account. If you decide to delete data or your customer account, the account data will be deleted, unless further data retention is required or justified under the applicable law.

Users may contact you via the contact form

You have the possibility to contact us using the contact details provided on the website. If you contact us, we will process the content of your inquiry, your name, your e-mail address or telephone number, if applicable, our answers as well as all information that you voluntarily provide us with in the context of the inquiry in order to be able to adequately handle your request.

You further have the possibility to contact us via the contact form on our website. In this case, we collect the following personal data:

We will process this data as well as the content of your inquiry, our answers and all information that you voluntarily provide us with in the context of the inquiry in order to be able to adequately handle your request.

The lawfulness of this data processing results from Art. 6 para. 1 sentence 1 lit. b, f GDPR, as this data processing is necessary to ensure proper contact and the provision of customer service. The provision of this service is also in our and your interest.

We will retain your data as long as necessary to adequately process your request. Afterwards, it will be deleted, unless longer storage is not required or justified by law.

The retention period for the personal data processed to process your request is:As long as necessary for the purpose. .Afterwards, it will be deleted, unless longer storage is not required or justified by law.

Users may sign up for a newsletter

a) You may register for our newsletter on our website. During the registration process we collect the following personal data:

First Name

Last Name

Email Address

We process this data to provide you with the newsletter. The data processing is based on your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). The consent is voluntary. You can revoke your consent at any time without giving reasons with effect for the future. To do so, simply click on the 'Unsubscribe' link included in every newsletter or send us an e-mail.

b) We will retain your data as long as necessary you are subscribed to the newsletter. Afterwards, it will be deleted, unless longer storage is required or justified by law.

c) The retention period for the personal data is: As long as necessary for the purpose. .Afterwards, it will be deleted, unless longer storage is required or justified by law.

Your website provides for a blog

a) Our website includes a blog where we regularly publish posts. You can publicly comment on our blog. If you do so, we will process the following personal data on you:

We process this data to enable you to participate on the blog. Thus, the processing is necessary to provide that service (Art. 6 para. 1 sentence 1 lit. b GDPR).

b) When you post a comment, the following information will be visible for other users of our website:

c) To post such comments in the blog, you need to create a user account (see above).

d) You can delete your posts at any time.

e) We reserve the right to delete comments that contain insults, vulgar language or personal attacks or violate legal regulations.

f) The retention period for the personal data is:As long as necessary for the purpose. . Afterwards, it will be deleted, unless longer storage is not required or justified by law.

Users can apply for a job via an application form on your site

a) If you apply for a job in our company, we will process your name, contact details, qualifications and other data that you provide us with your application.

b) You may further use the application form we provide in this regard on our website. In this case we will process the following data categories:

c) We process your data exclusively for the purpose of assessing your application and conducting the application process. If you do not provide the required personal data, unfortunately, we cannot consider your application. You do not have to enter data that is marked as voluntary in order for the application to be considered. The processing is justified under Art. 6 para. 1 sentence 1 lit. b GDPR as it is necessary in order to take steps prior to entering into an employment contract.

d) If the application procedure ends without an employment relationship being established, the retention period for your data is: As long as necessary for the purpose. .Afterwards, it will be deleted, unless longer storage is not required or justified by law. If you are also interested in other positions, we will store your data, until you request deletion of the data.

No processing of personal data of children

We do not knowingly collect or solicit personal data from persons under the age of 13. The website is not directed at children under the age of 13. In the event that we learn that we have collected personal data of a child under the age of 13 without parental consent, we will delete that information as quickly as possible. If you believe that we may have personal data from or about a child under 13, please contact us using the contact details outlined in this policy.

Cookies

Use of Cookies and other Web Technologies

This website uses cookies or similar technologies ("cookies"). There are different kinds of cookies:

Strictly necessary cookies are cookies that are necessary to provide the services and features available through the websites, e.g. shopping. Without the cookie the service cannot be provided.

Non-necessary cookies

Some of the cookies described above are so-called first party cookies where we are responsible for dropping the cookies and processing the personal data. Other cookies we use may be provided by third party (third party cookies). These third parties drop the cookies and process the collected personal data for their own purposes, e.g. to provide you advertisement.

Data Sharing

Sharing your personal information with service providers

Personal data may be disclosed to service providers who act on our behalf in order to process the personal data in accordance with the purposes outlined above. This includes the following categories of service providers:

IT Service Providers

Email marketing providers

Cloud Service providers

Data access by service providers is privileged in accordance with Art. 28 GDPR. We have concluded corresponding data processing agreements with the respective service providers. The agreement obliges the service providers to process your personal data only on our behalf and upon our instruction. They are prohibited to pass on your personal data to other parties without permission, unless this is required by law.

Third party recipients of your personal information

There are no data recipients located in a country outside the European Union, and they do not have access to personal data from a country outside the European Union.

International Data Transfer

Some of the data recipients listed above are located in a country outside the European Union and/or access your personal data from a country outside the European Union. We implemented adequate safeguards to secure the cross-border transfer. Where the country of the recipient is not subject to an adequacy decision by the EU Commission we concluded Standard Contractual Clauses. Other than that, we will only transfer your data to a recipient in a third country if you provided your prior consent. For more information about the safeguards, you can always contact us using the contact details above.

Data Retention

How long we retain your personal information

Unless otherwise stated in this privacy policy, we retain your personal data only as long as necessary for the respective purpose. Subsequently, we will delete your data, unless we are legally entitled or obliged to further storage.

Data Security

How we protect your personal information

We implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons.

Your Rights

Depending on the circumstances, you may be entitled to exercise some or all of the following rights:

1. require (i) access to and/or duplicates of your personal data retained, (ii) receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and (iii) to transmit those personal data to another controller without hindrance from our side; where technically feasible you shall have the right to have the personal data transmitted directly from us to another controller;

2. request rectification, removal or restriction of your personal data;

3. refuse to provide and – without impact to data processing activities that have taken place before such withdrawal – withdraw your consent to processing of your personal data at any time;

4. take legal actions in relation to any potential breach of your rights regarding the processing of your personal data, as well as to lodge complaints before the competent data protection regulators;

5. not to be subject to any automated decision making, including profiling (automatic decisions based on data processing by automatic means, for the purpose of assessing several personal aspects) which produce legal effects on you or affects you with similar significance.

Further, you may be entitled to object, out of grounds relating to your particular situation, that your personal data shall be subject to a processing. In this case, please provide us with information about your particular situation. After the assessment of the facts presented by you we will either stop processing your personal data or present you our compelling legitimate grounds for an ongoing processing.

Updates to this notice

We may update this Privacy Statement from time to time. If we modify our Privacy Statement, we will post the revised version here, with an updated revision date. You agree to visit these pages periodically to be aware of and review any such revisions. If we make material changes to our Privacy Statement, we may also notify you by other means prior to the changes taking effect, such as by posting a notice on our websites or sending you a notification. By continuing to use our website after such revisions are in effect, you accept and agree to the revisions and to abide by them.

This privacy notice was last updated on April 26th, 2021