Supplemental Notice for Residents of the European Economic Area, Switzerland, or the United Kingdom
Supplemental Notice for Residents of the European Economic Area, Switzerland, or the United Kingdom
Name of Data Controller and Contact Details
Peter Thomas Roth Labs, LLC
400 Park Ave., Floor 14
New York, NY 10022 USA
Purposes of the processing
The purposes of the processing are described in the section of our Privacy Policy entitled How Do We Use Your Information.
Lawful basis for the processing
We process your personal data for the following purposes and legal bases under applicable privacy laws, including the GDPR:
Purpose Legal Basis
To provide customer support and respond to inquiries Article 6(1)(b)
To send marketing communications (if opted-in) Article 6(1)(a)
To improve our website, products, and user
experience Article 6(1)(f)
To comply with legal obligations (e.g., tax, etc.) Article 6(1)(c)
The categories of personal data concerned
The categories of personal data that we process are described in the section of our Privacy Policy entitled What Information Do We Collect.
Pursuant to applicable privacy laws, we display a cookie consent banner to obtain express consent for the use of any cookies during your visit to our website. We use cookies and similar tools to:
· Enable basic site functionality (e.g., shopping cart).
· Analyze traffic and improve performance.
· Provide personalized offers and advertising.
You can manage or disable cookies via your browser settings or decline all cookies via the cookie consent banner.
The recipients or categories of recipients of the personal data
The potential recipients of the personal data that we collect are described in the section of our Privacy Policy entitled With Whom Do We Share Your Information.
Specifically, when you place an order through our website, you are making your purchase from Global-e as merchant of record for the transaction. Your information will be handled by Global-e in according with Global-e’s Privacy Policy and you expressly consent to the sharing of your personal data (excluding payment details) with us by Global-e.
Information regarding the transfers of personal data outside of the European Economic Area (EEA), Switzerland and the United Kingdom (UK)
We are headquartered in the USA and our website is hosted in the USA. On 10 July 2023, the European Commission adopted an adequacy decision with respect to the transfer of personal data from the EEA to the US. On 21 September 2023, the United Kingdom adopted a "data bridge" framework between the UK and the US. Switzerland adopted an adequacy determination which entered into force on 15 September 2024.
When you provide your personal data to us via the website or contact us by email, you are providing your personal data directly to the USA. Before you provide your personal data to us via the website, we request your explicit consent to the transfer of your personal data to the USA. When you email us, the fact that you have chosen to email us knowing that we are located in the USA will be understood to constitute your express consent to the transfer of the personal data in your email (including your email address) to the USA. Regardless of the differences in US and European privacy laws, we safeguard your personal data as described in our Privacy Policy. If we transfer your personal data to a third party, we require the third party to commit contractually to process your personal data only in ways that are consistent with our Privacy Policy.
The period for which the personal data will be stored, or the criteria for determining the retention period
We retain your personal data only for as long as necessary to:
·
· Complete transactions;
· Comply with legal obligations (e.g., tax or warranty laws); or
· Resolve disputes and enforce agreements.
Retention periods typically range from 3 to 7 years, depending on the nature of the data.
Your rights to access, correct, restrict or delete your personal data and object to processing
You have the right to request access to your personal data, to have your personal data corrected, restricted or deleted, and to object to our processing of your personal data. Your rights may be subject to various limitations under the GDPR and the UK GDPR. If you wish to exercise any of these rights, or if you have any concerns about our processing of your personal data, please contact us in any of the ways listed in this Notice. The data portability rights in the GDPR and the UK GDPR are not relevant to the kinds of processing that we do.
The right to lodge a complaint with a supervisory authority
You have the right to file a complaint concerning our processing of your personal data with your national (or in some countries, regional) data protection authority. The EU Commission has a list here: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm
See www.ico.org.uk for information about contacting the UK Information Commissioner's Office.
GDPR European Representative
We have appointed European Data Protection Office (EDPO) as our representative in the European Union and for data protection matters pursuant to Article 27 of the GDPR. If you are in the European Economic Area, EDPO can be contacted in addition to support@peterthomasroth.com, only on matters related to the processing of personal data.
You can contact EDPO regarding matters pertaining to the GDPR:
· By using EDPO’s online request form at https://edpo.com/gdpr-data-request/
· By writing to EDPO at Avenue Huart Hamair 71, 1030 Brussels, Belgium
UK GDPR – UK Representative
We have appointed EDPO UK Ltd. as our representative in the United Kingdom and for data protection matters pursuant to Article 27 of the UK GDPR. If you are in the United Kingdom, EDPO can be contacted in addition to support@peterthomasroth.com, only on matters related to the processing of personal data.
You can contact EDPO UK regarding matters pertaining to the UK GDPR:
· By using EDPO UK’s online request form at https://edpo.com/uk-gdpr-data-request/
· By writing to EDPO UK at 8 Northumberland Avenue, London WC2N 5BY, United Kingdom