PRIVACY STATEMENT – SiGMA
Privacy Policy
At SiGMA, accessible at sigma.world one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by SiGMA World and how we use it. We use cookies to provide a consistent experience across our site, preserve preferences, provide important analytics.
Cookies are small text files that can be used by websites to make a user’s experience more efficient.
You can at any time change or withdraw your consent from the Cookie Declaration on our website.
If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us through email at [email protected].
This Statement of Privacy applies to the SIGMA site, and where data is collected on other sites which direct you to the SIGMA Privacy Policy, and governs data collection and usage. By accessing and using the SIGMA website, you acknowledge and accept the privacy practices described in this Privacy Policy and adopted on this Website. This Website is owned and operated by SG Worldwide Media Company Ltd- 415670. SG Worldwide Media Company is the data controller of the information that we collect from you through this Website.
SG Worldwide Media Company is made up of different legal entities that are constituting the SIGMA group. Details of these companies can be found below: The terms “Company”, “we”, “us” or “our” in this Privacy Policy refer to the SG Worldwide Media Company Ltd, which is the relevant company in the group responsible for processing of personal data.
In case you are booking tickets for the event that is taking place in the EU, we will transfer you for payment processing to the site sigmaworld.events. On this site personal data is processed by Viking PC Health Ltd, which is part of the SIGMA group. Such processing of the data is subject to this Privacy Policy.
In case you are booking tickets for the event that is taking place outside of EU (worldwide), we will transfer you for payment processing to the site sigmamalta.events. On this site personal data is processed by SG Worldwide Media Company Ltd. Such processing of the data is subject to this Privacy Policy.
The SIGMA website may contain reference and links to third parties and their websites. We are not responsible for the content of such websites or for the processing of your data by such websites/third parties. Please refer to the privacy documents of such websites and/or advertisers.
We have appointed a Data Protection Representative (DPR). If you have any questions about this Privacy Policy, including any requests to exercise your rights as a data subject, please contact the DPR or visit our CONTACT US page, select DATA PROTECTION RIGHTS as the recipient department and SUBMIT FORM.
Collection of your personal information
We will collect and process the following data about you:
Event Registration
This is the information you give us when you submit a registration for a SIGMA event, whether on our website or on a partner’s website which has linked you to our Privacy Policy. This includes:
| Data Set | Basis for Processing | Purpose for Processing | Retention Period | Retention Basis | |
|---|---|---|---|---|---|
| “Identity Data” | First and Last Name | Performance of a contract with you & taking steps at your request prior to entering into a contract | Taking steps at your request to register you for the SIGMA event in line with our Terms and Conditions, and performing our obligations arising from the Terms and Conditions including contacting you where necessary to perform our obligations towards you. | 5 years | Our legitimate interest to establish, exercise or defend legal claims, disputes and judicial investigations. |
| Legal obligation | 9 years | Our obligations under income tax laws | |||
| Legal obligation | 6 years | Our obligations under VAT laws | |||
| “Contact Data” | Mobile Number, Email, Skype, Telegram | Performance of a contract with you & taking steps at your request prior to entering into a contract | Taking steps at your request to register you for the SIGMA event in line with our Terms and Conditions, and performing our obligations arising from the Terms and Conditions including contacting you where necessary to perform our obligations towards you. | 5 years | Our legitimate interest to establish, exercise or defend legal claims, disputes and judicial investigations. |
| “Geolocation Data” | IP Address | Performance of a contract with you & taking steps at your request prior to entering into a contract. Collect and process precise geolocation data in support of one or more purposes. N.B. Precise geolocation means that there are no restrictions on the precision of a user’s location; this can be accurate to within several meters. | Taking steps at your request to register you for the SIGMA event in line with our Terms and Conditions, and performing our obligations arising from the Terms and Conditions including contacting you where necessary to perform our obligations towards you. | 1 year | Our legitimate interest to prove a number of foreign event visitors to the MTA (Malta Tourism Authority) as well as the explicit consent from you for us to collect and process such data and share it with MTA for this purpose. |
Upon submission of your CV, you shall be receiving a specific Privacy Policy by return email. Please refer to that document for how we process the information you submitted when applying for a vacancy
Contact Form
This is the information you give us when you fill in the contact form on the SIGMA website. This includes:
| Data Set | Basis for Processing | Purpose for Processing | Retention Period | Retention Basis | |
|---|---|---|---|---|---|
| “Identity Data” | First and Last Name | Your consent which you are providing on your own initiative when you fill in the contact form | Following up on your request submitted through the contact form. Certain data sets are mandatory. By filling in the consent form, you are consenting to providing us with this data. | ||
| “Contact Data” | Email, Telephone | Your consent which you are providing on your own initiative when you fill in the contact form |
You can withdraw your consent at any time by contacting our DPR. Processing previously rendered lawful by your consent shall not be rendered unlawful once consent is revoked.
Newsletter Subscription
This is the information you give us when you subscribe to the newsletter through the SIGMA website. This includes:
| Data Set | Basis for Processing | Purpose for Processing | Retention Period | Retention Basis | |
|---|---|---|---|---|---|
| “Contact Data” | Email address | Your consent which you are providing on your own initiative when you subscribe to our newsletter | Contacting you on future SIGMA events | Until such time as you withdraw your consent | Your consent provided on your own initiative when you subscribe to our newsletter |
You can withdraw your consent at any time by clicking the unsubscribe link in the footer of any email you receive from us, or by contacting our DPR. Processing previously rendered lawful by your consent shall not be rendered unlawful once consent is revoked.
Sponsor Registration
This is the information you give us when you submit a sponsor registration on the SIGMA website.
| Data Set | Basis for Processing | Purpose for Processing | Retention Period | Retention Basis | |
|---|---|---|---|---|---|
| “Identity Data” | First and Last Name | Your consent which you are providing on your own initiative when choosing to act as a sponsor representative and filling in our subscription form | Registering the entity which you are representing as a SIGMA sponsor in line with our Terms and Conditions, and performing our obligations arising from the Terms and Conditions including contacting you where necessary to perform our obligations towards the sponsor. | 5 years | Legitimate interest for the establishment, exercise or defense of legal claims, disputes and judicial investigations |
| “Contact Data” | Mobile Number, Email, Skype, Telegram | Your consent which you are providing on your own initiative when choosing to act as a sponsor representative and filling in our subscription form | |||
| “Identification Data” | Headshot |
We also collect and process your bio where this is included by yourself in the registration process. The basis for processing is the consent which you are providing on your own initiative when you provide this optional information.
You are not obliged to provide your consent to any of the above data collected and your consent may be withdrawn at any time by contacting our DPR. Processing previously rendered lawful by your consent shall not be rendered unlawful once consent is revoked.
Information Collected through your Use of the Website
We collect information about your computer hardware and software.
| Data Set | Basis for Processing | Purpose for Processing | Retention Period | Retention Basis | |
|---|---|---|---|---|---|
| “Technical Data” | IP address; browser type, version and plug-in types; device; domain names; access times; referring website addresses; time zone setting; operating system and platform | Our legitimate interests | Our legitimate interest of operating, administering, protecting and developing our website and services, maintaining quality of service, ensuring framework security and system maintenance, of seeing how users use our website in order to improve it, develop it and grow our business and form our marketing strategy, and to deliver relevant website content and advertisement to users. |
Disclosure of your information
We will only disclose your personal data to third parties where lawful to do so including where we:
- Need to in order to provide you with the service;
- Need to in order to obtain services from third parties in order to provide you with the service;
- Have a legal duty to do so;
- Have a legitimate interest for the purposes of litigation or asserting and defending our legal rights and interests;
- Have been instructed by you to do so;
- Are required to disclose the information in response to legal proceedings/action(for example, a court order);
- Believe that our website and its content is being used in the commission of a crime, including to report such criminal activity;
- Understand and analyze how you use our website
- Develop new products, services, features, and functionality
- Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes
- Send you emails
- Find and prevent fraud
- In order to protect the rights or property of Viking PC Health including to enforce our Terms and Conditions.
We will disclose your personal data to third parties which include:
- Regulators and other authorities as may be required by law or by courts of law;
- Law enforcement, government, courts, dispute resolution bodies, regulators and any party appointed or requested by regulators to carry out investigations or audits of our activities;
We will also disclose your personal data to other group entities as identified above. We will disclose your personal data to external service providers and third-party vendors. We shall only disclose the personal data which is necessary for such third parties to deliver the required service. These include:
- Google Anaytics (Google Inc);
- HubSpot Inc;
- Asana Inc;
- Xero Limited;
- Malta Tourism Authority (MTA);
These third parties act as data processors on our behalf. We shall obtain guarantees from such third parties to ensure that they process your data in line with the GDPR, to keep your information secure and not to use it for their own purposes. Our employees shall also have access to your personal data for the purpose of executing their duties and providing you with assistance and the service.
Marketing
This website uses the Google AdWords remarketing service to advertise on third party websites (including Google) to previous visitors to our site. This means that we may advertise to previous visitors who haven’t completed a task on our site, for example using the contact form to make an enquiry. This could be in the form of an advertisement on the Google search results page, or a site in the Google Display Network. For more details, please refer to Google’s Privacy & Terms Policy.
You can set preferences for how Google advertises to you using the Google Ad Preferences page, and if you want to you can opt out of interest-based advertising entirely by permanently using a browser plugin.
Security
We are committed to ensuring that your information is secure from unauthorized access, use or disclosure. We have implemented measures and procedures to prevent unauthorized access or disclosure of your information. Likewise, we seek to keep confidential all information you send to us.
This site uses Secure Sockets Layer (SSL) to ensure secure transmission of your personal data.
In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any personal data breach and will notify you and the relevant regulator of a breach where we are legally required to do so.
Rights of data subjects
Right to Transparent Information – you have the right to be informed in a clear manner on any personal data pertaining to you that may be processed by us. Such information is being provided to you in this Privacy Policy.
Right of Access to Information – you have the right to request confirmation from us whether personal data relating to you is being processed and if so to access such personal data. nTo lodge a request, contact our DPR on the details above. If you would only like to receive information on a specific category of data, please indicate such category e.g. ‘Identity Data’ or ‘Contact Data’.
Right to Rectification – you have the right to request from us the rectification, without delay, of any inaccurate personal data pertaining to you.
Right to Be Forgotten – you have the right to request from us the erasure of all personal data pertaining to you without delay, where the data has been processed with your consent as the basis for processing and/or where the processing is no longer lawful.
Right to Restrict Processing – you have the right to request from us the restriction of processing if: processing is unlawful; you are contesting the accuracy of data; the data is no longer required by the controller but you require us to keep it in order to establish, exercise, or defend a legal claim; or if you have previously objected to the processing. Once data is restricted, we cannot process it in any way other than to store it unless: we have your consent; or if it is required for the establishment, exercise, or defence of legal claims; or if it is for the protection of the rights of other persons; or if it is for reasons of important public interest.
Right to Data Portability – you have the right to receive from us personal data which you have provided to us and to transmit that data to another controller without hindrance from us. This right applies where the data is being processed with your consent, or for the performance of a contract, and when processing is carried out by automated means.
Right to Object – you have the right to object at any time to the processing of personal data pertaining to you where the processing is based: on our legitimate interest; or the performance of a task in the public interest/exercise of official authority; or on direct marketing (including profiling); or on processing for purposes of scientific/historical research and statistics.
What we will need from you
Whenever we receive a request in line with the above rights, we might need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or exercise any of your other rights). This is a security measures to ensure that personal data is not disclosed to any person who has no right to receive it.
Keeping your data updated
We have an obligation to keep your data updated, and for this reason you may be asked about changes to your personal data at various intervals. You may help us in this process by informing us whenever your data has changed. You are entitled to ask us to modify your personal data if you ascertain that the personal data which we hold is not accurate or updated.
Are you obliged to provide your personal data?
Since we require your data for the purposes of providing you with a product/service, should you choose not to provide us with such data, we might not be in a position to enter into such a contractual relationship with you and fulfil the Terms and Conditions applicable between us and our obligations thereunder.
You are never obliged to provide us with any data which we request on the basis of your consent.
Changes to this privacy policy
This policy was updated on 27.04.2022.SIGMA shall occasionally update this document. SIGMA encourages you to periodically review this document to be informed of how SIGMA is protecting your information.
Contact us
If you are unhappy with the way in which we have processed your personal data, you may contact our DPR on the details provided above.
You also have a right to lodge a complaint with the Office of the Information and Data Protection Commissioner, or other supervisory authority of your habitual residence, place of work or place of alleged infringement, and the right to seek an effective judicial remedy before courts.