Privacy Policy

EU-US Privacy Shield Certification. USA, GDPR, TYPE CONTRACTUAL CLAUSES AND ADDITIONAL GUARANTEES

If you are outside the United States and choose to provide us with information, you must bear in mind that your data is transferred to the United States and processed there.

To date, data transit between data exporters from the EU and data importers from the USA (as would be our case) could be covered by the Privacy Shield agreement, under the adherence of the US-based company to the requirements set out under this agreement.

As of today, the judgment of the CJEU of July 16, 2020 declares the Privacy Shield agreement invalid, therefore, until a new agreement can be carried out or a unified position is adopted, the international transfer of data to the USA from the EU it must be justified under other types of measures.

Until November 2020, the date on which the Irish data protection authorities have to pronounce, Standard Contractual Clauses (CCT) may continue to be applied together with the necessary complementary security measures, which will be those that we initially put in place to be able to give service to our customers in the EU with full guarantee for our users in the EU.

While the EU and the USA define a protocol that updates the appropriate mechanisms for the international transfer of personal data between both territories, and until the corresponding control authorities pronounce themselves in November, the adaptation to regulations of the Standard Contractual Clauses remains in force. They define the obligations of the data importer (Mobile Leaves Corp) and the security measures applied, together with the definition of the data collected, categories of interested parties, etc.

Further information:

You have the right to information about the stored data according to Art. 15 GDPR, to rectification of inaccurate data according to Art. 16 GDPR, to deletion of data according to Art. 17 GDPR, to restriction of data processing according to Art. 18 GDPR, to data portability according to Art. 20 GDPR and to objection to unreasonable data processing according to Art. 21 GDPR.

If processing takes place on the basis of a declaration of consent, you have the option to withdraw it at any time without affecting the lawfulness of the processing on the basis of that consent up to the time of withdrawal.

We require the data that we ask you to provide to perform our services within the contractual relationship, to provide information that you have requested from us and to send our newsletters and other information. If you do not provide the data we collect, we will not be able to perform our services.

No automated decision-making, including profiling, is carried out. If we process your personal data for a purpose other than the one for which we collected this information, we will inform you of this fact and of that other purpose.

If you want to delete your account, click here.