Privacy Policy – The Patatas

1. Overview

We, THE PATATAS, (“the Company”, “we”, “us”, “our”) place great importance on the confidentiality, privacy and protection of your personal and transactional data. We handle all personal data provided to us in accordance with the standards prescribed by the Singapore Personal Data Protection Act (No. 26 of 2012) and the subsidiary legislation made thereunder, and where applicable, the European General Data Protection Regulation 2016/679.

BY USING THIS WEBSITE OR BY HAVING A BUSINESS RELATIONSHIP WITH THE COMPANY, YOU AGREE THAT THE COMPANY MAY COLLECT, USE, PROCESS, STORE AND/OR DISCLOSE YOUR PERSONAL DATA IN ACCORDANCE WITH THE TERMS OF THIS PRIVACY POLICY. IF YOU DISAGREE WITH ALL OR ANY PART OF THIS PRIVACY POLICY, PLEASE DO NOT USE OR CONTINUE COMMUNICATION OR ANY FURTHER USE OF THIS WEBSITE.

2. Information we collect

2.1

When you access our website www.thepatatas.com and all pages within the domain (the “Website”) or when you contact us, the following types of information may be collected from you:

Contact and Billing Information

2.2

These relate to the following information about you, all of which may be collected:

Full Name
Name of organization
Contact telephone number
Email address
Billing address

Access Information

2.3

These relate to information about your computer or mobile device and your access patterns, some or all of which may be collected when you use the website:

IP address
Geographic location
Operating system and browser type
Device type
Web traffic data
Time spent on the Website
Number of webpages within the Website viewed
Access from third-party websites linking to our Website
Advertising information, e.g. what ads were clicked and/or viewed

The Website makes use of cookies and Google Analytics to improve the site and to provide you with a more tailored user experience. A cookie is a small file that may be added to your device when you visit the Website, and which is sent back to the Website when you visit it again. The cookies we employ on the Website do not grant any access to your computer or any information about you, other than the data you choose to share with us.

We use the following categories of cookies:

Strictly necessary cookies: These are cookies that are required for the operation of the Website and the provision of our services to you.

Specifically, we run the cookies for the following purposes:

To verify that you’re not a robot; and
To remember preferences that you have set.

While you may disable these cookies in your internet browser settings, doing so may result in restrictions in your use of the Website and/or the failure of the Website to work properly for you.

Analytical/Performance/functionality/advertising cookies: These cookies enable us to collect information about how users use our Website, and to personalize our content and advertisements for you. Specifically, we use these cookies to:

Perform data analytics of how users use the Website, in order for us to improve the Website, our content and services;
Recommend other content on the Website which you may be interested in; and
Provide you with targeted advertisements.

While you may disable these cookies in your internet browser settings, please note that you will still receive recommendations for Website content, and that you will still see the same number of advertisements on the Website, except that these will not be tailored to you based on your personal information.

If you disagree with our use of cookies, you may choose to stop using the Website, or to disable cookies through your internet browser settings at any time. If you do neither, then you will be deemed to have consented to our use of cookies on the Website.

3. Our collection, use and disclosure of personal data

Why We Collect (Purpose)

3.1

Insofar as the information collected allows you to be identified directly, or indirectly when combined with other information, it will be deemed “Personal Data”.

3.2

We may collect, use, process, store and/or disclose your Personal Data, for the following purposes, where necessary or applicable:

To verify your identity;
To enable your device and/or software to access the Website;
For the smooth administration and improvement of the Website, including troubleshooting, site analysis, testing, research, statistical and survey purposes and to obtain feedback so as to enable us to improve the operation of the Website and offer you a better user experience;
For audit, customer service, administrative support, market research and business development purposes;
To contact or notify you about updates and/or developments to the Website, the Website Terms of Use, Cookies Policy and this Privacy Policy; sending you marketing information about our goods or services including notifying you of our marketing events and initiatives;
To respond to any queries, requests or reports that you have submitted;
For payment and delivery of goods or services;
To process payment or credit transactions
To perform a contract to which you are a party or deliver the services you have requested;
To recommend and/or display content and advertisements on the Website that may be of interest to you;
To comply with the requirements under any applicable law or requests from any competent authority, including but not limited to relevant governmental authorities, law enforcement agencies and regulatory bodies;
Where required in any civil or criminal suit or for the protection and/or enforcement of our legal rights and obligations;
In the event we sell or buy any business or assets, where necessary for the purposes of the sale or purchase;
To enable any third parties to perform any of the above where necessary and/or applicable, including but not limited to law enforcement agencies, regulatory bodies, our business partners, affiliates, suppliers and subcontractors.
To post testimonials (with your consent). We post testimonials on our Website that may contain personal information. Prior to posting a testimonial, we will obtain your consent to use your name and testimonial.
Any other purpose for which you have provided the personal data.

If we intend to use your Personal Data for any purpose not listed above, we will notify you of this purpose and obtain your consent, unless otherwise prescribed by any applicable law.

The purposes listed in the above clauses may continue to apply even in situations where your relationship with us (for example, pursuant to a contract) has been terminated or altered in any way, for a reasonable period thereafter (including, where applicable, a period to enable us to enforce our rights under any contract with you).

Retention of Personal Data

3.3

We will retain your Personal Data only for the length of time required to fulfil the purposes for which the Personal Data was collected, save where continued retention is necessary for us to comply with our other legal obligations or to meet our business requirements.

Transfer of Your Personal Data

3.4

In respect of the transfer of data to third parties, we will do so only with your consent and ensure that your Personal Data is transferred to recipients who are legally bound to uphold strong data protection standards and to comply with applicable data protection laws and this Privacy Policy.

We generally do not transfer your personal data to countries outside of Singapore. However, if we do so, we will obtain your consent for the transfer to be made and we will take steps to ensure that your personal data continues to receive a standard of protection that is at least comparable to that provided under the PDPA.

Links to third party websites

3.5

The Website may contain links to third-party websites which are not subject to this Privacy Policy. We are not responsible for their collection and use of personal information, or their data security and integrity practices and procedures.

4. Your rights in respect of your personal data

4.1

We generally rely on personal data provided by you (or your authorized representative). In order to ensure that your personal data is current, complete and accurate, please update us if there are changes to your personal data. You may write to our Data Protection Officer at info@thepatatas.com to:

Correct or update your Personal Data;
Reasonably request for access to your Personal Data. Do note that you may face reasonable charges for our provision of the Personal Data;
Request for information relating to our use or disclosure of your Personal Data;
Withdraw your consent and request that we stop processing your Personal Data for certain purposes;
Delete any Personal Data we no longer have legally permissible grounds to use; or
Make a report about any actual or potential breach of security in relation to your Personal Data.

We may require reasonable time (depending on the complexity of the request and its impact on our relationship with you) to action your request and for us to notify you of the consequences of us acceding to your request, including any legal consequences, which may affect your rights and liabilities to us.

We will respond to your request as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) calendar days (10 business days for withdrawal of consent and deletion of personal data) after receiving your request, we will inform you in writing within that period of the time by which we will be able to respond to your request.

Do note that we may not be obliged to comply with your requests under certain conditions as prescribed by the applicable law. In such an event, we will notify you accordingly of the basis for not acceding to your request.

Please note that withdrawing consent does not affect our right to continue to collect, use and disclose personal data where such collection, use and disclosure without consent is permitted or required under applicable laws.

5. Data protection and security

5.1

We will put appropriate and reasonable technical and administrative security measures in place to help ensure that your information is protected against unauthorized or accidental access, use, alteration or loss.

You should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your information and are constantly reviewing and enhancing our information security measures.

The Company uses Google Drive and Synology to store documents such as:

Contact information
Invoices
Photos
Videos

More information on how Google complies with the PDPA is available at https://services.google.com/fh/files/misc/singapore_personal_data_protection_act_whitepaper.pdf

More information on Synology’s privacy policy is available at https://www.synology.com/en-uk/security

We have taken steps to satisfy ourselves that the cloud service providers we use, such as, Google Drive and Synology, take reasonable steps to protect the personal data that they hold to a standard that is acceptable to Singapore’s Privacy and Data Protection Commission (PDPC)

5.2

All of our employees who deal with Personal Data are trained in the proper handling and protection of Personal Data.

5.3

Any data protection breach will be handled in accordance with our internal procedures, a copy of which may be obtained from our Data Protection Officer at the contact details provided below.

6. EU General Data Protection Regulation (GDPR)

6.1

Where we collect, use or disclose the personal data of residents of the EU, we will also comply with any specific requirement of the GDPR:

We will obtain express consent from you for the collection, use and disclosure of your personal data. Your acceptance of this Privacy Policy signifies that consent.
We will not collect sensitive data, such as race, ethnicity, political, religious or philosophical beliefs, trade union membership, genetic or biometric data, or sexual orientation unless

you give explicit consent
it is in your vital interests that we collect the data
is required for legal claims, public health, scientific or historical research purposes, or
it is required for reasons of substantial public interest.

6.2

In addition to the rights and obligations spelt out in this Privacy Policy, as a resident of the EU, you also have the following rights:

The right to erasure: You have the right to request that we erase your personal data under certain conditions.
The right to restrict processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
The right to object to processing: You have the right to object to our processing of your personal data under certain conditions.
The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

7. Variation

7.1

We reserve the right to change this Privacy Policy from time to time at our sole and absolute discretion. The most updated Privacy Policy will be made available promptly on the Website and you will be notified of the update when you visit the Website. It is your responsibility to keep yourself updated and aware of the latest version of this Privacy Policy. If you continue using the Website after the changes take effect, you will be deemed to have accepted the changes.

8. Data Protection Officer (DPO)

You may contact our Data Protection Officer if you have any enquiries or feedback on our privacy policies, or if you wish to make any complaint or request. Please contact our DPO at info@thepatatas.com or 6850 5142.