Privacy Policy (“Policy”)
Antares Vision S.p.A., with headquarters in Travagliato (BS), via del Ferro 16, 25039, tax code and VAT no. 02890871201 (“Antares Vision”, “we” or “us”), in its capacity as data controller, hereby informs the data subjects (“Data Subject”, “you”, or “your”) about the processing of their personal data in connection with the registration and use of the platform “TATABU” available at https://tatabu.nhra.bh (“Platform”).
1. Data Controller
The data controller is Antares Vision, which may be contacted by sending an email to privacy@antaresvision.com.
2. Purposes of the Data Processing, Data Categories, Legal Basis and Means of Processing
The data are collected from the Data Subjects through the Platform for the following purposes:
- Account registration on the Platform. However, the personal data necessary for the creation of the account may not be provided directly by the Data Subject to Antares Vision but may, instead, be obtained from other account users in order to create additional accounts referring to the same entity. In such circumstances, the individual or entity providing the personal data shall be responsible for ensuring that (a) a copy of this Policy is made available to the Data Subject and (b) such Data Subject reads and understands this Policy;
- Provision of the services available on the Platform, including, but not limited to, provision of support services for the Platform;
- To monitor to detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity, and hold those responsible for that activity;
- Platform browsing; and
- Compliance with all the applicable laws, regulations and legislation, as well as any measures issued by public bodies and/or local authorities, including, but not limited to, those related to fraud monitoring, prevention, and detection, laws associated with identifying and reporting illicit and illegal activities, such as Anti-Money Laundering and Know-Your-Customer regulations, and financial reporting obligations (“Applicable Laws”).
For the above-mentioned purposes, the following data will be processed: first name, last name, e-mail address, residential address, date of birth, telephone number, job title and password, as well as certain personal data relating to browsing activity on the Platform (such as IP address) and any emails or attachments sent to us for support.
The legal basis for data processing is:
- For the purposes under letters a), b), c), d) above, the execution of a contract and the provision of the services. With specific regard to purpose under letter a), where the creation of account on the Platform does not directly result from a contract entered into with the Data Subject, the legal basis is the legitimate interest of Antares Vision in ensuring the correct creation and use of additional accounts within the Platform. In this case, the legitimate interest pursued by Antares Vision is always balanced against the fundamental rights and freedoms of the Data Subject;
- For the purpose under letter e) above, the fulfillment of legal obligations to which Antares Vision is subject. For example, Antares Vision may be required to record and verify a Data Subject’s identity to comply with regulations designed to prevent money laundering, fraud, and financial crimes. These legal obligations may require Antares Vision to use third parties to verify your identity or report our compliance to third parties and subject ourselves to third-party verification audits.
For the above-mentioned purposes the data shall be processed also by computers, using software systems managed directly by Antares Vision or by third parties, in compliance with confidentiality and security requirements of Applicable Laws.
3. Data Disclosure and Consequences of Any Refusal
The provision of the data is optional. However, any refusal to provide the data for the purposes referred to under paragraph 2, letters a), b), c), d) and e) above, will lead to the inability to register on the Platform and use the services offered therein, as well as fulfilling the relevant legal obligations.
4. Data Storage Location and Data Retention Period
The data will be stored on servers located within the Kingdom of Bahrain, in full compliance with the Applicable Laws. For the above-mentioned purposes, the data may be also processed by Antares Vision’s subcontractors located outside the European Economic Area (EEA) (including, but not limited to the United States, India, Bahrain and in UAE). In the event that personal data is transferred from the European Economic Area (EEA) to a country outside the EEA for the purposes described above, such transfers shall be carried out in accordance with the safeguards and requirements established under Chapter V of Regulation (EU) 2016/679 and the Applicable Laws. In particular, with regard to transfers of personal data from the EEA to the United States, such transfers shall be carried out on the basis of the Adequacy Decision for the EU-US Data Privacy Framework adopted by the European Commission on 10 July 2023.
The personal data collected for the purposes set out in paragraph 2, letters a), b), c), d) and e), shall be retained for the period strictly necessary to provide the service requested by the Data Subject through the Platform, or until the Data Subject requests its erasure, unless a longer retention period is required for the fulfilment of legal obligations pursuant to the Applicable Laws.
Notwithstanding the foregoing, Antares Vision may retain the data for a longer period where necessary for the establishment, exercise or defense of legal claims in connection with any disputes pending at the time of the request, or in compliance with formal requests issued by public authorities.
5. Recipients of Personal Data
We don’t sell your data. Personal data will not be disseminated outside of Antares Vision except to its subsidiaries or as otherwise provided under this Policy. Within Antares Vision’s organization, the data may only be processed by the relevant offices entrusted with the performance of the processing activities, who will be appointed as persons in charge of the processing.
In addition, for the purposes outlined above, Antares Vision may share personal data with: (a) other subsidiaries within the Antares Vision group; (b) providers of IT, communication, compliance, customer support and customer management services; (c) governmental entities; (d) where required, regulatory authorities, competent courts, law enforcement agencies, and public administrations. Such recipients may act either as independent data controllers or as data processors. Data processors operate under Antares Vision’s instructions and are bound by specific contractual obligations designed to ensure that the processing of personal data complies with the Applicable Laws.
6. Data Subject Rights
Data Subjects have the right to:
- Know whether their personal data are being processed, and, if this is the case, access it (right of access);
- Correct inaccurate or outdated personal data (right to rectification);
- Obtain the deletion of their personal data (right to erasure);
- Limit data processing (right to restriction of processing);
- Receive and share their personal data with another controller in a common format (right to data portability);
- If possible, the right to object to data processing based on legitimate interest (right to object);
- Withdraw consent for specific data processing activities.
To exercise these rights, Data Subjects may at any time reach out to Antares Vision by sending an email at privacy@antaresvision.com.
Please note that Data Subjects also have the right to lodge a complaint with the competent Data Protection Authority in order to enforce their rights in relation to the processing of their personal data as described above.
7. Jurisdiction Specific Clauses
7.1 Where Antares Vision Is Subject to Privacy Requirements in the United States of America
Where Antares Vision is subject to the requirements of the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Acts of 2020 (CPRA), from here on referred to as “CCPA” or where other US state laws have similar requirements, the following applies:
California Data Subjects have the right to:
- Know what personal information the business has collected about the Data Subject, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom the business discloses personal information, and the specific pieces of personal information the business has collected about the Data Subject.
- Delete personal information that the business has collected from the Data Subject, subject to certain exceptions.
- Correct inaccurate personal information that a business maintains about a Data Subject.
- Opt-out of the sale or sharing of their personal information by the business (where applicable).
- Limit the use or disclosure of sensitive personal information by the business (subject to certain exceptions, where applicable).
- Receive non-discriminatory treatment for the exercise of these rights.
How You Can Exercise Your Data Protection Rights
To exercise these rights, or to limit the sharing of your personal information, please contact us at privacy@antaresvision.com.
Financial Incentives
Antares Vision does not offer financial incentives to you for sharing your personal information with us.
Children's Privacy
Given that Antares Vision’s services are not directed to users under 16 years of age, Antares Vision does not sell or share the personal information of any minors under 16. If you are a parent or guardian and believe Antares Vision collected information about your child, please contact Antares Vision. Antares Vision will take steps to delete the information as soon as possible.
7.2 Where Antares Vision Is Subject to Privacy Requirements in the Kingdom of Bahrain (“Bahrain”)
Where Antares Vision is subject to the Personal Data Protection Law (Law No. 28 of 2018) of Bahrain, and its implementing regulations (“Bahrain PDPL”), the following applies:
Data subjects in Bahrain have the right to:
- Request the blocking or cessation of processing of their Personal Data where such processing is unlawful or causes unjustified harm.
- Lodge a complaint with the Personal Data Protection Authority in Bahrain, where they believe that their Personal Data has been processed in violation of applicable laws.
Cross-Border Transfers
Where Personal Data is transferred outside of Bahrain, such transfers will be carried out in accordance with the Bahrain PDPL and applicable regulations, and appropriate safeguards will be implemented to ensure that the Personal Data remains adequately protected.
Direct Marketing
Antares Vision does not currently process Personal Data for direct marketing purposes. Should this change at any time, such processing will be carried out in accordance with applicable laws, including, without limitation, obtaining consent where required. Data Subjects will have the right to opt out of direct marketing schemes at any time by contacting Antares Vision at privacy@antaresvision.com.
How You Can Exercise Your Data Protection Rights
To exercise your rights under Bahrain PDPL, or request further information, please contact us at privacy@antaresvision.com. Requests will be handled within the timeframes required under the Bahrain PDPL and any other applicable law.
Security Measures
Antares Vision implements appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. These measures include, amongst others, access controls, encryption where appropriate, secure hosting environments, and internal policies governing the handling of personal data.
8. Changes to This Policy
We may modify our Policy from time to time on prior written notice sent to the email address we have for you. If you do not agree with the revised Policy, immediately cease using the Platform and contact us at privacy@antaresvision.com so that we may delete your personal data.
9. Cookies
The Platform makes use of cookies. To consult the Antares Vision Cookie Policy, please click on the following link: https://ph-tatabu.nhra.bh/cookie-policy.