X3 Innovations Online Privacy Statement
This privacy notice (“Privacy Notice”) describes how X3 Innovations. and its subsidiaries and affiliates that link to this Privacy Notice – each entity data controller – (“X3,” “our,” “us” or “we”) may collect, use and share information relating to you as an identified or identifiable natural person (“Personal Data”).
Please read this entire privacy notice carefully before using our websites, email notifications, mobile applications, social media applications, widgets, and our other online services (the “Services”) because it will help you understand what data we collect, how we use and share it, and what your choices are with respect to that data.
The Services of X3 subsidiaries and affiliated companies are each owned, operated and provided by such subsidiaries and companies. However, this Privacy Notice ONLY governs the use of X3 company Services that specifically link to this Privacy Notice. Other X3 company Services may link to or otherwise provide their own, separate notice.
Our privacy practices may vary among the countries in which we operate to reflect local practices and legal requirements.
Personal Data Collection
Through your use of the Services, we may collect Personal Data from you (especially, if you choose to provide it), including without limitation:
We may collect your Personal Information or usage data from third parties, including without limitation:
We will apply the terms of our Privacy Notice to any Personal Data received from a third party, unless we have disclosed to you otherwise. X3 is not responsible for these third parties' dissemination of your Personal Data.
2. HOW WE USE YOUR PERSONAL DATA
We may use your Personal Data for the following purposes, as permitted by applicable law:
We may also use your Personal Data in other ways that are consistent with the above-described purposes and to otherwise administer our websites and provide our Services to you.
3. LEGALBASES FOR THE PROCESSING AND CONSEQUENCES
We rely on the following legal grounds for the collection, processing, and use of your Personal Data:
In general, the provision of your Personal Data is voluntary, but in certain cases it is necessary in order to enter into a contract with us or to receive our products or services as requested by you.
Not providing your Personal Data may result in disadvantages for you – for example, you may not be able to receive certain products and services. However, unless otherwise specified, not providing your Personal Data will not result in legal consequences for you.
4. NOTICE TO X3 INVESTORS
Certain pages of our websites allow investors in X3 to obtain publicly available information related to company performance. Investors may view and/or request certain information through our website. Depending upon what information is requested by an investor, this feature of our website may ask for, and the investor may choose to provide, the investor’s name, title, organization, occupation, address, telephone number, and email address (“Investor Information”). X3 will use Investor Information to verify an investor’s identity and fulfill any requests for information.
5. NOTICE TO EMPLOYMENT APPLICANTS
Certain pages of our websites include the ability for people interested in working for X3 or one of its subsidiaries or companies to find out more information about employment opportunities at X3, its affiliates and/or subsidiaries. To apply for open positions using our website, you must create an employment profile through our website, which includes the information that X3 requests you to provide, and that you may choose to provide, to be considered for employment (the “Employment Applicant Information”).
Prior to creating an employment profile, you must affirmatively consent to the privacy terms governing the submission of your information to X3 for employment purposes. The terms that you agree to in order to create an employment profile shall govern X3’s use of the information you provide to apply for employment. X3 will use Employment Applicant Information for evaluation and hiring purposes, and communication in furtherance of the evaluation and hiring purposes.
We maintain appropriate technical and organizational measures to protect your Personal Information, including assuring that third-party service providers who access or handle Personal Information on our behalf and affiliates maintain such safeguards. We seek to encrypt credit card numbers from e-commerce transactions conducted on our website using secure socket layer ("SSL") technology.
However, no method of Internet transmission or electronic storage is 100% secure or error-free, so it is not possible to guarantee absolute security. You must protect against unauthorized access to your password and to your computer, and be sure to sign off when finished using a shared computer. If you have reason to believe that your interaction with us is no longer secure (e.g., if you feel that the security of any account you might have with us has been compromised), please immediately notify us by email info@The-X3.com.
Where we have given you or you have chosen a password which enables you to access certain portions of our websites, you are responsible for keeping this password confidential. You should not share your password with anyone.
International Data Flow
The Personal Data that we collect or receive about you may be transferred to and/or processed by bodies that are located inside or outside the EEA.
Some of the recipients of your Personal Data (see also below) are certified under the EU-U.S. Privacy Shield and others are located in countries with adequacy decisions (in particular, Canada (for non-public organizations subject to the Canadian Personal Data Protection and Electronic Documents Act) and Argentina), and, in each case, the transfer is thereby recognized as providing an adequate level of data protection from a European data protection law perspective (see Art. 45 General Data Protection Regulation – "GDPR").
Other recipients might be located in countries which do not adduce an adequate level of protection from a European data protection law perspective (in particular, the USA (if not certified under the EU-U.S. Privacy Shield). We will take all necessary measures to ensure that transfers out of the EEA are adequately protected as required by applicable data protection law. With respect to transfers to countries not providing an adequate level of data protection, we will base the transfer on appropriate safeguards, such as standard data protection clauses adopted by the European Commission or by a supervisory authority (Art. 46(2)(c) or (d) GDPR), approved codes of conduct together with binding and enforceable commitments of the recipient (Art. 46 (2)(e) GDPR), or approved certification mechanisms together with binding and enforceable commitments of the recipient (Art. 46 (2)(f) GDPR). You can ask for a copy of such appropriate safeguards by contacting us as stated above under the section Contacting Us.
8. PERSONAL DATA SHARED WITH THIRD PARTIES
We only share your Personal Data with companies, organizations and individuals outside of X3 as described below.
We may share aggregated data that has been anonymized (so that you are not identified) with third parties – like publishers, advertisers or connected websites – and may make this data publicly available. For example, we may share information publicly to show trends about the general use of our services or products.
Our websites may offer publicly accessible blogs, message boards, or community forums. You should be aware that any information you provide in these areas may be read, collected, and used by others who access them.
Links to Social Networking and other Third-Party Websites
9. YOUR CHOICES AND RIGHTS
In case you are located in the EEA when accessing the Services, or the data controller as further described above in the section Overview is located in the EEA, the following applies:
If you have declared your consent regarding certain collecting, processing and use of your Personal Data (in particular regarding the receipt of direct marketing communication via email, SMS/MMS, fax, and telephone – where applicable), you can withdraw this consent at any time with future effect. Further, you can object to the use of your Personal Data for the purposes of marketing.
Please note that the above-mentioned rights might be modified under the applicable data protection law. Below please find further information on your rights to the extent that the GDPR applies (for avoidance of doubt the following applies only in case you are located in the EEA when accessing the Services or the data controller as further described above in the section Overview is located in the EEA):
Right to request access to your Personal Data
You may have the right to obtain from us confirmation as to whether or not Personal Data concerning you is being processed, and, where that is the case, to request access to the Personal Data. This access information includes the purposes of the processing, the categories of Personal Data concerned, and the recipients or categories of recipient to whom the Personal Data have been or will be disclosed.
You may have the right to obtain a copy of the Personal Data undergoing processing. For further copies requested by you, we may charge a reasonable fee based on administrative costs.
Right to request rectification
You may have the right to obtain from us the rectification of inaccurate Personal Data concerning you. Depending on the purposes of the processing, you may have the right to have incomplete Personal Data completed, including by means of providing a supplementary statement.
Right to request erasure (right to be forgotten)
Under certain circumstances, you may have the right to obtain from us the erasure of Personal Data concerning you and we may be obliged to erase such Personal Data.
9.4 Right to request restriction of processing
Under certain circumstances, you may have the right to obtain from us restriction of processing your Personal Data. In such case, the respective data will be marked and may only be processed by us for certain purposes.
Right to request data portability
Under certain circumstances, you may have the right to receive the Personal Data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit those data to another entity without hindrance from us.
Right to object
Under certain circumstances, you may have the right to object, on grounds relating to your particular situation, at any time to the processing of your Personal Data by us and we can be required to no longer process your Personal Data. Such right to object may especially apply if X3 collects and processes your Personal Data for profiling purposes in order to better understand your business interests in X3's products and services. Further you may object to the use of your data for direct marketing purposes. If you have a right to object and you exercise this right, your Personal Data will no longer be processed for such purposes by us. To exercise this right please contact us as stated above under the section Contacting Us.
However, such a right to object may in particular not exist if the processing of your Personal Data is necessary to take steps prior to entering into a contract or to perform a contract already concluded.
In case you have given us your consent for direct marketing purposes (e.g., you actively subscribed to our newsletters) you can withdraw your consent as described at the top of this section.
Other rights in connection with automated decision-making.
Furthermore, under certain circumstances with respect to automated individual decision-making, you have the right to obtain human intervention, express your point of view, and contest the decision.
You also may have the right to lodge a complaint with the competent data protection supervisory authority. You can execute this right at a supervisory authority in particular in the EEA Member State of your habitual residence, place of work or place of the alleged infringement.
9. HOW LONG WE KEEP YOUR DATA
Your Personal Data will be retained as long as necessary to provide you with the services and products requested. Once you have ended your relationship with us, we will either delete your Personal Data or anonymize your Personal Data, unless statutory retention requirements apply (such as for taxation purposes). We may retain your contact details and interests in our products or services for a longer period of time if you have allowed us to send you marketing materials. We may also retain your Personal Data after the termination of the contractual relationship if your Personal Data is necessary to comply with other applicable laws or if we need your Personal Data to establish, exercise or defend a legal claim, on a need to know basis only. To the extent possible, we will restrict the processing of your Personal Data for such limited purposes after the termination of the contractual relationship.
In compliance with the Children's Online Privacy Protection Act, 15 U.S.C., §§ 6501-06 and 16 C.F.R., §§ 312.1-312.12, our website does not permit children under 13 years of age to become users, and we do not intentionally collect information from children. By using our website, you represent that you are 13 years of age or older.
We may update this Privacy Notice from time to time. We will notify you of any such changes, including when they will take effect, by updating the "Last revised” date above or as otherwise required by applicable law.