Overview As firms prepare their annual ADV updates or review their compliance programs, one area […]
1. Collection of Data
CRC collects several different types of information for various purposes in order to provide and improve the Website for your use.
Types of Data Collected
While using the Website, CRC may ask you to provide certain personally identifiable information that can be used to contact or identify you ("Personal Data"), which may include, but is not limited to:
First name and last name
Address, State, Province, ZIP/Postal code, City
Cookies and Usage Data
Your Personal Data may be used to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications by following the unsubscribe link or instructions provided in any email sent to you by CRC.
CRC may also collect information on how the Website is accessed and used ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages on the Website that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
2. Use of Data
CRC uses the collected data for various purposes:
3. Legal Basis under General Data Protection Regulation (GDPR)
CRC may process your Personal Data because:
4. Retention of Data
CRC will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of the Website, or CRC is legally obligated to retain such data for longer time periods.
5. Transfer of Data
Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.
If you are located outside Hong Kong and choose to provide your information to CRC, please note that CRC transfers the information provided by you through the Website, including your Personal Data if any, to Hong Kong Special Administrative Region, PRC (“Hong Kong”) and process it in Hong Kong.
6. Disclosure of Data
CRC may disclose your Personal Data in good faith belief that such disclosure is necessary to:
7. Security of Data
The security of your data is important to CRC, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While CRC strives to use commercially acceptable means to protect your Personal Data, absolute security cannot be guaranteed.
8. Rights Under General Data Protection Regulation (GDPR)
If you are a citizen or resident of a member country of the European Union (EU) or the European Economic Area (EEA), you have certain data protection rights. CRC aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.
If you wish to be informed what Personal Data CRC holds about you and if you want it to be removed from our systems, please contact us at firstname.lastname@example.org
In certain circumstances, you have the following data protection rights:
Please note that CRC may ask you to verify your identity before responding to such requests.
You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in EU or EEA.
9. Service Providers
CRC may employ third-party companies and individuals to facilitate the Website, to provide the Website on our behalf, to perform website-related services or to assist us in analyzing how the Website is used ("Service Providers").
These Service Providers have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
CRC may use social media plugins to enable a better user experience with the use of the Website
CRC uses the YouTube video platform operated by YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 USA. YouTube is a platform that enables playback of audio and video files. On some pages of the Website, the integrated YouTube player establishes a connection to YouTube in order to ensure the technical transmission of the video or audio file. When the connection to YouTube is established, data is transferred to YouTube. For information about the scope and purpose of data collection, the further processing and use of the data by YouTube and your rights and the settings you can configure to protect your privacy, please refer to the YouTube Privacy Guidelines.
CRC may use Service Providers to monitor and analyze the use of the Website.
CRC uses Google Analytics on the Website for anonymous reporting of site usage and for advertising on the Website. If you would like to opt-out of Google Analytics monitoring your behavior on the Website please use this link: https://tools.google.com /dlpage/gaoptout/.
10. Links to Other Sites
CRC has no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.
12. Contact Us
Compliance Risk Concepts
Attn: Data Protection Officer
40 Exchange Place, Suite 402 New York,
New York 10005