Privacy Policy | urabook

1. Data Controller

Urabook, the registered address of which is at: 299 Russell Hill Road, Toronto, Canada (hereinafter “Urabook” or the “Company”) is the data controller for your personal data. Information is provided in this privacy policy on the processing of the personal data of customers or potential customers, job candidates and users of those social networks that interact with us in accordance with that which is provided for in the General Data Protection Regulation (“GDPR”).

To respond any doubts you might have regarding this policy you can contact us by e-mail at: info@Urabook.com. If you so wish, you can ask for a list of the recipients of your data at the same e-mail address.

2. Customer Data Processing

If you are a Urabook customer as a result of having bought or intending to purchase one of our products, your data will be processed as indicated below:

Processing purpose: We process your data and the ID information of the child who is to figure as the main character in the story that you provide to maintain, fulfil, develop, control and conduct our commercial relations with you as a Urabook customer. Moreover, we will be able to send you commercial messages about our products and services to keep you up to date about novelties and promotions tailored to your tastes, interests and/or browsing habits.
Legal basis for processing: It is necessary to process your data and those of the child who is to figure as the main character that you provide us with to perform our contractual relationship (e.g. to manage and send your order to your desired address and to personalize your story). With respect to the sending of commercial messages, Urabook has a legitimate interest in keeping in contact with you to inform you of our novelties that may interest you.
Recipients of your data: Only some of our technological and logistics services providers will have access to your personal data and those of the child who is to figure as the main character that you provide us with to render their services (e.g. the transport and order delivery companies need to know your delivery address, while the story printer’s need to know its content, which includes the avatar and the name of the main child character). These services providers will process your data in accordance with our instructions and always under our orders.
International transfer of data: To provide you with our service we use technological services (and logistics ones whenever your address is outside the European Union) that need to have access to your personal data from the USA, albeit always in accordance with our instructions. These providers are signed up to the Privacy Shield Framework, an agreement signed between the United States of America and the European Union under which the American entities adhering to the programme guarantee that the same data protection standards will be applied as those imposed by the European Union. You can ask for an updated list of these providers by sending an e-mail to: info@Urabook.com.

Moreover, the company URABOOK, Inc., which belongs to our Group, will have access to your personal data if your package has to be sent to a place outside the European Union. Standard contractual clauses, as drafted by the European Commission, have been signed with this company to regulate these types of international relations under Article 46(2) of the General Data Protection Regulation. You can request a copy of these standard contractual clauses by sending an e-mail to: info@Urabook.com.

Data storage period: Your data will be stored during the performance and maintenance of our contractual relationship. As far as sending commercial messages are concerned, your data will be stored for as long as you wish, given that you can request that we stop sending you these messages through the link attached for this purpose in all of our publicity messages. If you do not interact with our commercial e-mails over a period of 18 months (‘interacting’ is understood in this case as opening the e-mail), we will erase your data for this purpose.

3. Processing of potential customer data for advertising

If you are not yet a Urabook customer, but wish to receive our advertising messages informing you of novelties, promotions, campaigns, launches, etc., we will process your data as indicated below:

Processing purpose: We process your data to keep you informed about our novelties and promotions, taking your tastes, interests and/or browsing habits into account.
Legal basis for processing: Your express consent shown by marking the specific consent box.
Recipients of your data: Only some of our technological services providers will have access to your personal data to render their services, which requires accessing our customer data. These services providers will process your data in accordance with our instructions and always under our orders.
International transfer of data: To provide you with our service we use technological services that need to have access to your personnel data from the USA, albeit always in accordance with our instructions. These providers are signed up to the Privacy Shield Framework, an agreement signed between the United States of America and the European Union under which the American entities adhering to the programme guarantee that the same data protection standards will be applied as those imposed by the European Union. You can ask for an updated list of these recipients by sending an e-mail to: info@Urabook.com.
Data storage period: Your data will be stored for as long as you wish, given that you can request that we stop sending you these messages through the link attached for this purpose in all of our publicity messages. If you do not interact with our commercial e-mails over a period of 18 months (‘interacting’ is understood in this case as opening the e-mail), we will erase your data.

4. Processing data by contact through the contact form

If you have sent a query to Urabook, we will process your data as indicated below:

Processing purpose: We process your data to answer the query or question you have raised.
Legal basis for processing: Urabook has a legitimate interest in answering any question that a person might ask it.
Recipients of your data: Only some of our technological services providers will have access to your personal data to render their services, which requires accessing our customer data. These services providers will process your data in accordance with our instructions and always under our orders.
International transfer of data: To provide you with our service we use technological services that need to have access to your personnel data from the USA, albeit always in accordance with our instructions. These providers are signed up to the Privacy Shield Framework, an agreement signed between the United States of America and the European Union under which the American entities adhering to the programme guarantee that the same data protection standards will be applied as those imposed by the European Union. You can ask for an updated list of these recipients by sending an e-mail to: info@Urabook.com.
Data storage period: Your data will be stored for this reason until your query has been answered.

5. Processing data of candidates that attach their CVs in the “Work for us” form

If you are a Urabook job candidate and have sent us your CV, we will process your data as indicated below:

Processing purpose: We process your data to study your present or future candidature for a job with Urabook.
Legal basis for processing: Your express consent shown by marking the specific consent box.
Recipients of your data: Only some of our technological services providers will have access to your personal data to render their services, which requires accessing our customer data. These services providers will process your data in accordance with our instructions and always under our orders.
International transfer of data: To provide you with our service we use technological services that need to have access to your personnel data from the USA, albeit always in accordance with our instructions. These providers are signed up to the Privacy Shield Framework, an agreement signed between the United States of America and the European Union under which the American entities adhering to the programme guarantee that the same data protection standards will be applied as those imposed by the European Union. You can ask for an updated list of these recipients by sending an e-mail to: info@Urabook.com.
Data storage period: Your data will be kept for one year as of the date you send Urabook your CV.

6. Processing of data of users of social networks that interact with Urabook profiles on those networks

If you are a user of a social network and interact with a Urabook profile or page, we will process your data as indicated below:

Processing purpose: We process your data to be able to act with you normally under the social network policies and to manage our on-line communities in accordance with each social network and our interests (as well as yours).
Legal basis for processing: We have a legitimate interest in processing your data within the social network operational framework to respond to any queries, doubts, etc., you might raise over the social network, as well as to interact with you within the normal operation of the social network in question.
Recipients of your data: No third party will have access to your social network user data through Urabook.
Data storage period: We will only store your data for as long as it takes to answer your query or as long as our interaction lasts. Bear in mind that although we will not specifically store these data, your data could remain on the social network as per the operational policy of each particular one.

7. Processing data of provider representatives

If you are a representative or contact person at a Urabook supplier company with whom our employees are in touch, we will process your data as indicated below:

Processing purpose: We process your data to maintain, fulfil, control and perform the commercial relations we maintain with the supplier for which you work or with you if you are self-employed.
Legal basis for processing: We have a legitimate interest in processing your data as a point of contact with Urabook to implement our business relationship.
Recipients of your data: Only some of our technological services providers will have access to your personal data to render their services, which requires accessing the data of our provider representatives. These services providers will process your data in accordance with our instructions and always under our orders.
International transfer of data: To provide you with our service we use technological services that need to have access to your personnel data from the USA, albeit always in accordance with our instructions. These providers are signed up to the Privacy Shield Framework, an agreement signed between the United States of America and the European Union under which the American entities adhering to the programme guarantee that the same data protection standards will be applied as those imposed by the European Union. You can ask for an updated list of these recipients by sending an e-mail to: info@Urabook.com.
Data storage period: Your data will be stored to maintain and conduct the commercial relations we maintain with the provider for which you work or with you if you are self-employed.

8. Exercise of rights

You can exercise the following rights with respect to Urabook:

Right to access your personal data to learn to which end they are being processed and the processing operations being carried out on them;
Right to rectify any inaccurate personal information;
Right to erase your personal data, whenever possible;
Right to request the restriction of the processing of your personal data whenever the accuracy, lawfulness or need for processing proves doubtful, in which case, we will be able to store your data to allow for the lodging or defending of complaints.
Right to object to the processing of your data to respond to any question you may have raised in the contact form, e-mail or chat, as well as to process your data over a social network or if you are a representative or contact person for an “ALIAS” supplier. Likewise, you can withdraw your consent to receive commercial messages at any time by means of the link attached for this purpose in all of our publicity messages.
Right to portability of your data when you are a Urabook customer and with respect to the processing to be done to maintain our contractual relationship. Portability consists of receiving the personal data you have provided Urabook with in a structured, commonly used and machine-readable format and transmitting those data to another controller when the processing is done in an automated fashion.

You can exercise your rights at any time free of charge by sending an e-mail to the following address: info@Urabook.com. You must specify what right you want to exercise and provide your personal details. If your identity has to be verified and we need further information than you provided us with we will duly inform you.

If you believe that Urabook has committed a legal infringement regarding the protection of personal data, please do not hesitate to contact us at the following e-mail address: info@Urabook.com to inform us of your issue so we can resolve the problem as soon as possible. Whatever the case, you can also inform the Canadian Data Protection Agency of the case in question to have your rights protected.