Updated 27 January 2020
Responsible data controller in the meaning of Art. 4 No. 7 GDPR is:
TukOut Enterprise, Sereypheap Street, Phum 4, Sangkat Buon, Mittakpheap, Preah Sihanouk, 18204, Cambodia; Email firstname.lastname@example.org; Website: www.tukout.com
You can contact the data protection officer via email at: email@example.com
During the course of carrying out our business and performing our services, TukOut collects personal data to conduct our business, provide and market our services, and meet our legal obligations. Likewise, we may also collect personal data for other purposes, which we would describe in more detail to you at the point we collect the personal data.
You may refuse to provide us with some or all of your personal data; however, this may limit the ways in which we can interact with you, including providing you with our services.
Registration on our website
If you make use of our website to register, you will be asked to provide personal data. The information inserted in the respective registration form will be transmitted to TukOut as data controller. The legal basis for the processing of data - which is necessary to provide you with the respective service - is Art. 6(1)(b) GDPR. Regarding the processing of further personal data you will be asked to grant your explicit consent, and the legal basis for that processing is Art. 6(1)(a) GDPR.
Our website provides the opportunity to purchase products online and have them delivered. Required information includes address and telephone number. Regarding the processing of this personal data you will be asked to grant your explicit consent. The legal basis for this processing is Art. 6(1)(a) GDPR.
Third Party Applications
TukOut shares your personal data with third parties, in particular non-TukOut parties, only with your express consent or under another lawful basis for processing under the applicable law.
Categories of non-TukOut parties with which we share your personal data include vendors such as host and cloud service providers, marketing and mailing agencies, and sub-contractors involved in the fulfilment of our contractual obligations towards our clients. The legal basis for this processing is Art. 6(1)(f) GDPR.
Amazon CloudFront is a web service of Amazon Web Services, Inc., P.O. Box 81226, Seattle, WA 98108-1226, http://aws.amazon.com (“CloudFront”) that speeds up distribution of static and dynamic web content such as .html, .css, .js, and image files, to users. CloudFront delivers content through a worldwide network of data centers called edge locations. When a user requests content that is being served with CloudFront, the user is routed to the edge location that provides the lowest latency (time delay), so that content is delivered with the best possible performance.
If the content is already in the edge location with the lowest latency, CloudFront delivers it immediately.
If the content is not in that edge location, CloudFront retrieves it from an Amazon S3 bucket (where we have hosted our assets for the website) or an HTTP server that has been identified as the source for the definitive version of the content.
CloudFront captures information about each request that includes system logs which captures the following information: IP address, lat/long of the server which served the request, country and date and time. More information about AWS's privacy practices can be found at https://aws.amazon.com/privacy/.
Facebook conversion pixels
We use the “Custom Audience pixel” of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) on our website. With its help, we can keep track of what users do after they see or click on a Facebook advertisement. This enables us to monitor the effectiveness of Facebook ads for purposes of statistics and market research. Data collected in this way is anonymous to us, which means we cannot see the personal data of individual users. However, this data is saved and processed by Facebook. Facebook can connect this data with your Facebook account and use it for its own advertising purposes, in accordance with Facebook’s Data Policy which can be found at https://www.facebook.com/about/privacy/. You can allow Facebook and its partners to place ads on and outside of Facebook. A cookie can also be saved on your device for these purposes.
Please click here if you would like to withdraw your consent https://www.facebook.com/settings/?tab=ads#_=_.
Our website uses Google Analytics, a web analysis service of Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, www.google.com (“Google Analytics” or “Google”). Google Analytics employs cookies that are stored to your computer in order to facilitate an analysis of your use of the site. The information generated by these cookies, such as time, place and frequency of your visits to our site, including your IP address, is transmitted to Google’s location in the US and stored there.
In using Google Analytics our website employs the extension “anonymizeIp”. In doing so, Google abbreviates and thereby anonymizes your IP address before transferring it from EU/EEA member states. Google uses this information to analyze your use of our site, to compile reports for us on internet activity and to provide other services relating to our website.
Google Analytics also uses electronic images known as web beacons (sometimes called single pixel gifs) and are used along with cookies to compile aggregated statistics to analyze how our site is used.
You can find additional information on how to install the browser add-on referenced above at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For the cases in which personal data is transferred to the US, Google has self-certified pursuant to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).
Social Media Links
You can find TukOut on the following social media:
These providers are controllers for the relevant data processing.
Deletion and Term of Storage
We may keep information that we collect for an unlimited period of time, as permitted under the applicable laws or regulations.
Your rights as data subject
You have the following rights:
Right of access (Art. 15 GDPR) In principle, you have the right to receive information on the points mentioned in Art. 15 GDPR. You also have the right to request a copy of your personal data in accordance with Art. 15 (3) GDPR.
Right to rectification or erasure (Art. 16 and 17 GDPR) You have the right to have incorrect personal data corrected. In addition, you have the right to demand that your personal data is deleted if further processing is no longer necessary, if processing is unlawful or if you have withdrawn your consent.
Right to restriction of processing (Art. 18 GDPR) If the conditions in Art. 18 GDPR are met, you have the right to have the processing of your personal data restricted, i.e. to prevent further processing for the time being.
Right to object (Art. 21 GDPR) If the processing of your personal data is based on Art. 6 (1)e or f GDPR, you have the right to object to the processing if the further requirements of Art. 21 GDPR are met.
Right to data portability (Art. 20 GDPR) Within the limits of Art. 20 GDPR, you have the right to receive your personal data in a machine-readable format in order to forward it or have it forwarded to another controller.
You can require this by sending us an email at firstname.lastname@example.org.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the location of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the applicable data protection laws and regulations.
Changes to the Policy