In the following discussion, the “company” refers to us and our affiliates and/or delegates, except where the context requires otherwise.
We will collect, use, disclose, retain and secure personal data to the extent reasonably required only and within the parameters that could be reasonably expected during the normal course of business. We will only process, disclose, transfer or retain personal data to the extent legitimately required to conduct our activities of on an ongoing basis or to comply with legal and regulatory obligations to which we are subject. We will only transfer personal data in accordance with the requirements of the DPA, and will apply appropriate technical and organizational information security measures designed to protect against unauthorized or unlawful processing of the personal data and against the accidental loss, destruction or damage to the personal data.
In our use of this personal data, we will be characterized as a “data controller” for the purposes of the DPA, while our affiliates and service providers who may receive this personal data from us in the conduct of our activities may either act as our “data processors” for the purposes of the DPA or may process personal information for their own lawful purposes in connection with services provided to us.
We may also obtain personal data from other public sources. Personal data includes, without limitation, the following information relating to a shareholder and/or any individuals connected with a shareholder as an investor: name, residential address, email address, contact details, corporate contact information, signature, nationality, place of birth, date of birth, tax identification, credit history, correspondence records, passport number, bank account details, source of funds details and details relating to the shareholder’s investment activity.
Who this Affects
If you are a natural person, this will affect you directly. If you are a corporate investor (including, for these purposes, legal arrangements such as trusts or exempted limited partnerships) that provides us with personal data on individuals connected to you for any reason in relation your investment in the Company, this will be relevant for those individuals and you should transmit the content of this Privacy Notice to such individuals or otherwise advise them of its content.
How the Company May Use Your Personal Data
The company, as the data controller, may collect, store and use personal data for lawful purposes, including, in particular:
where this is necessary for the performance of our rights and obligations under any purchase agreements;
where this is necessary for compliance with a legal and regulatory obligation to which we are subject (such as compliance with anti-money laundering and FATCA/CRS requirements); and/or
where this is necessary for the purposes of our legitimate interests and such interests are not overridden by your interests, fundamental rights or freedoms.
Should we wish to use personal data for other specific purposes (including, if applicable, any purpose that requires your consent), we will contact you.
Why We May Transfer Your Personal Data
In certain circumstances, we may be legally obliged to share personal data and other information with respect to your shareholding with the relevant regulatory authorities such as the Cayman Islands Monetary Authority or the Tax Information Authority. They, in turn, may exchange this information with foreign authorities, including tax authorities.
We anticipate disclosing personal data to persons who provide services to us and their respective affiliates (which may include certain entities located outside the US, the Cayman Islands or the European Economic Area), who will process your personal data on our behalf.