Privacy

Data Privacy Policy

Durin is committed to protecting the privacy of its customers and complying with applicable data privacy regulations, including but not limited to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and New York’s Stop Hacks and Improve Electronic Data Security (SHIELD) Act. This Data Privacy Policy (hereinafter “the Policy” or “this Policy”) outlines how Durin will handle personal data in compliance with these regulations.

Durin keeps this Policy under regular review. If we make material changes to this Policy, we will provide notice of such changes by posting the revised policy on the Durin website, and where appropriate, by other means.

1. SCOPE

This Policy applies to all personal data collected, processed, and stored by Durin in relation to our customers, employees, and any other individuals whose personal data or personal information we may collect in the course of regular business activities, including but not limited to information collected through  a visitor’s use of one or more of our websites referred to collectively herein as “our Website(s)” or “the Website(s)” and any information we or our employees collect in person or over the telephone.   

Our Website(s) and any available Apps may contain links to websites operated by others. The pertinent provisions of this Policy only apply to information collected by our Website(s). Privacy policies for these third-party sites, Apps, and services may be different from this Policy. Access to these third-party sites , Apps, and services is undertaken at the visitor’s own risk.

2. INFORMATION WE COLLECT

The information we collect generally falls into the following two categories: "Personal Information" and "Non-Personally Identifiable Information." Personal Information refers to information that lets us know the specifics of who you are (for example, your name, job title, company, physical mailing address, e-mail address, telephone and fax numbers and, if applicable, financial information such as your credit card information). Non-Personally Identifiable Information refers to information that does not by itself identify a specific individual. If we do combine Non-Personally Identifiable Information with Personal Information, the combined information will be treated as Personal Information for as long as it remains combined.

In general, we collect your Personal Information when you voluntarily provide it to us, such as when you register with us, place an order for products or services, or submit your information to us in one of our online web-forms. We also collect information when you voluntarily complete customer surveys, provide feedback, and participate in competitions.

Durin will only collect, process, and store Personal Information if there is a lawful basis for doing so. These may include:

  • Consent: you have given clear consent for your Personal Information to be processed for a specific purpose.
  • Contractual necessity: The processing of Personal Information is necessary for the performance of a contract with you.
  • Legal obligation: The processing of Personal Information is necessary to comply with a legal obligation.
  • Vital interests: The processing of Personal Information is necessary to protect the vital interests of you or another person.
  • Legitimate interests: The processing of Personal Information is necessary for the legitimate interests pursued by Durin or a third party, except where such interests are overridden by your interests or fundamental rights.

In addition, our Website(s) may use "cookies" to gather Non-Personally Identifiable Information. Cookies are files placed on your computer to collect standard internet log information and visitor behavior information. This information is used to track visitor use of the Website(s) and to compile statistical reports on Website activity. For further information visit www.aboutcookies.org or www.allaboutcookies.org. You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However, in a few cases some of our Website’s features may not function as a result.

3. WHY AND HOW IS YOUR INFORMATION BEING USED OR PROCESSED

Personal Information you provide to us is used to:

  • process your order, manage your account, deliver the goods or services you request (including communicating with you about your Durin products, services and subscriptions to our publications or software),
  • to respond to your inquiries and contact you about our Website’s services based on your consent.
  • to manage subscriptions to Durin publications, including emails notices, e-newsletters.
  • to access certain features or functions of one or more of our Website(s) or Apps.

In processing your order, we may send your details to our third-party product fulfillment agents and use financial information you submit or information from credit reference agencies and fraud prevention agencies to verify your credit and collect payments for your purchases, orders, and registrations.

If you have consented to receive marketing communications from us, you have the right to opt out at any time. If you no longer wish to be contacted for marketing purposes, please email us at info@durin.ai.

Other than as set forth above, we may use and/or disclose your information, including your Personal Information, in the following circumstances:

  • To enforce, and/or investigate violations of the Terms of Use of our Website(s), Apps, or any violation of this Policy;
  • Although unlikely, your Personal Information may be disclosed to the governments, courts, law enforcement or regulatory agencies under a lawful order in a jurisdiction where you are located and/or where your Personal Information is stored and/or processed. You cannot opt out of disclosure of your Personal Information if required by lawful order;
  • To allow our official third-party distributors, resellers, and services providers to support your products; and,
  • To allow our official third-party distributors and resellers to respond to a request made by you.

Durin may share your Personal Information with third parties as indicated above and as consistent with this Policy. Except as permitted or required by applicable law, Durin requires third party controllers or processors to whom it discloses your Personal Information to either (i) subscribe to the relevant Privacy Principles or (ii) contractually agree that data and Personal Information will only be processed for limited and specified purposes consistent with the consent given by you, that the recipient will provide data protection by taking all necessary technical and organizational measures to ensure the security and confidentiality of the information processed on our behalf, and that the recipient will notify Durin if it makes a determination that it can no longer meet those obligations.

4. DATA INTEGRITY AND PURPOSE LIMITATION

Durin takes reasonable steps to ensure that the Personal Information that it processes is processed while upholding the following data protection principles:

  • Lawfulness, fairness, and transparency: Personal Information will only be collected and processed lawfully, fairly, and in a transparent manner.
  • Purpose limitation: Personal Information will only be collected and processed for specified, explicit, and legitimate purposes.
  • Data minimization: Personal Information will be adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.
  • Accuracy: Personal data will be accurate and kept up to date, complete, and accurate.
  • Storage limitation: Personal data will be kept for no longer than necessary.
  • Integrity and confidentiality: Personal data will be processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

5. YOUR CHOICES AND RIGHTS

You have the right to:

  • Withdraw your consent to the processing of your Personal Information at any time without penalty;
  • Access your Personal Information and have it corrected, amended or deleted;
  • Receive a copy of your personal data in a structured, commonly used, and machine-readable format;
  • At any time, to object to our processing of your Personal Information, which includes the right not to be subject to a decision based solely on automated processing (including profiling) which we will comply with unless we demonstrate a compelling legitimate ground for processing that overrides your rights; and
  • If you believe your Personal Information is inaccurate, unlawful, no longer necessary for our business purposes, or if you object to our processing of your Personal Information, you also have the right to instruct us to restrict the processing of your data pending our investigation and/or verification of your claim.
  • If you wish to raise a complaint and initiate an investigation on how we have handled your personal data, or request a copy of your Personal Information, please email us at info@durin.ai. We may make a small charge for this service.

Durin also offers you the opportunity to choose or opt out of disclosure of your Personal Information to certain third parties or use your Personal Information for a purpose that is incompatible with the purpose for which the information was originally collected or subsequently authorized by you. You may contact us at info@durin.ai regarding our use or disclosure of your Personal Information.

Additionally, this Policy sets forth the circumstances in which we may disclose Personal Information without offering you an opportunity to opt out, including:

  • to our subsidiary companies as necessary to perform services on our behalf;
  • to service providers, affiliates, agents and/or business partners we have retained to perform services on our behalf;
  • when we believe disclosure is necessary to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual illegal activity; or
  • in the event we sell or transfer all or a portion of our business or assets (including in the event of a divestiture, merger, consolidation, liquidation or bankruptcy). Should such a sale or transfer occur, we will use reasonable efforts to direct the transferee to use the Personal Information in a manner that is consistent with this Policy.

6. WHAT DO WE DO WITH YOUR INFORMATION WHEN YOU TERMINATE YOUR RELATIONSHIP WITH US?

In general, we will only retain your information for the time necessary to realize our legitimate business purposes and to comply with the law. However, we may continue to store anonymous or anonymized information, such as website visits, without identifiers, in order to improve our services.

7. DATA BREACH NOTIFICATION

In the event of a personal data breach, Durin will notify the relevant supervisory authority and affected individuals without undue delay, as required by, but not limited to, the GDPR, CCPA, and CPRA..

8. QUESTIONS OR FEEDBACK

If you have any questions or comments regarding our Policy and practices, please email us at info@durin.ai.