If you have any questions or comments regarding our privacy practices, you may contact us at:
Garage Dream Auctions LLC
655 Deep Valley Drive Suite 305
Rolling Hills Estates, California 90274
We also can be reached by phone at (424) 206-2000 and by email at email@example.com
Effective Date: August 14, 2020
If you are a natural person (a “Data Subject”), you may have certain rights in addition to those described elsewhere in this policy, such as under the Opt In and Opt Out section above. These rights are in relation to your Personal Information, and include the right to be informed about the collection and use of your Personal Information, as outlined in this Policy.
Such rights also include, where certain conditions are met:
- the right to request access to the Personal Information we hold about you,
- the right to have inaccurate information about you amended or updated,
- the right to object to processing of Personal Information about you,
- the right to withdraw consent at any time (where relevant),
- the right to have Personal Information about you erased or to restrict processing in certain limited situations,
- the right to data portability and to request the transmission of Personal Information about you to another organization,
- the right to object to automated decision making that materially impacts you, direct marketing, and processing for research or statistical purposes, and
- the right to lodge complaints with applicable data supervisory authorities, in particular in the Member State of the European Union of your habitual residence, place of work or of an alleged infringement of the GDPR.
As a Data Subject, you should use the contact information below to get more information and/or to make a formal request. We will endeavor to keep the Personal Information we store about you reasonably accurate and up to date by enabling you to correct it by request.
You should notify us if any of your Personal Information changes or if you become aware of any inaccuracies in the Personal Information we hold about you.
Legal Basis for Processing Personal Information
We use the Personal Information collected from Data Subjects where there is an appropriate lawful basis. Typically this means we will only process Personal Information where it is necessary (i) for us to perform a contract with you or in order to take preparatory steps to enter into a contract, (ii) for compliance with a legal and/or regulatory obligation, or (iii) for our legitimate interests or the legitimate interests of others (including legal, investigatory, personnel, administrative and management purposes) and where this does not override your rights and freedoms.
In rare cases, we may process your personal data (i) for the protection of your interests (or someone else’s interests) or (ii) where it is needed in the public interest. We will only process “special category personal data” where a further condition is also met.
Automated Decision-Making and/or Profiling Using Data Subjects’ Personal Information
In addition to opting out by following the instructions in the Opt In and Opt Out section above, Data Subjects may also object to automated decision-making that materially impacts them using the contact information below.
Disclosure & Retention of Data Subjects’ Personal Information
We will take reasonably necessary steps to ensure that where Personal Information of Data Subjects is shared with third parties, it is treated securely and in accordance with this Policy and applicable laws.
We will endeavor not to keep Personal Information in a form that allows a Data Subject to be identified for any longer than is reasonably necessary for achieving the permitted purposes. At the end of the applicable retention period, we may destroy, erase from our systems, or anonymize Personal Information as part of such efforts. To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of the Data Subject’s Personal Information, the purposes for which we process the Data Subject’s Personal Information and whether we can achieve those purposes through other means, and the applicable legal requirements. This generally means we shall retain your personal data for 2 years after your last interaction with us and subject to and in accordance with any applicable legal and regulatory requirements, guidance and rules.
Storage & Transfer of Data Subjects’ Personal Information
We maintain physical, electronic and procedural safeguards designed to protect Data Subjects’ Personal Information, prevent unlawful or unauthorized processing of personal information, and prevent unauthorized disclosure of, or accidental loss of, or damage to, such information.
We may process personal information in, and transfer Personal Information to, countries that may not guarantee the same level of protection for Personal Information as the country in which Data Subjects reside.
Personal Information will also be processed by staff who work for us and operate outside the European Economic Area. This includes staff engaged in, among other things, the provision of administration and support services. All such staff are subject to appropriate confidentiality and security obligations.
We restrict access to non-public Personal Information about Data Subjects to those of our employees and agents who need to know the information to enable us to provide services.
We will only transfer Personal Information to third party service providers if they agree to comply with the physical, electronic and procedural safeguards described above, or if they put in place adequate measures themselves.