5.1. “Processing” is understood as at least one of the following: storage, modification, retrieval, disclosure, structuring, use, destruction as well as any other action with respect to your personal data.
5.2. We will process your personal data only for the following purposes and on the following legal grounds:
|Data type||Processing purposes||Legal basis||Retention period|
|Account data||We process your account data so that you can use all the functionality of the Services.||Legal interest in providing services and improving them.||361 days|
|User data||We process your user data so that you can use all the functionality of the Services.||Legal interest in providing services and improving the Services.||361 days|
|Payment information||We process your payment information in order to resolve disputes if they arise, as well as to enable the use of paid features within the Services.||Performance of the contract||361 days|
5.3. Subject to data anonymisation, your personal data may be used by Noirix for any other purposes.
5.4. We do not not use automated decision-making tools (including profiling) in personal data processing. Automated decision-making tools primarily include those systems that process your personal data without human intervention to make decisions that may have potential legal consequences for you.
5.5.Your personal data will be stored on the servers of our counterparties that we are using for operating our Services.
5.6. We use Amazon Web Services for operating our Services. Therefore, your data will be stored on the servers of the following legal entity:
Amazon Web Services EMEA SARL (Luxembourg)
Address: L 1855 38 Avenue John F. Kennedy, Luxembourg
5.6. Employees of Noirix shall also take all necessary organisational, legal and technical measures available to us for protection of your personal data. Users of the Services shall also be responsible to the maximum possible extent for the provision of accurate account details, keeping passwords and any other information required for authorisation confidential and its protection from unauthorised access by third parties.
5.8. Any personal data collected and processed hereunder shall be properly protected unless:
(1) you consent to their disclosure;
(2) such personal data are anonymised;
(3) such personal data are subject to disclosure under the applicable law.
5.9. We will do our best to keep your personal data protected. However, despite any possible measures taken on our part, we cannot guarantee full protection of the Services against information security risks.