CapSure Privacy Policy

Any data collected through this app, including personal data (as defined under applicable data protection laws, referred to collectively as “Personal Data”), will only be used for the purposes set out in this Privacy Notice. We are not monitoring anything in the browser. When data is collected on this app, Lion Re:Sources, S.A. is acting as a data controller, located at WWWH+CJQ, Pinos, San José Province, San José, Costa Rica. This Privacy Notice only covers this app and does not apply to other data practices.

The following table describes the categories of Personal Data we collect.

The following table provides information about our purposes and legal basis for collecting your Personal Data:

We will share your Personal Data for various business purposes. The table below shows how and with whom we may share or disclose your Personal Data, and whether (based on the California Consumer Privacy Act’s definition of “sell”) we believe we have “sold” a particular category of information in the prior 12 months.

Please use this form if you want to make use of any of your below mentioned legal rights. The fields marked with an asterisk on the forms are required for us to process and respond to your request. If you do not provide this Personal Data, we will not be able to process and respond to your request.

1. Where you are resident of the EU

1.1 General

Subject to certain exceptions and the jurisdiction in which you live, if you are a resident of the EU, the GDPR provides you with specific rights regarding your Personal Data. This subsection describes your rights and explains how to exercise those rights regarding Personal Data that we hold about you. These rights include:

• The right of access:

  You can access all Personal Data we hold about you, know the origin of this Personal Data and obtain a copy in an understandable format. You may also use your right to access your Personal Data to control the exactness of the data and have them rectified or deleted. You have no justification to provide to exercise your right to access;

• The right to rectification:

  In order to avoid that inaccurate or incomplete Personal Data relating to you is process or shared, you can ask us to rectify them;

• The right to erasure:

  You may request the erasure or deletion of the Personal Data we hold on you. This is not an absolute right since we may have to keep your Personal Data for legal or legitimate reasons. You may, for example, exercise your right to deletion in the following cases:
  

  • if you have withdrawn your consent to the processing (see below);
  • if you legitimately objected to the processing of your data (see below);
  • when data is not or is no longer necessary for the purposes for which it was initially collected or processed;
  • the data is processed unlawfully (e.g., publishing hacked data);

• The right to object to the processing of your Personal Data:

  When we process your Personal Data based on our legitimate interest (to determine to which processing this applies, please refer to Section II of this Privacy Notice), you may at any time object to the processing of your Personal Data for reasons relating to your personal situation. We may nevertheless, on a case-by-case basis, reject such a request by pointing out the legitimate and imperious reasons justifying the processing of this data which prevail on your interests, rights and freedoms, or when this data is necessary to establish, exercise or defend a right before a Court.

• The right to restrict processing

  The right to limit the processing completes your other rights. This right means that the data processing relating to you and that we are performing is limited, so that we may keep this data, but we cannot use it or process it in any other manner. This right applies in specific circumstances, i.e.:

  • if you challenge the exactness of your Personal Data. The processing is then limited for a period of time so that the agency may verify the exactness of the Personal Data;
  • if the processing is unlawful and you object to the erasure of your Personal Data and request instead that its use be limited;
  • if we do not need the Personal Data for the purposes mentioned above in Section I anymore, but you still need it to establish, exercise or defend rights before a Court; and
  • o in the cases where you objected to the processing which is based on the legitimate interests of the agency, you may ask to limit the processing for the time necessary for us to verify if we can accept your objection request (i.e., the time necessary to verify whether the legitimate reasons of the agency prevail over yours).

• Right to object to data processing for direct marketing purpose

  You may unsubscribe or object, at any time and without any justification, to the reception of direct marketing communications. Simply either (i) click on the link in the footer of the communications you receive from us; or (ii) use the hyperlink above; or (iii) send us an email at the email address set out in the “Further Information” section below with the word unsubscribe in the subject field of the email.

• The right to data portability:

  You may request to retrieve the Personal Data you provided us with, in a structured, commonly used, and machine-readable format, for personal use or to share them with a third party of your choice.

  This right only applies to Personal Data you provided us with, directly or indirectly, and which was processed through automated means, if this processing is based on your consent or the performance of a contract. Please check the list of our Personal Data processing activities’ legal grounds (in Section II of this Privacy Notice) to know whether our processing is based on the performance of a contract or on consent.

• The right to withdraw your consent to the processing of your Personal Data at any time:

  You may read Section II of this Privacy Notice in order to identify the purposes for which the processing of your Personal Data is based on your consent.

If you are unsatisfied with the way we process your Personal Data or if your request has been rejected, you may also lodge a formal complaint with your local competent data protection authority.

Personal Data will be stored in accordance with our applicable data retention requirements and corporate policies. The retention period for Personal Data varies depending on the type of Personal Data and the purposes of processing it.

We will respond without undue delay and in any event within one month from the date we receive your request. This timeframe can be extended by two months to take the complexity of the request, or the number of requests received into account. In this case, we will inform you within one month from receiving your request, specifying the reasons for extending the response timeframe.

2. Where you are a California resident

Your California Rights and Choices

California residents, under the California Consumer Privacy Act of 2018 (“CCPA”), have specific rights with regard to their Personal Data. This section describes how to exercise those rights and our process for handling those requests. (To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.)

2.1 Right to request access to your Personal Data

California residents have the right to request that we disclose what categories of Personal Data that we collect, use, disclose, or sell about them. In particular, California residents may request:

• the specific pieces of Personal Data that we have collected about you;
• the categories of Personal Data we have collected about you;
• the categories of sources from which the Personal Data was collected;
• the categories of Personal Data about you we disclosed for a business purpose or sold;
• the categories of third parties to whom the Personal Data was disclosed for a business purpose or sold; and
• the business or commercial purpose for collecting or selling the Personal Data.

2.2 Right to request deletion of your Personal Data

You may also request that we delete any Personal Data that we collected from you. However, we may retain Personal Data for certain important purposes, as set out by law. When we receive and verify your request to delete your Personal Data we will proceed to delete the data unless an exception applies.

2.3 Right to nondiscrimination.

We will not deny, charge different prices for, or provide a different level of quality of goods or services if you choose to exercise these CCPA rights.

2.4 Right to Opt-out of the sale of your Personal Data.

We do not sell any Personal Data as the term ‘sell’ is used in the CCPA.

2.5 Shine the Light

Customers who are residents of California may request (i) a list of the categories of Personal Data disclosed by us to third parties during the immediately preceding calendar year for those third parties’ own direct marketing purposes; and (ii) a list of the categories of third parties to whom we disclosed such information. To exercise a request, please write us at the email or postal address set out in the “Further Information” section below and specify that you are making a “California Shine the Light Request.”

2.6 How to exercise your CCPA privacy rights

California residents may exercise their CCPA privacy rights by sending an email to privacyofficer@publicisgroupe.com submitting your request to form, or by contacting us at 018339830087.

For security purposes (and as required under California law), we will verify your identity – in part by requesting certain information from you – when you request to exercise your California privacy rights. For instance, if you request categories or specific pieces of Personal Data we have collected about you, you may need to confirm your possession of an identifier (such as an email address) or to provide a piece of identification that confirms you are the person you claim to be.

If we are unable to complete your request fully for any reason, we will provide you additional information about the reasons why we could not comply with your request.

You may also designate an agent to make requests to exercise your rights under CCPA as described above. We will take steps both to verify the identity of the person seeking to exercise their rights as listed above, and to verify that your agent has been authorized to make a request on your behalf through providing us with a signed written authorization or a copy of a power of attorney.

3. Where you are a Nevada Resident

Nevada law (NRS 603A.340) requires each business to establish a designated request address where Nevada consumers may submit requests directing the business not to sell certain kinds of Personal Data that the business has collected or will collect about the consumer. A sale under Nevada law is the exchange of Personal Data for monetary consideration by the business to a third party for the third party to license or sell the Personal Data to other third parties. If you are a Nevada consumer and wish to submit a request relating to our compliance with Nevada law, please contact us as at privacyofficer@publicisgroupe.com.

We use a variety of methods, such as firewalls, intrusion detection software and manual security procedures, designed to secure your data against loss or damage and to help protect the accuracy and security of information and to prevent unauthorized access or improper use. Nevertheless, transmission via the internet is not completely secure and we cannot guarantee the security of information about you. If you think that the Website or any Personal Data is not secure or that there has been unauthorized access to the Website or your Personal Data, please contact privacyofficer@publicisgroupe.com immediately.

Due to the international nature of our business, your Personal Data may be transferred outside the European Union.

Your Personal Data will be transferred to Costa-Rica which is not considered to have the same level of data protection as in the EU. However, we ensure all data transfers comply with applicable legal requirements by executing standard contractual clauses. Should you wish to know more about how your Personal Data is protected or wish to request a copy of the contractual protections please contact privacyofficer@publicisgroupe.com.

Any changes to this Privacy Notice will be promptly communicated on this page and you should check back to see whether there are any changes. Continued use of the Website after a change in the Privacy Notice indicates your acknowledgement and acceptance of the use of Personal Data in accordance with the amended Privacy Notice.

If you wish to save this text, please mark the entire statement (e.g. with your mouse) and copy-paste by pushing ctrl-c.

This Privacy Notice has been designed to be accessible to people with disabilities. If you experience any difficulties accessing the information here, please contact us at privacyofficer@publicisgroupe.com.

If you consider that we are not complying with this Privacy Notice, if you have any questions in relation to this Privacy Notice, or have questions about your rights and choices, please contact privacyofficer@publicisgroupe.com.Data subjects in Europe may also lodge a formal complaint with their competent data protection authority.

If you have any questions about Lion Re:Sources, S.A.'s data practices or you wish to exercise your rights or know about the contractual protections in place, please contact the Publicis Chief Data Privacy Officer on privacyofficer@publicisgroupe.com.