1. INTRODUCTION
This website is owned, operated, hosted, and maintained by CIS Group (“CIS Group”). We protect the privacy of our visitors and service users in line with the EU GDPR and the Mauritius DPA 2017. This Privacy Notice explains what personal data we collect, how we process and share it, and the rights you have.
It applies to website and physical site visitors, clients, potential clients, resellers, end users, business partners, suppliers, service providers, and their representatives. As data controllers, we define the purposes and means of processing, while also meeting our obligations as data processors under the GDPR and DPA. By using our website, you confirm that you have read and understood this Privacy Notice. “We,” “us,” and “our” refer to CIS Group.
2. THE DATA WE COLLECT
The type of data we collect will depend on the purpose for which it is collected and used. We will only collect data that we need for that purpose. We collect data directly from you where you provide us with your personal details, for example when you purchase or supply a product or services to or from us or when you submit enquiries to us or contact us. Where possible, we will inform you what data you are required to provide to us and what data is optional. The types of personal data that are collected and processed may include:
Contact Details
Categories of Personal Data Details Contact details First name, surname, address, email address, office phone, cell phone, fax number Others Photographs and Videos for events
3. WHERE WE STORE IT
All the data listed in the Records Retention & Disposal Schedule are stored in U.S., Europe & Mauritius.
4. HOW AND WHY, WE USE YOUR DATA
We will collect and use your personal data only for the purposes for which it was collected or agreed with you. We have set out in the table below the legal basis of processing for each purpose:
Responding to Queries or Complaints
Your personal data may be processed to respond to your questions or concerns and take appropriate actions regarding any complaints.
Lawful Basis: Legitimate interests of CIS Group — specifically, the proper administration of our website and business.Fulfilling Contractual Obligations
When you enter into a contract with us, we process your personal data to meet our obligations under that contract.
Lawful Basis: Performance of a contract with you or taking steps at your request before entering into a contract.Compliance with Legal and Regulatory Requirements
We process data to fulfill legal and regulatory obligations.
Lawful Basis: Legal obligation.Marketing Communications
If you have given consent or previously requested a product or service from us, we may contact you about related products or services, provided the communication complies with applicable legal timeframes.
Lawful Basis: Consent.Service Updates and Website Improvement
We may notify you about changes to our services and use your data to monitor, improve, and administer our website and services.
Lawful Basis: Legitimate interests of CIS Group — particularly, effective website and service management.Sales via Website
Personal data may be used to facilitate sales transactions on our website.
Lawful Basis: Performance of a contract with you or taking steps at your request before entering into a contract.Customer Registration
We process your data during the registration process for our services.
Lawful Basis: Taking steps at your request before entering into a contract.Invoicing
Your personal data may be used to prepare and issue invoices.
Lawful Basis: Performance of a contract with you.Event Organization and Social Media Publishing
We may collect and use your photographs or videos for event-related purposes and share them on social media — but only with your consent.
Lawful Basis: Consent.Ordering of Parts
Your data is used to manage and fulfill parts orders.
Lawful Basis: Performance of a contract with you.Warranty Upliftment
Data is processed to manage warranty-related services.
Lawful Basis: Performance of a contract with you.After-Sales Services – Entry Forms
We may create entry forms for after-sales service needs.
Lawful Basis: Consent.Repair or Service Work Orders
Your personal data is used to prepare repair and/or service orders.
Lawful Basis: Consent
5. DISCLOSURE OF PERSONAL DATA
We may disclose your personal data to our business partners who are involved in the delivery of products or services to you. We have agreements in place to ensure that they comply with these privacy terms. We may share your personal data with, and obtain data about you from:
- Third parties for the purposes listed above (including supplier of products, lawyers, IT firms, banks and
- auditors who provide legal, banking and auditing services)
- Resellers, for warranty upliftment, engineer’s report and end-user form; and
- We may also disclose your data:
- Where we have a duty or a right to disclose in terms of law or industry codes; or
- Where we believe it is necessary to protect our rights.
6. PERSONAL DATA SECURITY
We are legally obliged to provide adequate protection for the personal data we hold and to stop unauthorized access and use of personal data. We will, on an on-going basis, continue to review our security controls and related processes to ensure that your personal data is secure.
Our security policies and procedures cover:
- Acceptable usage of personal data.
- Access to personal data.
- Computer and network security.
- Governance and regulatory issues.
- Investigating and reacting to security incidents.
- Monitoring access and usage of personal data.
- Physical security.
- Retention and disposal of data.
- Secure communications.
- Security in contracting out activities or functions.
When we contract with third parties, we impose appropriate security, privacy and confidentiality obligations on them to ensure that personal data that we remain responsible for is kept secure.
We will ensure that anyone to whom we pass your personal data agrees to treat your data with the same level of protection as we are obliged to.
7. YOUR DATA PROTECTION RIGHTS
Under the GDPR/DPA, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information.
7.1 Your right to erasure of your personal data
You have the right to ask us to delete your personal data in certain circumstances:
-When we no longer need your personal data.
-If you initially consented to the use of your personal data, but have now withdrawn your consent.
-If you have objected to us using your personal data, and your interests outweigh ours.
-If we have collected or used your personal data unlawfully.
-If we have a legal obligation to erase your data.
Purpose for Collecting Personal Data:
Where we collect personal data for a specific purpose, we will not keep it longer than necessary to fulfil that purpose, unless we are required to retain it for legitimate business or legal reasons. Your personal data will be deleted or destroyed in accordance with the retention periods indicated in the Records Retention & Disposal Schedule. When we delete data from our services, no residual copies remain on our servers. To protect against accidental or malicious destruction, data from our backup systems are also deleted during our daily backup overwrite.”
7.2 Your Right Of Access To Your Personal Data
You have the right to request a copy of the personal data we hold about you. To do this, simply contact our Data Protection Officer (Compliance@cis.com.lb) and specify what data you would like. We will take all reasonable steps to confirm your identity before providing details of your personal data. You will not have to pay a fee to access your personal data (or to exercise any of your other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
7.3 Your Right To Rectification Of Your Personal Data
You have the right to ask us to update or correct your personal data if you think it is inaccurate or incomplete. We will take all reasonable steps to confirm your identity before making changes to personal data we may hold about you. We would appreciate it if you would take the necessary steps to keep your personal data accurate and up-to-date by notifying us of any change we need to be aware of.
7.4 Your Right To Restriction Of Processing
You have the right to ask us to limit how we use your data. If necessary, you may also stop us from deleting your data. To exercise your right to restriction, simply contact our Data Protection Officer (compliance@cis.com.lb), say what data you want restricted and state your reasons. You may request us to restrict the processing of your personal data in the following circumstances:
- If you have contested the accuracy of your personal data, for a period to enable us to verify the accuracy of the data.
- If you have made an objection to the use of your personal data.
- If we have processed your personal data unlawfully but you do want it deleted.
- If we no longer need your personal data but you want us to keep it in order to create, exercise or defend legal claims.
7.5 Your Right To Object To Processing
You also have the right to object to us processing your personal data where your data is being used:
-For a task carried out in the public interest.
-For our legitimate interests
-For scientific or historical research, or statistical purposes; or for direct marketing.
You should contact our Data Protection Officer (compliance@cis.com.lb) to inform us that you are objecting to any more processing of your personal data and state in your objection why you believe we should stop using your data in this way. Unless we believe we have strong legitimate reasons to continue using your data in spite of your objections, we will stop processing your data as per the objection raised.
7.6 Your Right To Data Portability
The right to data portability allows you to ask for transfer of your personal data from one organization to another, or to you. The right only applies if we are processing information based on your consent or performance of a contract with you, and the processing is automated. You can exercise this right with respect to the information you have given us by contacting our Data Protection Officer (compliance@cis.com.lb). We will ensure that your data is provided in a way that is accessible and machine-readable.