Security and Privacy Policy

SemSector Security & Privacy Policy

We want to protect your privacy. In order to operate, our web sites and business operations may gather information about you. These terms explain how this may happen, what we will do with any potentially private data and how you can get in contact if you have any concerns.

Personally Identifiable Information Collected

Personal identifiable information is information that allows you to be identified as a particular person, such as your name, your e-mail address or phone number. We collect certain types of personal information when you register for an event, a webcast or a newsletter. We do not store credit card details nor do we share customer details with any third parties unless we have specifically obtained your permission to do so beforehand.

Web Beacons & Cookies

Cookies and other technologies. We use technologies like cookies and pixel tags to provide, improve, protect and promote our Services. For example, cookies help us with things like remembering your username for your next visit, understanding how you are interacting with our Services, and improving them based on that information. You can set your browser to not accept cookies, but this may limit your ability to use the Services. If our systems receive a DNT:1 signal from your browser, we’ll respond to that signal as outlined here.

Semsector, its advertisers or analytics partners may send a cookie to your computer or use web beacons to gather statistical information. A cookie does not personally identify you. It is simply a way to know that a particular web browser was used to visit our sites. A web beacon does not personally identify you. It is simply a way to automatically send information about pages and content used to an analysis tool. Cookies and web beacons allows us to understand things such as whether a particular web browser is spending much time on our sites, visiting several times per month and other types of analysis. If you never provide us with personally identifiable information, then your visits – despite us using cookies or web beacons – are anonymous. We don’t know the actual person linked with the cookie. It’s like having a library card but never having to provide your name, address or phone number to check out books. The books are checked out by someone using a particular library card number, but who owns that number isn’t known. If you do provide personally identifiable information, then potentially we could link that with your cookie, then gather the visits with web beacons and understand how you personally have acted when visiting our web site. Advertisers may also use cookies and web beacons to ascertain how many times you’ve seen an advertisement. No personally identifiable information you give us is provided to them for cookie or web beacon use, so they cannot personally identify you with that information on our web sites. Browsers can be set to accept or reject cookies or notify you when a cookie is being sent. Privacy software can be used to override web beacons. Taking either of these actions shouldn’t cause a problem with our sites, should you so choose. If you do encounter a problem, please let us know.

ADDITIONAL PROVISIONS OF THIS PRIVACY POLICY THAT ARE APPLICABLE TO EEA RESIDENTS

What is our justification for handling your personal data?

Under European data protection laws, we have to ensure that we process your personal information fairly and lawfully. This means that we must have a “legal basis” for each of our processing activities where they relate to the personal data of an individual within the EEA. These bases include:

Consent – we may decide to obtain your specific, freely given consent to one or more processing activities;
Legal obligation – we may need to process your data where it is necessary to comply with applicable laws that we are subject to;
Performance of a contract – we may process your data if we are entering into a contract with you, or taking preparatory steps to do so;
Legitimate interests – we may process your personal data where we believe that we have a legitimate interest in doing so, and we have analyzed this and determined that our interests are not overridden by the impact on your rights and freedoms under data protection law.

We rely on these legal bases in different ways, and in relation to different types of processing of your personal data.

Consent

We process your personal information collected through the use of Cookies (as described in the Cookie section above) on the basis of your consent, which we ask for when you first visit our Website. You are entitled to withdraw your consent to our use of these Cookies.

Legitimate Interests

We believe that our use of your other personal information described herein is necessary for our legitimate interests, which are as follows:

To run, grow and develop our business;
To operate our Website;
For marketing, market research and business development;
For internal administrative purposes.

If we rely on our, or another person’s, legitimate interests for using your personal information, we will undertake a balancing test to ensure that our (or the other person’s) legitimate interests are not outweighed by your interests or fundamental rights and freedoms which require protection.

We process your personal information collected through the use of Cookies (as described in the Cookie section above) on the basis of our legitimate interests. We also rely on legitimate interests to use your personal information in order to provide you with access to our Website, and to make sure that it works properly, and to keep a record of who is accessing and making changes to the different parts of our Website.

Rights of EEA Residents

Residents in the EEA have the following rights:

The right to ask us to provide you with copies of personal information that we hold about you at any time free of charge, although we may charge a reasonable fee if your request is manifestly unfounded or excessive, or repetitive.
The right to ask us to update or correct any out-of-date or incorrect personal information that we hold about you (in accordance with applicable data protection laws).
The rights to request that we stop using or delete your personal information (in certain circumstances we may not be able to stop using your personal information but if that is the case, we will let you know why).
The right to opt out of any marketing communications that we (or any third party to whom we have disclosed your personal information with your consent) may send you.

Rights of the data subject

a) Right of confirmation: Each data subject shall have the right granted by the European legislator to obtain from the controller the confirmation as to whether or not personal data concerning him or her are being processed. If a data subject wishes to avail himself of this right of confirmation, he or she may, at any time, contact any employee of the controller.

b) Right of access: Each data subject shall have the right granted by the European legislator to obtain from the controller free information about his or her personal data stored at any time and a copy of this information. Furthermore, the European directives and regulations grant the data subject access to the following information:

the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of the right to request from the controller rectification or erasure of personal data, or restriction of processing of personal data concerning the data subject, or to object to such processing;
the existence of the right to lodge a complaint with a supervisory authority;
where the personal data are not collected from the data subject, any available information as to their source;
the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.

Furthermore, the data subject shall have a right to obtain information as to whether personal data are transferred to a third country or to an international organisation. Where this is the case, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer. If a data subject wishes to avail himself of this right of access, he or she may, at any time, contact any employee of the controller.

c) Right to rectification: Each data subject shall have the right granted by the European legislator to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement. If a data subject wishes to exercise this right to rectification, he or she may, at any time, contact any employee of the controller.

d) Right to erasure (Right to be forgotten): Each data subject shall have the right granted by the European legislator to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies, as long as the processing is not necessary:

The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
The data subject withdraws consent to which the processing is based according to point (a) of Article 6(1) of the GDPR, or point (a) of Article 9(2) of the GDPR, and where there is no other legal ground for the processing.
The data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
The personal data have been unlawfully processed.
The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.

If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by the SemSector, he or she may, at any time, contact any employee of the controller. An employee of SemSector shall promptly ensure that the erasure request is complied with immediately.

Where the controller has made personal data public and is obliged pursuant to Article 17(1) to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested erasure by such controllers of any links to, or copy or replication of, those personal data, as far as processing is not required. An employees of the SemSector will arrange the necessary measures in individual cases.

e) Right of restriction of processing: Each data subject shall have the right granted by the European legislator to obtain from the controller restriction of processing where one of the following applies:

The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
The processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use instead.
The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims.
The data subject has objected to processing pursuant to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by the SemSector, he or she may at any time contact any employee of the controller. The employee of the SemSector will arrange the restriction of the processing.

f) Right to data portability: Each data subject shall have the right granted by the European legislator, to receive the personal data concerning him or her, which was provided to a controller, in a structured, commonly used and machine-readable format. He or she shall have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, as long as the processing is based on consent pursuant to point (a) of Article 6(1) of the GDPR or point (a) of Article 9(2) of the GDPR, or on a contract pursuant to point (b) of Article 6(1) of the GDPR, and the processing is carried out by automated means, as long as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, in exercising his or her right to data portability pursuant to Article 20(1) of the GDPR, the data subject shall have the right to have personal data transmitted directly from one controller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others. In order to assert the right to data portability, the data subject may at any time contact any employee of the SemSector.

g) Right to object: Each data subject shall have the right granted by the European legislator to object, on grounds relating to his or her particular situation, at any time, to processing of personal data concerning him or her, which is based on point (e) or (f) of Article 6(1) of the GDPR. This also applies to profiling based on these provisions.

The SemSector shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

If the SemSector processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to the SemSector to the processing for direct marketing purposes, the SemSector will no longer process the personal data for these purposes.

In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by the SemSector for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

In order to exercise the right to object, the data subject may contact any employee of the SemSector. In addition, the data subject is free in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to use his or her right to object by automated means using technical specifications.

h) Automated individual decision-making, including profiling: Each data subject shall have the right granted by the European legislator not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her, or similarly significantly affects him or her, as long as the decision (1) is not is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) is not authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or (3) is not based on the data subject’s explicit consent.

If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) it is based on the data subject’s explicit consent, the SemSector shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.

If the data subject wishes to exercise the rights concerning automated individual decision-making, he or she may, at any time, contact any employee of the SemSector.

i) Right to withdraw data protection consent: Each data subject shall have the right granted by the European legislator to withdraw his or her consent to processing of his or her personal data at any time. If the data subject wishes to exercise the right to withdraw the consent, he or she may, at

If you wish to exercise any of the above rights, please use the forms indicated where applicable and email us.

We will consider all such requests and provide our response within a reasonable period (and in any event within any time period required by law). Please note, however, that certain personal information may be exempt from such requests in certain circumstances.

If an exception applies, we will tell you this when responding to your request. We may request you provide us with information necessary to confirm your identity before responding to any request you make.

Please also note for security and fraud investigation and prevention purposes, we will retain the full IP address for users located in the EEA for up to 12 months.

In addition, we keep a copy of requests submitted to us to comply with our own legal obligation to maintain data processing records.

Our Stuff

The Services are protected by copyright, trademark, and other Turkish Republic and foreign laws. These Terms don’t grant you any right, title or interest in the Services, others’ content in the Services, SemSector trademarks, logos and other brand features. We welcome feedback, but note that we may use comments or suggestions without any obligation to you.

Copyright

We respect the intellectual property of others and ask that you do too. We respond to notices of alleged copyright infringement if they comply with the law, and such notices should be reported using our Copyright Policy. We reserve the right to delete or disable content alleged to be infringing and terminate accounts of repeat infringers. Our designated agent for notice of alleged copyright infringement on the Services is: info@semsector.com

Modifications

We may revise these Terms from time to time, and will always post the most current version on our website. If a revision meaningfully reduces your rights, we will notify you (by, for example, sending a message to the email address associated with your account, posting on our blog or on this page). By continuing to use or access the Services after the revisions come into effect, you agree to be bound by the revised Terms.

We don’t ask you for personal information unless we truly need it and the only reason would be to join our newsletter (we can’t stand services that ask you for things like your gender or income level for no apparent reason.)

We don’t share your personal information with anyone except to comply with the law, develop our services, or protect our rights.

We don’t store personal information on our servers unless required for the on-going operation of one of our services (i.e. our newsletter).