Privacy Policy
Privacy Notice
Throughout this document, the terms “we”, “us”, “our” and “Reso” refers to Reso W.L.L and the terms “you”, and “your” refers to the Data Subject.
This Privacy Notice outlines Reso’s approach to protecting your data privacy. It will explain who we are, how we collect, share, and use Personal Data about you and how you can exercise your data privacy rights.
This Privacy Notice is published in compliance with the following privacy laws:
- European General Data Protection Regulation
- Bahrain’s Personal Data Protection Law
This Privacy Notice applies to all your Personal Data processed by us, whether in physical or electronic mode.
What Personal Data do we collect & process?
Categories of Personal Data that we collect, and process are as follows:
- Demographic and Identity Data (e.g.: name, email address, contact number)
- Records of Communications details (e.g.: emails, instant messages etc.)
Where do we obtain your Personal Data from?
We primarily obtain the Personal Data we process directly from you when you use our products and/or services. Furthermore, we may also collect Personal Data about you from third parties and from publicly available sources of information.
How do we use your Personal Data?
We use your Personal Data for the following purposes:
- To verify your identity
- To deliver our products and services
- To communicate with you regarding existing products and services availed by you, including notifications of any alerts or updates
- To evaluate, develop and improve our products and services
- For market research, and market and product analysis
- To send you information about our other products or services which may be of interest to you
- To handle enquiries and complaints
- To comply with legal or regulatory requirements
- To investigate, prevent, or take action regarding illegal activities, suspected fraud and situations involving potential threats to the safety of any person
- To reach out to you for career options with us
Lawful bases of processing your Personal Data
We process your Personal Data by relying on one or more of the following lawful bases:
- Your explicit consent for us to process your Personal Data for a specific purpose
- The processing is necessary for the performance of the contract we have with you or to take steps to enter into a contract with you
- The processing is necessary for compliance with a legal obligation we have
- The processing is necessary for the purposes of a legitimate interest pursued by us
Where the processing is based on your consent, you have the right to withdraw your consent at any time. Please note that should the withdrawal of consent result in us not being able to continue offering our products and services to you, we reserve the right to withdraw or cease providing our products and services.. To withdraw your consent, you can contact us using the contact details provided in the ‘Contact Us’ section of our website. Once we receive your request to withdraw consent, we will communicate the effects of withdrawal to you. If you agree to proceed with the withdrawal, we will process your request accordingly.
When do we share your Personal Data with third parties?
We may use third parties in the provision of our products and services to you. We may share your Personal Data with such third parties. We have appropriate contracts in place with all such third parties. These contracts define the permissible scope of their activities with your Personal Data, ensuring that they are prohibited from using it for any purpose beyond what we have specified..
a. Reasons for sharing your Personal Data with third parties:
We may disclose your Personal Data to third parties only where it is lawful to do so. This includes instances where we or they:
- Need to provide you with products or services
- Have asked you for your consent to share it, and you have agreed
- Have a legitimate business reason for doing so
- Have a legal obligation to do so. E.g.: to assist with detecting and preventing fraud
- Have a requirement in connection with regulatory reporting, litigation or asserting or defending legal rights and interests.
- We may also disclose your Personal Data to appropriate authorities if we believe that it is reasonably necessary to comply with a law, regulation, legal process; protect the safety of any person; address fraud, security, or technical issues; or protect our rights or the rights of those who use our products & services.
b. With whom your Personal Data may be shared:
We may disclose your Personal Data to the following third parties:
- Any sub-contractors, agents or service providers who work for us or provide services or products to us
- Law enforcement authorities, government authorities, courts, dispute resolution bodies, regulators, auditors, and any party appointed or requested by applicable regulators to carry out investigations or audits of our activities
- Statutory and regulatory bodies, authorities (including the government) investigating agencies and entities or persons, to whom or before whom it is mandatory to disclose Personal Data as per the applicable law, courts, judicial and quasi-judicial authorities and tribunals, arbitrators, and arbitration tribunals
Cross-border data transfer
Personal Data we hold about you may be transferred to other countries outside your residential country for any of the purposes described in this Privacy Notice.
Please note that these countries may have differing (and potentially less stringent) privacy laws and that Personal Data can become subject to the laws and disclosure requirements of such countries, including disclosure to governmental bodies, regulatory agencies, and private persons, as a result of applicable governmental or regulatory inquiry, court order or other similar process.
Use of Cookies and other Tracking Mechanisms
We may use cookies and other tracking mechanisms on our website and other digital properties to collect data about you. Most web browsers allow you some control of cookies through browser settings.
Outlined below are the categories of cookies being used along with a description of what they are used for.
- Strictly Necessary Cookies – These cookies are needed to run our website, to keep it secure and to comply with regulations that apply to us.
- Performance/Analytics Cookies – These cookies collect information about how visitors use our website and services, including which pages visitors go to most often and if they receive error messages from certain pages. It is used to improve how our website functions and performs.
- Marketing Cookies – These cookies help us decide which of our products, services and offers may be relevant for you. We may use this data to tailor the marketing and ads you see on our own and other websites and mobile apps, including social media. For instance, you may see our ads on other sites after you have been to our website.
How do we secure your Personal Data?
We are committed to protecting your Personal Data in our custody. We take reasonable steps to ensure appropriate physical, technical and managerial safeguards are in place to protect your Personal Data from unauthorized access, alteration, transmission and deletion. We ensure that the third parties who provide services to us under appropriate contracts take appropriate security measures to protect your Personal Data in line with our policies.
How long do we keep your Personal Data?
We keep the Personal Data we collect about you for as long as it is required for the purposes set out in this Privacy Notice and for legal or regulatory reasons. We take reasonable steps to delete or permanently de-identify your Personal Data that is no longer needed.
Children’s Privacy
We do not knowingly collect Personal Data from children. If you are a parent or guardian and aware that your Child has provided us with Personal Data, please contact us using the details in the ‘Contact us’ section of our website.
Your Privacy rights
If you are a Bahrain resident, under the PDPL, you have the following rights, and we commit to provide you with the same:
- Right of Access: You have the right to get access to your Personal Data that is with us along with other supporting information.
- Right to Rectification: You have the right to ask us to rectify your Personal Data that is with us that you think is inaccurate. You have the right to ask us to complete your Personal Data that you think is incomplete.
- Right to Erasure: You have the right to ask us to erase your Personal Data that is with us under certain circumstances.
- Right to Object: You have the right to object to the processing of your Personal Data under certain circumstances including for direct marketing purposes.
- Right to not be subjected to automated individual decision-making, including profiling.
- Right to lodge a complaint with the Supervisory Authority: You have the right to lodge a complaint with a supervisory authority.
In addition to the rights mentioned above, if you are an EU resident, under the GDPR, we are committed to providing you with the following rights as well:
- Right to Restriction of Processing: You have the right to ask us to restrict the processing of your Personal Data under certain circumstances.
- Right to Data Portability: You have the right to ask that we transfer the Personal Data you gave us to another organization, or to you, under certain circumstances.
- If you wish to make a request to exercise any of your rights, you can contact us using the details in the ‘Contact us’ section of our website.
Links to other Websites
Our website may contain links to websites of other organizations. This Privacy Notice does not cover how those organizations process your Personal Data. We encourage you to read the privacy notices on the other websites you visit.
Contact Us
For any further queries and complaints related to privacy, or exercising your rights, you can reach us using the details in the ‘Contact us’ section of our website.
Notification of changes
We regularly review and update our Privacy Notice to ensure it is up-to-date and accurate. Any changes we may make to this Privacy Notice in the future will be posted on this page.