This is the data protection notice referred to in the various Yabsta Limited Terms and Conditions applicable to our products and services (the "Conditions"). Terms defined in the relevant Conditions shall have the same meaning in this notice unless otherwise defined in this notice.
This notice applies to any natural person (a "data subject" or "you") entering into a Contract with Yabsta Limited ("we" or "us") or in relation to whom Yabsta Limited receives personal information in relation to a Contract. We may update this notice at any time.
Yabsta Limited is a 'data controller'. This means that we are responsible for deciding how we hold and use personal information about you. We are required under the Data Protection (Jersey) Law 2018 and the Data Protection (Bailiwick of Guernsey) Law 2017 (as applicable, the "Data Protection Laws") to notify you of the information contained in this notice.
It is important that you read this notice, together with any other data protection notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information.
Yabsta Limited will process your personal information on the following legal bases:
The purposes for which (and, in parentheses, the relevant legal bases on which) Yabsta Limited shall process your personal information in relation to the Contract are as follows:
Some of the above bases for processing will overlap and there may be several bases which justify the use of your personal information. We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. If you fail to provide certain information when requested, we may not be able to perform our obligations under the Contract and we may be prevented from complying with our legal obligations. In such circumstances, Yabsta Limited may suspend the Service and/or terminate the Contract.
Yabsta Limited may disclose your personal information to members of the Yabsta Group and to third party sub-contractors or agents engaged by Yabsta Limited for the purpose of performing the Contract and providing the Service. Yabsta Limited may also disclose your personal information to persons making a complaint or an enquiry in relation to the use of the Service and, in an emergency, to the emergency services. Your personal information may be shared with other communications service providers and network operators, credit reference and debt collection agencies and the appropriate authorities for the purpose of preventing fraud, theft and other unlawful activity. Yabsta Limited may also be legally required to share your personal information with judicial, law enforcement, regulatory and governmental bodies or agencies.
Yabsta Limited will not transfer your personal information outside of Jersey or the European Economic Area or to an international organisation.
Yabsta Limited will store your personal information for no more than 6 years after your Contract has ended.
Under the Data Protection Laws, you will have the right in certain circumstances to:
If you wish to review, verify, correct or request erasure of your personal information, object to the processing of your personal information, or request the transfer of your personal information to another party, you should contact Yabsta Limited in writing. Yabsta Limited has appointed a data protection officer who may be contacted at firstname.lastname@example.org. You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if the request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We do not envisage that any decisions will be taken about you using automated means, however we will notify you in writing if this position changes.
Under the Data Protection Laws, you will have the right to make a complaint at any time to either the Jersey or Guernsey Data Protection Authority, the Island's respective supervisory authorities for data protection issues.
It is important that you understand that you have a right to object to us processing your personal information where we do so exclusively on the basis of legitimate interests. As set out above, this applies to where we are processing your data for the purposes of: