G-Star may:

• Share your personal data with its affiliates, operating groups, subsidiaries and divisions, or with third parties if such is necessary for the purposes as listed above. G-Star will require third parties to conduct activities in a manner consistent with G-Star policies and guidelines in relation to data protection.
• Share your personal data with parties processing personal data on our behalf. In such cases, these parties may only use your personal data for the purposes described above and only in accordance with our instructions. G-Star will only use parties which provide sufficient guarantees to implement appropriate technical and organizational measures and ensure the protection of your personal data.
• Grant employees access to your personal data if necessary for the performance of their tasks. In such a case, access will be granted only if necessary for the purposes described above and only if the employee is bound by confidentiality.
• Share your personal data if required to do so by law, court order, or other legal process, for example, with law enforcement agencies or other governmental agencies, to establish or exercise our legal rights or in connection with a corporate transaction, such as a divesture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.

G-Star retains your personal data in accordance to our record retention needs. The exact period of time is based on the type of the personal data and the legal obligations or business purposes for retaining it. After the retention period, the personal data will be either destroyed or anonymized.

G-Star has taken appropriate technical and organizational security measures including, but not limited to, reasonable physical, electronic and managerial procedures designed to protect your personal data, all to ensure that:

• your personal data is protected against unauthorized access;
• the confidentiality of your personal data is assured;
• the integrity and availability of your personal data will be maintained;
• personnel is trained in information security requirements; and
• actual or suspected data breaches are reported in accordance with applicable law.

Due to the nature of the Internet and related technology, We cannot absolutely guarantee the security of Personal Data, and We expressly disclaim any such obligation.

Due to the nature of our business and the services we provide to our clients, G-Star may need to transfer your personal data to locations outside the country where you reside. In any case where we transfer personal data, G-Star shall ensure that such a transfer is subject to appropriate safeguards.

For the European Union, such transfers to third parties may for instance be governed by a contract based on the model contractual clauses for data transfers approved by the European Commission as set out in article 46(2) of the General Data Protection Regulation. You can obtain an extract or copy of these documents by making a request using the contact details above.

Based on the law applicable to the use of your personal data, you may be able to exercise a number of rights in relation to your personal data. Note that in many cases, your rights are not absolute and we may not be required to comply with your request. A number of such rights, as may be applicable in the European Union, are explained below.

Right of access

You are entitled to a copy of the personal data we hold about you and to learn details about how we use it. Your personal data will usually be provided to you digitally.

Right to rectification

We take reasonable steps to ensure that the information we hold about you is accurate and complete. However, if you believe this is not the case, you can ask us to update or amend it.

Right to erasure

In certain circumstances, you have the right to ask us to erase your personal data, for example where the personal data we collected is no longer necessary for the original purpose, where personal data has become obsolete or where you withdraw your consent. However, this will need to be balanced against other factors. For example, we may not be able comply with your request due to certain legal or regulatory obligations.

Right to restriction of processing

In certain circumstances, you are entitled to ask us to (temporarily) stop using your personal data, for example where you think that the personal data we hold about you may be inaccurate or where you think that we no longer need to use your personal data.

Right to data portability

In certain limited circumstances, you may have the right to ask that we transfer personal data that you have provided to us to a third party of your choice.

Right to object

You have the right to object to processing which is based on our legitimate interests. Unless we have a compelling legitimate ground for the processing, we will no longer process the personal data on that basis when you file an objection. Note however, that we may not be able to provide certain services or benefits if we are unable to process the necessary personal data for that purpose.

Rights relating to automated decision-making

You have the right not to be subjected to automated decision-making, including profiling, which produces legal effect for you or has a similar significant effect. If you have been subject to an automated decision and do not agree with the outcome, you can contact us using the details below and ask us to review the decision.

Right to withdraw consent

We may ask for your consent to process your personal data in specific cases. When we do this, you have the right to withdraw your consent at any time. G-Star will stop the further processing as soon as possible after the withdrawal of your consent. However, this does not affect the lawfulness of the processing before consent was withdrawn.

Questions or complaints regarding the processing of your personal data may be directed to G-Star by e-mail at service.ae@g-star.com.

You also have the right to lodge a complaint with local data protection authority in the jurisdiction where you work, where you live or where an alleged infringement takes place. A listing of the European Data Protection Authorities can be found here .

This Privacy Statement is effective as of 01-09-19. G-Star may update this Privacy Statement from time to time and will publish its updated Privacy Statement on its Website. Any such updated Privacy Statement is effective upon posting. We may also notify you via email or other direct electronic communication method of any changes that, in our sole discretion, materially impact treatment of your Personal Information. You are responsible for periodically visiting this Privacy Statement to check for changes. Your continued use of the Program is your acceptance of the Privacy Statement as revised. Identification of when the Privacy Statement has last been updated is located at the top left corner of the page.