BERN WATCHES CO., LTD

This Privacy Policy Statement sets out how we collect, use, manage and protect the personal data or information (“Data”) that we may collect from or about you. It applies to all individuals whose Data may be handled, whether as controller or processor, by Bern Watches(MAC) Company Limited , You shall read this Privacy Policy Statement carefully so as to ensure that you fully and clearly understand the contents herein.

Protecting your privacy

We are dedicated to processing your Data in accordance with the required standards. This includes protecting your privacy and ensuring the security of your Data in compliance with, where applicable, the requirements of the Personal Data (Privacy) Ordinance (Chapter 79 of the Laws of Hong Kong) (the “Ordinance”), Regulation (EU) 2016679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”), Personal Data Protection Act 2012 (No. 26 of 2012 of the Republic of Singapore), Personal Data Protection Act 2010 (Act 709 of the Laws of Malaysia), 《中华人民共和国网络安全法》,《电信和互联网用户个人信息保护规定》 and other relevant regulations where applicable.

Before using and providing your Data for the purposes as set out in this Privacy Policy Statement, we may be required by law to obtain your written consent, and in such cases, only after having obtained such written consent, may we use your Data in the manner as specified. If you are a minor or under 16 years old or a person who are mentally incapable, you must obtain express consent from your parents or guardian before providing any personal data to us. If you do not accept the following terms of this policy, please stop accessing, browsing or using this websiteour e-services.

Your Data

We may collect, use and hold a range of different Data about you. For the purposes of carrying on our business (including the verification of your identity to detect, prevent and address fraud, security or technical issues, the registration, activation and management of your account with us, and the billing and charging of our products and services (if applicable) (collectively, “Service(s)”)) and complying with laws, rules, guidelines, regulations andor requests issued by applicable government authorities, courts, law enforcement or other authorities or regulatory bodies, you may be requested to provide Data such as, but not limited to:

(a) the name, birth month and date and other details documented on your Macau Identity Card (including first four alphanumeric characters) or other legal identity card andor travel document;

(b) contact details including but not limited to name, address, telephone number, mobile number, email address andor WeChat ID, etc.;

(c) payment details including but not limited to credit card, debit card, other electronic banking Data, authorization number, security code, billing address, delivery address and expiry date;

(d) customer service information including but not limited to customer service inquiries, comments and repair history;

(e) purchase and transaction information;

(f) device specific information such as hardware model, operating system, version, unique device identifier, serial numbers, setting configurations and software and mobile network configuration;

(g) information about how you use our Services such as your network usage, how you use our network, and your location when you are using our Services;

(h) your credit and service history to enable us to assess your eligibility to our offers of Services or to accommodate your request for transfer of Services or your account with us;

(i) all Data requested by applicable government authorities, courts, law enforcement or other authorities or regulatory bodies to enable us to comply with or in connection with any law, rule, regulation, judgment or court order (whether within or outside of Macau); and

(j) any other Data as may be required by any members of the Group andor their respective contractors, sub-contractors, intermediaries, agents, business partners or representatives, brokers, underwriters from time to time and which is necessary for the provision of the Services.

(k) In some instances, where required by law to do so, we may seek your consent to process the following types of “Special Data” to us so that we may further improve our Services andor better tailor the type of information or content that we present to you:

i. age;

ii. gender and ethnicity;

iii. marital status;

iv. Month and Date of birth;

v. education and profession;

vi. monthly income range;

and

vii. contact details, etc.

Provision of the Special Data mentioned immediately above is optional although, where the requested Service is a personalised Service or provision of a product is dependent upon your provision of all requested Data, failure to provide the requested Data may prevent us from providing those particular Services to you.

How we collect Data

We collect Data in a number of ways, including from:

(a) you directly, for example, when you provide Data by phone or via email, attend our functions, complete an application form or agreement for one of our Services, or when you submit your Data through our websites or WeChat; or when you contact us with a query or request; or during the ordinary course of the continuation of our business relationship with you; or when we are legally required to do so;

(b) third parties such as related entities, business partners, or other customers, or your representatives with appropriate consent from you;

(c) publicly available sources;

(d) our own records of how you use our Services;

(e) your visits on our websites (see “Privacy Data” section below); andor

(f) your participation in surveys or marketing promotions organised by us or on our behalf, etc.

Privacy Data

To better serve your needs and preferences, our web servers may collect Data relating to your website or device activity. We may also collect aggregated, anonymous, statistical data on the server's usage so that we may better cater to the behaviour of users of our websites. This type of Data may include, but is not limited to:

(a) browser type, version and user agent;

(b) operating system;

(c) IP (Internet Protocol) address andor domain name;

(d) connection data, statistics on page views andor referral URLs;

(e) device ID, location and phone contacts;

(f) links or images clicked on;

(g) cookies andor browser, app or web server log data; and

(h) device and software characteristics andor configuration.

Some of our websites use cookies or similar tracking tools on your machine or device in order for us to, for example, personalise your user experience andor maintain your identity across multiple webpages andor Internet sessions. This Data may include, but is not limited to, relevant login and authentication details as well as Data relating to your activities and the preference configurations on your device and across our websites. Our websites are initially set up to accept cookies. You can opt-out of or delete historical cookies by changing the settings on your web browsers; however, if you do so, you may find that certain features on our website andor our app do not work properly. (Note: Disabling the cookies function may cause inaccessibility to some parts of our websites and thus you may not be able to enjoy our Services.)

Apart from that, as for any link or advertisement on our websites (if any), its owner may set or identify cookies on your browser. The use of cookies by third-party advertisers or advertising providers is not subject to this Privacy Policy, but their respective privacy policies.

How we use your Data

We may collect, retain and use your Data for the following purposes:

(a) to verify your identity;

(b) to process your application of our membership program;

(c) to administer your membership;

(d) to manage and fulfil purchase and repair orders, facilitate delivery and to provide after-sale services;

(e) manage our accounts and records;

(f) send service related communications, including announcements and administrative messages such as order confirmation;

(g) undertake credit checking, prevention of fraud and other prohibited or illegal activities as part of our efforts to keep our platforms and services secure;

(h) to carry out matching procedures, as defined under the Ordinance;

(i) to verify your eligibility to our offers andor promotions or other events;

(j) to provide, activate andor renew Services andor membership program;

(k) to provide you with promotional benefits, updates, offers and invitation to events;

(l) to promote and market our Services to you;

(m) to provide suitable advertisement and website contents to you;

(n) to provide suitable products or services to you;

(o) to tailor our products or services to your preferences;

(p) to provide anonymous report and to send member notice to us or our clients;

(q) to respond to complaints or compliments received;

(r) to conduct credit checks and detect fraudulent activities in compliance with the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 2) or any other relevant regulations and in relation to other compliance purposes;

(s) to perform research or analyses so that we may improve and optimise the Services that can be made available to you;

(t) to conduct surveys and marketing, promotional, behavioural scoring for business operations andor planning purposes;

(u) to carry out market and product analyses in order to generate statistical or actuarial reports (containing aggregated data that does not relate to any identified or identifiable individual);

(v) to contact you regarding administrative notices and communications relevant to your use of our websites and membership program and to respond to your request. We may also use your information to match user information with third party data (i.e. to compare two sets of personal data collected for different purposes). By registering for membership program, subscribing to our website or by logging-in, you consent to carry out this matching procedure when we deem it is necessary in order to provide our services;

(w) to process any payment instructions, direct debit facilities andor credit facilities in relation to our supply of Services to you;

(x) to maintain and develop our business systems and infrastructure, including testing and upgrading of these systems;

(y) to maintain, enhance and develop our products and service offerings;

(z) to operate internal control, resolve disputes, troubleshoot problems and enforce our terms of use;

(aa)to operate, evaluate and improve our business (including developing new products and services; enhancing and improving our services; managing our communications; analyzing our products and customer base; performing data analystics; and performing accounting, auditing and other internal functions);

(bb)to comply with applicable laws in or outside Macau as may be required by applicable government authorities, courts, law enforcement, or regulatory or investigation bodies, in relation to the supply of Services andor loyalty programs to you, including to assist in the prevention, detection of crime or possible criminal activities; and

(cc)to distribute our collection brochures andor promotional materials as well as those of our business partners and counterparties.

Our legal basis for using your Data including how we disclose your Data

We have a legitimate interest in properly administering the Services. In addition, our use of your personal data may be necessary for the performance of the Services that you have requested. In order to provide the Services that you have requested, we may, to the extent permissible under applicable laws and regulations, disclose your Data to organisations or parties outside of the Group (which may be within or outside of Hong Kong) (collectively, “Organisations”). Your Data is disclosed to these Organisations for the strict purpose of enabling us to supply our Services to you but is not applicable to any Organisations which are not owned by the Group or of which its company policies are not controlled by the Group as well as any persons employed or managed by the Group.

In some circumstances as mentioned above, we may need to ask for your consent to use your Special Data where required by law to do so.

These Organisations provide support services to our businesses and operations including without limitation:

(a) customer enquiries;

(b) mailing operations;

(c) billing and debt-recovery functions;

(d) information technology services;

(e) installation, maintenance and repair services;

(f) marketing, advertising and telemarketing services;

(g) market research;

(h) customer usage and behavioural analysis;

(i) process management;

(j) surveys; and

(k) website usage analysis, etc.

We take the required steps to ensure that these Organisations are bound by appropriate confidentiality and privacy obligations in relation to the protection of your Data and that they use your Data for the sole purpose of carrying out the services for which they have been engaged, and not for their own or other purposes (including direct marketing).

In addition, we may disclose your Data:

(a) to your authorised representatives andor your legal advisers when requested by you to do so;

(b) for the purposes of providing administrative, payment, collection, business, legal andor operational support, to the following parties:

i. telecommunications network operators;

ii. our affiliates, overseas offices, assignees, transferees and representatives;

iii. our professional advisers, including our accountants, auditors, lawyers and insurers;

(c) to banks, hotels, insurance companies, billing agents and various business collaborators for reward redemption purposes and benefits applicable to members of our membership program;

(d) to third party providers for the purposes of providing online and other payment services, handling credit checks and fraud prevention, and any other services required in order for us to use your information for the purposes specified in this Privacy Policy Statement;

(e) to any third party that purchases, or to which we transfer, all or substantially all of our assets and business sale or transfer occur, we will use reasonable efforts to try to ensure that the entity to which we transfer your personal information is safe;

(f) to government and regulatory authorities and other organisations, as required or authorised by law;

(g) to any proposed or actual participant, assignee or transferee of all or any part of the relevant member of our operations or business; andor

(h) to charities or non-profit organisations, etc.

Direct Marketing (if applicable)

Please understand that we are principally engaged in publishing, advertising and providing a total solution multimedia marketing platform and advertisement services for clients. We will provide you with relevant magazines and online media information, promotional campaigns and client advertising information. We may, in compliance with applicable laws, rules, regulations and licence requirements, use your Data (including without limitation name, contact information, phone number, residentialoffice address and email address), for us (including the Group and its respective subsidiaries, affiliates and associated companies) and our respective dealers, suppliers, licensors, providers, advertising clients andor business partners (collectively, “Service Providers”) to provide you with direct marketing content (pursuant to which we may or may not receive remuneration in return), including sending to you notices andor updates about gifts, discounts, privileged offers, benefits and promotions related to Services offered by us andor the Service Providers, including without limitation: entertainment, device accessories, mobile applications and software, lifestyle, networking events, travelling, sports, music, gaming, transportation, food and beverages, hotel, banking, finance, insurance, wealth management services, investments, health and wellness, beauty and cosmetics products and services, entertainment, films, cinemas, fashion and accessories, computers and electronics, social networking, technology, e-commerce, logistics, retail, real estates and shopping malls, home and dècor, media and high-end consumer products and services. Marketing may be carried out in a variety of ways (such as in the form of a letter, message, email, digital SMS, MMS, instant message, by telephone, social media or advertisements on websites or other means).

Before using and providing your Data for the purposes as set out in this Privacy Policy Statement, where we are required by law to obtain your written consent, and in such cases, only after having obtained such written consent, may we use and provide your Data for any promotional or marketing purpose.

We will honour each individual's request to not use hisher Data for the purposes of direct marketing. You may opt-out from receiving direct marketing material andor communications from the relevant Service andor any notices from us. At the same time, you may resume receiving the same (if you have previously opted-out of receiving such material andor communications from the relevant Service) by making a written request to our Data Protection Officer together with your registered name and service account number, registered telephone number or login name (as applicable) by sending a mail or filling in “Customer Information Update Form” in our shops.

Cross-border Data Transfer

At times it may be necessary andor prudent for us to transfer andor store your Data to places to other jurisdictions, for instance, for the prevention, detection or investigation of crime or for storage, processing and other purposes for which the Data were collected. In the event that we do transfer your Data to other jurisdictions, we will do so in compliance with the prevailing requirements of the Ordinance, other relevant regulations and the GDPR where applicable.

The safety of your Data is important to us

All required efforts are made to ensure that any Data held by us is stored in a secure and safe place and is accessible only by our authorised employees or other Organisations referred to in this Privacy Policy Statement. When we pass your Data to third party Organisations for them to process, we seek to ensure that they have appropriate security measures in place to keep your Data safe, to the extent necessary for them to provide their services and to comply with applicable principles in relation to data protection. Some of the people we share your Data with may process it overseas. You can contact us for more information about the safeguards we use to ensure that your Data is adequately protected in these circumstances.

Retention of your Data

We will retain your Data in accordance with our internal policies. Our policies are in compliance with the Ordinance, the GDPR and other relevant laws where applicable, and cover the following principles:

(a) Data will only be retained for as long as is necessary to fulfil the original or directly related purposes for which it was collected, unless the Data is also retained to satisfy any applicable legal, regulatory or contractual obligations; and

(b) Data are purged from our electronic, manual and other filing systems based on the above criteria and our internal procedures.

Links

Our website may contain links to other websites, webpages and mobile applications operated by third parties. We have no control over the content of the linked websites, webpages and mobile applications or the way in which the operators of those websites, webpages and mobile applications deal with your Data, and are not responsible for the content of such third party websites, webpages or mobile applications. You should review the privacy policy of such third party websites, webpages and mobile applications to understand the ways in which your Data may be used by those third parties.

Your right to access, correct and delete Data

We take all reasonable precautions to ensure that the Data we collect, use and disclose is accurate, complete and up-to-date. However, the accuracy of that Data depends to a large extent on the Data you provide. You have a right to request access to, and correction of, your Data and we recommend that you:

(a) let us know if there are any errors in your Data; and

(b) keep us up-to-date with changes to your Data.

If you wish to access or amend any of your Data we hold, or request that we delete any of your information that is no longer necessary for the provision of our Services, you may contact us in the manner as set forth under the “How to Contact Us” section.

You may exercise your right of access and correction by writing to our Data Protection Officer at the details stated in the “How to contact us” section below.

You may decline to share Data with us andor withdraw any consents which you may have provided, in which case, we may not be able to provide you with some of our Services.

At any time, you may object to us holding or processing your Data, on legitimate grounds, save and except as otherwise permitted by the applicable law.

Rolex Section

While navigating on the Rolex section of our website, some cookies are controlled by ROLEX SA which applies the following Cookies Policy.

Sensitive Data

Unless specially required or requested by us, please do not send or publish any personal sensitive data (e.g. contents in relations to race, political views, religious or other beliefs, health record, criminal record or chamber membership, etc.) to us or through our websites or social media platforms. If we specially required or requested your provision of sensitive data, we must obtain your prior express consent.

How to contact us

For all issues and enquiries regarding our compliance with our obligations under the Ordinance, the GDPR and other relevant laws where applicable, and any request for access to, correction or deletion of your Data, please contact us in writing at :

Macau

BERN WATCHES. CO., LTD

Avenida de Lopo Sarmentode Carvalho No.96 RC-B Macau

Or via email to : bernwatch@macau.ctm.net