How the Company May Use Your Personal Data
The company, as the data controller, may collect, store and use personal data for lawful purposes, including, in particular:
(i)
where this is necessary for the performance of our rights and obligations under any purchase agreements;
(ii)
where this is necessary for compliance with a legal and regulatory obligation to which we are subject (such as compliance with anti-money laundering and FATCA/CRS requirements); and/or
(iii)
where this is necessary for the purposes of our legitimate interests and such interests are not overridden by your interests, fundamental rights or freedoms.
Should we wish to use personal data for other specific purposes (including, if applicable, any purpose that requires your consent), we will contact you.
Why We May Transfer Your Personal Data
In certain circumstances, we may be legally obliged to share personal data and other information with respect to your shareholding with the relevant regulatory authorities such as the Cayman Islands Monetary Authority or the Tax Information Authority. They, in turn, may exchange this information with foreign authorities, including tax authorities.
We anticipate disclosing personal data to persons who provide services to us and their respective affiliates (which may include certain entities located outside the United States, the Cayman Islands or the European Economic Area), who will process your personal data on our behalf.
The Data Protection Measures We Take
You have certain rights under the DPA, including (a) the right to be informed as to how we collect and use your personal data (and this privacy notice fulfils our obligation in this respect), (b) the right to obtain a copy of your personal data, (c) the right to require us to stop direct marketing, (d) the right to have inaccurate or incomplete personal data corrected, (e) the right to withdraw your consent and require us to stop processing or restrict the processing, or not begin the processing of your personal data, (f) the right to be notified of a data breach (unless the breach is unlikely to be prejudicial), (g) the right to obtain information as to any countries or territories outside the Cayman Islands to which we, whether directly or indirectly, transfer, intend to transfer, or wish to transfer your personal data, general measures we take to ensure the security of personal data, and any information available to us as to the source of your personal data, (h) the right to complain to the Office of the Ombudsman of the Cayman Islands, and (i) the right to require us to delete your personal data in some limited circumstances.
If you do not wish to provide us with requested personal data or subsequently withdraw your consent, you may not be able to invest in the Company or remain invested in the Company as it will affect the Company’ ability to manage your investment.
If you consider that your personal data has not been handled correctly, or you are not satisfied with our responses to any requests you have made regarding the use of your personal data, you have the right to complain to the Cayman Islands’ Ombudsman. The Ombudsman can be contacted by email at info@ombudsman.ky or by accessing their website here: ombudsman.ky.
Any transfer of personal data by us or our duly authorized affiliates and/or delegates outside of the Cayman Islands shall be in accordance with the requirements of the DPA.
We and our duly authorized affiliates and/or delegates shall apply appropriate technical and organizational information security measures designed to protect against unauthorized or unlawful processing of personal data, and against accidental loss or destruction of, or damage to, personal data.
We shall notify you of any personal data breach that is reasonably likely to result in a risk to your interests, fundamental rights or freedoms or those data subjects to whom the relevant personal data relates.