- Information that we collect from you
- How we use Personal Information and other data
- Lawful basis for processing Personal Information
- Statistical data that we collect
- Diagnostic and testing data
- Business acquisition
- Holding Personal Information
- Transfer of Information
- Use of third-party websites
- Your rights to access and correct Personal Information
- EU subjects may complain to a supervisory authority
- Data Protection Officer
- GDPR Representative
- Who we are
In the course of our business dealings with you we may collect, use, disclose, and hold information about identified or identifiable persons (Personal Information), as well as other business or technical data. This may include when you register with us on any of our websites (Websites), you order goods or services from us, you use any unit provided by us designed to test bovine milk samples to indicate the presence or otherwise of certain bacteria in such samples and the susceptibility of that/those bacteria to certain antimicrobials (Mastaplex Unit), or we generate and provide any test results from any use of the Mastaplex Units (Test Results).
1. Information that we collect from you
During the course of your relationship with us, or during your use of any Mastaplex Unit, we may collect the following information:
If you establish a business or client account with us, we will collect personal details from you during the course of your establishing and maintaining that business or client account with us. This may include your organisation details, names and contact details of persons associated with that organisation, details of references, and invoicing and payment details.
We will collect personal details from you during the course of your establishing and maintaining a business or client account or user profile with us via the Websites, such as your name, user name, passwords, address, email address, phone numbers, and credit card and payment details.
We will collect transaction details related to the goods or services you order from us.
We will collect data related to the use of the Websites, including details of the pages visited, the data accessed, and any information inputted by you.
We may collect other Personal Information and data during the course or as a result of your use of any Mastaplex Unit, either directly from you or from third parties (such as your nominated veterinarian or your own clients).
2. How we use Personal Information and other data
We will use, disclose and hold Personal Information and data collected by us for the following purposes:
to enable us and our agents, distributors, resellers and affiliates to supply any goods or services requested by you;
to enable us and our agents, distributors, resellers and affiliates to supply the Test Results (either to you or to any veterinarian or other person nominated by you);
to establish and maintain any account you hold with us;
to complete sales transactions, including billing, payment, receipt, credit check and verification services;
to respond to your queries or requests for additional information;
to provide any after-sales service required by you;
to maintain our records;
to provide technical support and administration services in relation to the Websites and any goods or services ordered by you;
for product development or research purposes; and
to evaluate customer satisfaction and the performance of marketing activities.
3. Lawful basis for processing Personal Information
We will always make sure that we have a lawful basis for the processing of your Personal Information.
In particular, we may need to process your Personal Information to pursue our legitimate business interests. This includes to enable us to operate the Websites and to provide products and services via the Websites for the benefit of users and our customers. In claiming legitimate business interests to process your Personal Information, we will balance those legitimate business interests against your own interests – which may in some cases override our legitimate business interests.
In addition to our legitimate business interests:
In some circumstances, we will have a legal obligation to process certain Personal Information.
Our cookies will only use information about your personal preferences and user settings so that our Websites will remember your details next time you visit. We may use, disclose or sell other data collected by us from cookies for other purposes, but only on an aggregated basis and in a way that ensures that no individual is able to be identified from such information.
5. Statistical data that we collect
During your use of the Websites we may collect statistical data about such use, such as the date, time and length of your use, the pages of the Websites that you visit, and information about the device you are using to access the Websites. This information may be collected by software operating on our Websites, or by third party service providers on our behalf.
We may use and disclose such statistical data for the following purposes:
to measure the effectiveness of any services or features provided via the Websites;
to better direct users to goods or services that might interest them;
to identify user behaviour and user trends on the Websites; and
to maintain and optimise the technical performance, operation and security of the Websites.
We may disclose or sell such statistical data to others for any purpose, but only on an aggregated basis and in a way that ensures that no individual is able to be identified from such data.
6. Diagnostic and testing data
We may collect and generate diagnostic and testing data as a result of your use of any Mastaplex Unit.
We may from time to time provide reports to our authorised distributors, resellers or agents detailing the Test Results generated for their customers. These reports will identify the relevant customers. Our authorised distributors, resellers or agents will be permitted to use such information for their own internal research and development, marketing and market research purposes. We prohibit those authorised distributors, resellers or agents from publishing or disclosing such information, or providing such information to any third party.
We may use, disclose and sell diagnostic and testing data for any other purpose, but only on an aggregated basis and in a way that ensures that no individual is able to be identified from such data. We may aggregate such data on a region by region basis.
We may use Personal Information and other data collected by us or via the Websites to send or email to you marketing or promotional information about our services or products, or the services or products of other companies (Direct Marketing Information), but only if you have expressly given us permission to do so.
We will not sell your Personal Information or other data to direct marketers unless you have expressly given us permission to do so.
8. Business acquisition
We may transfer your Personal Information and other data to another entity in connection with a sale of our business or assets, a merger or consolidation or restructuring of our business or company, or any other transaction in which a third party acquires ownership of any rights in our business or the Websites.
Disclosure of information to third-parties
We will not use your Personal Information and other data, or disclose your Personal Information and other data to third parties, except:
where we reasonably believe that such use or disclosure is required or expressly permitted under any applicable law.
9. Holding Personal Information
We will not hold your Personal Information and other data for longer than is reasonably required for the purposes for which we may lawfully use that Personal Information or data.
In particular, we will hold your Personal Information for so long as you continue to use the Websites, and for a period of seven years after this. The only reason why we may hold any Personal Information for longer than this period is where we are required by law to do so.
Following that period (or following such longer period that we may be required by law to hold Personal Information) we will delete your Personal Information, or mask or anonymise your Personal Information so that it can no longer be used to identify you.
We will use all reasonable endeavours to effect and maintain adequate security measures to safeguard the Personal Information and other data we hold from loss or unauthorised access, use, modification or disclosure.
11. Transfer of Information
In particular, the Websites are operated using, and diagnostic and testing data is held on, servers and systems located in New Zealand and Australia. In particular, Personal Information is transferred to our cloud service provider Amazon Web Services based in Australia. This Personal information may also be accessed by our ICT service providers in New Zealand, such as developers and cloud maintenance agents, in the course of the provision of their services.
The European Commission has recognised New Zealand as providing adequate protection for the personal data of European Union subjects.
We will ensure that appropriate safeguards are in place as prescribed by the European Union’s General Data Protection Regulation (GDPR), before we transfer any Personal Information of any European Union subjects to any data processor based in any country that the European Commission has not recognised as providing adequate protection for the personal data of European Union subjects. As a minimum, we will ensure that the data processor agrees to be bound by the European Commission’s Standard Contractual Clauses for the protection of personal data.
When Amazon Web Services processes the Personal Information of European Union subjects it also ensures that appropriate safeguards are in place that are prescribed by the GDPR – i.e., by entering into the European Commission’s Standard Contractual Clauses with the entity the data is transferred to. See https://aws.amazon.com/compliance/gdpr-center/ for more information about how Amazon Web Services complies with its GDPR obligations.
12. Use of third-party websites
If you access any third-party websites via a link from any of the Websites, you will leave that Website. By accessing these links you are not covered by the policies relating to the Websites. We are not responsible for the content of any third-party websites, or their use of your Personal Information or other data.
13. Your rights to access and correct Personal Information
Where we hold Personal Information or other data about you, you have a right to access and correct that Personal Information or data in accordance with applicable laws. In particular, you have rights to information about your Personal Information that we collect and process. This information includes:
details of the Personal Information that we collect and process, including the categories of Personal Information concerned, and purposes of any processing;
the recipients or categories of recipient to whom the Personal Information have been or will be disclosed;
where possible, the envisaged period for which the Personal Information will be stored, or, if not possible, the criteria used to determine that period; and
where your Personal Information is not collected from you, any available information as to the source of that Personal Information.
You also have the right to request from us the rectification or erasure of your Personal Information, to request from us the restriction of processing of your Personal Information, and to object to our processing of your Personal Information. If you want to access, correct or seek the erasure of your Personal Information or data, please contact our Data Protection Officer (see below) and he/she will tell you how to make a request and if any charges will apply.
14. EU subjects may complain to a supervisory authority
European Union subjects have the right to lodge a complaint about our Personal Information processing activities with a supervisory authority in the EU Member State where they are based or where the data processing activity took place.
Our Data Protection Officer can help you to identify who your supervisory authority is.
15. Data Protection Officer
Mastaplex Data Protection Officer
87 St David St, Dunedin 9016, New Zealand
16. GDPR Representative
As we are not based in the European Union, we have mandated the following person to deal with all questions or issues concerning our collection and processing of the Personal Information of European Union subjects, as our representative in the European Union, in addition to Mastaplex Limited:
Magny-Vernois, 70200, Lure, France
+ 33 3 84 62 55 55
18. Who we are
For the purposes of the GDPR, Mastaplex Limited is both a controller and processor of data. Our registered office is located at 87 St David Street, North Dunedin, Dunedin 9016, New Zealand.