Updated 27 January 2020

This Privacy Policy discloses how we gather, use and protect your personal data.

This Privacy Policy applies to personal data collected by TukOut through its website www.tukout.com or, as described below, by other means during the course of its business.

Controller

Responsible data controller in the meaning of Art. 4 No. 7 GDPR is:

TukOut Enterprise, Sereypheap Street, Phum 4, Sangkat Buon, Mittakpheap, Preah Sihanouk, 18204, Cambodia; Email hello@tukout.com; Website: www.tukout.com

You can contact the data protection officer via email at: hello@tukout.com

General Information

During the course of carrying out our business and performing our services, TukOut collects personal data to conduct our business, provide and market our services, and meet our legal obligations. Likewise, we may also collect personal data for other purposes, which we would describe in more detail to you at the point we collect the personal data.

You may refuse to provide us with some or all of your personal data; however, this may limit the ways in which we can interact with you, including providing you with our services.

Registration on our website

If you make use of our website to register, you will be asked to provide personal data. The information inserted in the respective registration form will be transmitted to TukOut as data controller. The legal basis for the processing of data - which is necessary to provide you with the respective service - is Art. 6(1)(b) GDPR. Regarding the processing of further personal data you will be asked to grant your explicit consent, and the legal basis for that processing is Art. 6(1)(a) GDPR.

Online purchases

Our website provides the opportunity to purchase products online and have them delivered. Required information includes address and telephone number. Regarding the processing of this personal data you will be asked to grant your explicit consent. The legal basis for this processing is Art. 6(1)(a) GDPR.

Third Party Applications

We will respect and protect your privacy as set out in this Privacy Policy. We will share your personal data with third parties only in the ways that are described in this Privacy Policy - and do not and will not sell your personal data.

TukOut shares your personal data with third parties, in particular non-TukOut parties, only with your express consent or under another lawful basis for processing under the applicable law.

Categories of non-TukOut parties with which we share your personal data include vendors such as host and cloud service providers, marketing and mailing agencies, and sub-contractors involved in the fulfilment of our contractual obligations towards our clients. The legal basis for this processing is Art. 6(1)(f) GDPR.

CloudFront

Amazon CloudFront is a web service of Amazon Web Services, Inc., P.O. Box 81226, Seattle, WA 98108-1226, http://aws.amazon.com (“CloudFront”) that speeds up distribution of static and dynamic web content such as .html, .css, .js, and image files, to users. CloudFront delivers content through a worldwide network of data centers called edge locations. When a user requests content that is being served with CloudFront, the user is routed to the edge location that provides the lowest latency (time delay), so that content is delivered with the best possible performance.

If the content is already in the edge location with the lowest latency, CloudFront delivers it immediately.

If the content is not in that edge location, CloudFront retrieves it from an Amazon S3 bucket (where we have hosted our assets for the website) or an HTTP server that has been identified as the source for the definitive version of the content.

CloudFront captures information about each request that includes system logs which captures the following information: IP address, lat/long of the server which served the request, country and date and time. More information about AWS's privacy practices can be found at https://aws.amazon.com/privacy/.

Facebook conversion pixels

We use the “Custom Audience pixel” of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) on our website. With its help, we can keep track of what users do after they see or click on a Facebook advertisement. This enables us to monitor the effectiveness of Facebook ads for purposes of statistics and market research. Data collected in this way is anonymous to us, which means we cannot see the personal data of individual users. However, this data is saved and processed by Facebook. Facebook can connect this data with your Facebook account and use it for its own advertising purposes, in accordance with Facebook’s Data Policy which can be found at https://www.facebook.com/about/privacy/. You can allow Facebook and its partners to place ads on and outside of Facebook. A cookie can also be saved on your device for these purposes.

Please click here if you would like to withdraw your consent https://www.facebook.com/settings/?tab=ads#_=_.

Google Analytics

Our website uses Google Analytics, a web analysis service of Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, www.google.com (“Google Analytics” or “Google”). Google Analytics employs cookies that are stored to your computer in order to facilitate an analysis of your use of the site. The information generated by these cookies, such as time, place and frequency of your visits to our site, including your IP address, is transmitted to Google’s location in the US and stored there.

In using Google Analytics our website employs the extension “anonymizeIp”. In doing so, Google abbreviates and thereby anonymizes your IP address before transferring it from EU/EEA member states. Google uses this information to analyze your use of our site, to compile reports for us on internet activity and to provide other services relating to our website.

Google may also transfer this information to third parties where required to do so by law or where such third parties process this data on Google’s behalf. Google states that it will in never associate your IP address with other data held by Google. You can prevent cookies from being installed by adjusting the settings on your browser software accordingly as noted elsewhere in this Privacy Policy. You should be aware, however, that by doing so you may not be able to make full use of all the functions of our website.

Google Analytics also offers a deactivation add-on for most current browsers that provides you with more control over what data Google can collect on websites you access. The add-on tells the JavaScript (ga.js) used by Google Analytics not to transmit any information about website visits to Google Analytics. However, the browser deactivation add-on offered by Google Analytics does not prevent information from being transmitted to us or to other web analysis services we may engage.

Google Analytics also uses electronic images known as web beacons (sometimes called single pixel gifs) and are used along with cookies to compile aggregated statistics to analyze how our site is used.

You can find additional information on how to install the browser add-on referenced above at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

For the cases in which personal data is transferred to the US, Google has self-certified pursuant to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).

Social Media Links

You can find TukOut on the following social media:

• Facebook
• Instagram

These providers are controllers for the relevant data processing.

Deletion and Term of Storage

We may keep information that we collect for an unlimited period of time, as permitted under the applicable laws or regulations.

Your rights as data subject

You have the following rights:

Right of access (Art. 15 GDPR)
In principle, you have the right to receive information on the points mentioned in Art. 15 GDPR. You also have the right to request a copy of your personal data in accordance with Art. 15 (3) GDPR.

Right to rectification or erasure (Art. 16 and 17 GDPR)
You have the right to have incorrect personal data corrected. In addition, you have the right to demand that your personal data is deleted if further processing is no longer necessary, if processing is unlawful or if you have withdrawn your consent.

Right to restriction of processing (Art. 18 GDPR)
If the conditions in Art. 18 GDPR are met, you have the right to have the processing of your personal data restricted, i.e. to prevent further processing for the time being.

Right to object (Art. 21 GDPR)
If the processing of your personal data is based on Art. 6 (1)e or f GDPR, you have the right to object to the processing if the further requirements of Art. 21 GDPR are met.

Right to data portability (Art. 20 GDPR)
Within the limits of Art. 20 GDPR, you have the right to receive your personal data in a machine-readable format in order to forward it or have it forwarded to another controller.

You can require this by sending us an email at hello@tukout.com.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the location of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the applicable data protection laws and regulations.

Changes to the Policy

This Privacy Policy may be updated from time to time and will note the date of any updates. In the event of any material and significant changes we will endeavor to provide a more prominent notice of the changes to this Privacy Policy.