Tracr™ is a trade mark of the De Beers Group of Companies.
This means that the legal basis for us processing your personal information as described above will typically be one of the following:
• because it is necessary to fulfil a contract that we have in place with you;
• for our or our third parties’ legitimate business interests;
• your consent; or
• where the processing is necessary for compliance with our legal obligations.
We may collect and process the following data about you:
Information you give us
We may collect information that you provide to us when you complete forms on our website to request information. This kind of information may include your first name, surname, email address, your involvement in the diamond industry (if applicable), telephone number, company name and address and/or any relevant comments. We will use this information to send you the information that you request and to update you on the evolution of the Tracr platform. And if you contact us with a complaint or query about the website, we may keep a record of that correspondence to ensure we provide a good customer service.
When you use the website, we may also automatically collect and store certain information in our server logs to get a better understanding of how people use the website and to ensure we provide a good user experience and customer service. This type of information includes information about your server’s internet protocol address (i.e. IP address); when, how, and what parts of the website you use; viewed and exit pages on the website as well as date or time stamps.
We take steps to ensure that the personal information that you provide is retained for only as long as it is necessary for the purpose for which it was collected. We apply criteria to determine the appropriate retention period for different categories of personal information you provide us with. For example, we will keep information necessary to protect us in a legal claim, such as information relating to a contract, for the lifetime of the contract and up to seven years after. After this period it will be deleted or in some cases anonymised. Where we have collected the personal information based on your consent and we have no other lawful basis to continue with that processing, if you subsequently withdraw your consent then we will delete your personal information.
The information that we collect may be transferred to, and stored at, a destination outside the European Economic Area (the “EEA”) in countries, which have less strict, or no data protection laws, when compared to those in Europe. It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers, for example in the provision of support services. By submitting your personal information, you consent to this transfer, storing or processing of your personal information.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your information transmitted via the website; any transmission is at your own risk.
Data Protection Legislation in the European Union and the UK gives you certain rights in relation to your personal information. These include: the right to object to and / or withdraw consent to the processing of your personal information, the right to access to your personal information, and the ability to erase, restrict or receive a machine-readable copy of your personal information.
We may disclose your personal information to any member of our group of companies, which means our subsidiaries, our ultimate holding company and its subsidiaries.
We may disclose your personal information to third parties: (a) in the event that we sell any business or assets, in which case we may disclose your personal information to the prospective buyer of such business or assets; (b) if we or substantially all of our assets are acquired by a third party, in which case personal information held by us about our users will be one of the transferred assets; or (c) if we are under a duty to disclose or share your personal information in order to comply with any legal or regulatory obligation or request.
We may share your information with our service providers and other third party partners who help us to operate the website and deliver our products and services, for example, website or database hosting companies, address list hosting companies, e-mail service providers, analytics companies, distribution companies, fulfilment companies, marketing and promotional companies and other similar service providers. Such parties may process information about you on our behalf to assist, for example, with provision of support services.
We may disclose to our third party partners aggregate, anonymous data regarding user behaviour as a measure of interest in and use of our website. Such data may include overall patterns or demographic reports from which an individual cannot be identified.
The Diamond Trading Company Limited, a limited liability company incorporated in England and Wales, with registered number 07816513 and with its registered office at 20 Carlton House Terrace, London, SW1Y 5AN.
You may also have the right to complain to a data protection authority if you think we have processed your personal information in a manner which is unlawful or breaches your rights. For the purposes of European Data Protection Law the data controller in respect of your personal information is: The Diamond Trading Company Limited, trading as Tracr.