We respect your privacy and are committed to protecting it by complying with this privacy policy ("Policy").

This policy describes the types of information we may collect from you or that you may provide (“Personal Information”) on the Sigma website (“Website” or “Service”). And any of its related products and services (collectively, “Services”), and our practices for collecting, using, maintaining, protecting and disclosing such personal information.

It also describes the choices available to you regarding our use of your personal information and how you can access and update it. This policy is a legally binding agreement between you ("User", "you" or "your") and Sigma ( "we", "us" or "our").

If you are entering into this agreement on behalf of a business or other legal entity, you represent that you have the authority to bind such entity to this agreement, in which case the terms "User", "you" or "your" must refer to such an entity. If you do not have such authority, or if you do not agree to the terms of this Agreement, you must not accept this Agreement and may not access and use the Website and Services.

This policy does not apply to the practices of companies that we do not own or control, or to people that we do not employ or manage. Automatic Information Collection When you open the website, our servers automatically record information that your browser sends.

This data may include information such as your device's IP address, browser type and version, operating system type and version, language preferences, or the web page you were visiting before accessing the website and services, the pages of the website and services you visit. , time spent on those pages, information you search for on the website, times and dates of access, and other statistics. The information collected automatically is used only to identify potential cases of abuse and to establish statistical information concerning the use and traffic of the Site and the Services.

This statistical information is not otherwise aggregated in such a way as to identify any particular user of the system. Collection of Personal Information You can access and use the Website and Services without telling us who you are or revealing any information by which anyone could identify you as a specific, identifiable individual.

If, however, you wish to use some of the features offered on the Website, you may be asked to provide certain personal information (for example, your name and email address).

We receive and store any information that you knowingly provide to us when you make a purchase or fill out forms on the Website. If necessary, this information may include the following: - Contact details (such as email address, telephone number, etc.) - Payment information (such as credit card details, bank details, etc.) - Geolocation data of your device (such as latitude and longitude) - Any other material that you voluntarily submit to us (such as articles, images, comments, etc.) Some of the information we collect comes directly from from you through the Website and Services.

However, we may also collect personal information about you from other sources such as public databases and our joint marketing partners. You can choose not to provide us with your personal information, but you may not be able to take advantage of some of the features of the Website. Users who are unsure of the required information are encouraged to contact us.

If you have reason to believe that a child under the age of 18 has provided Personal Information to us through the Website and Services, please contact us to request that we delete that child's Personal Information from our Services.

We encourage parents and legal guardians to monitor their children's Internet usage and to help enforce this Policy by instructing their children never to provide Personal Information through the Website and Services without their permission.

We also ask all parents and legal guardians supervising the custody of children to take the necessary precautions to ensure that their children are instructed never to disclose personal information while online without their permission.

Use and processing of information collected We act as data controller and data processor under the GDPR when processing personal information, unless we have entered into a data processing agreement with you, in which case you would be the data controller and we would be the processor of data.

Our role may also differ depending on the specific situation involving personal information. We act as data controller when we ask you to submit your personal information which is necessary to ensure your access to and use of the Website and Services.

In such cases, we are a data controller because we determine the purposes and means of the processing of personal information and we comply with the obligations of data controllers set out in the GDPR. We act as a data processor in situations where you submit personal information through the Website and Services.

We do not own, control, or make any decisions about the personal information submitted, and such personal information is only processed in accordance with your instructions. In such cases, the user providing personal information acts as a data controller within the meaning of the GDPR. In order to make the Website and Services available to you, or to meet a legal obligation, we may collect and use certain personal information.

If you do not provide the information we request, we may not be able to provide you with the requested products or services. All information we collect from you may be used for the following purposes:

- Execute and manage orders - Deliver products or services - Send marketing and promotional communications - Improve user experience - Running and operating the Website and Services The processing of your personal information depends on how you interact with the Website and Services, where you are located in the world, and whether any of the following conditions apply. applies:

(i) you have given your consent for one or more purposes; this, however, does not apply, whenever the processing of personal information is subject to the California Consumer Privacy Act or European data protection law;
(ii) the provision of information is necessary for the performance of an agreement with you and/or for any pre-contractual obligation thereof;
(iii) the processing is necessary for compliance with a legal obligation to which you are subject;
(iv) the processing is related to a task carried out in the public interest or in the exercise of official authority vested in us; (v) the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party.

We may also combine or aggregate some of your personal information in order to serve you better and to improve and update our website and services.
We rely on the following legal bases as defined in the GDPR on which we collect and process your personal information: rely on consent or any other legal basis above.

In any case, we will be happy to clarify the specific legal basis which applies to the processing, and in particular whether the provision of personal information is a legal or contractual requirement, or a requirement necessary to enter into a contract.

The exchange of sensitive and private data takes place over a secure SSL communication channel and is encrypted and protected with digital signatures, and the Website and Services also comply with strict vulnerability standards in order to create such a secure environment. as possible for users.

Disclosure of Information Depending on the services requested or as necessary to complete any transaction or provide any service you have requested, we may share your information with our affiliates, contracted companies and service providers (collectively, the “Service Providers”). ”) whom we rely on to assist in the operation of the website and services made available to you and whose privacy policies are consistent with ours or who agree to abide by our privacy policies.

We will not share any personally identifiable information with third parties and will not share any information with unaffiliated third parties. Service providers are not authorized to use or disclose your information except as necessary to perform services on our behalf or comply with legal requirements.

Service providers receive the information they need only to perform their designated functions, and we do not authorize them to use or disclose the information provided for their own marketing or other purposes.

We may also disclose any personal information we collect, use, or receive if required or permitted to do so by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that the disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Retention of information We will retain and use your personal information for the period necessary until the purchase order or services are fulfilled, to enforce our agreements, to resolve disputes, and unless a longer retention period is required or permitted. by the law. We may use any aggregate data derived from or incorporating your personal information after you update or delete it, but not in ways that personally identify you.

Once the retention period expires, the personal information will be deleted. Therefore, the right of access, the right of erasure, the right of rectification and the right to data portability cannot be exercised after the expiry of the retention period. Transfer of Information Depending on your location, data transfers may involve the transfer and storage of your information in a country other than your own.

However, this does not include countries outside the European Union and the European Economic Area. If such a transfer takes place, you can find out more by consulting the relevant sections of this policy or inquire with us using the information provided in the contact section.

Data Protection Rights under GDPR If you are from the European Economic Area (“EEA”), you have certain data protection rights and we aim to take reasonable steps to enable you to correct, amend , delete or limit the use of Your personal information.

If you would like to be informed of what personal information we hold about you and if you would like it removed from our systems, please contact us. In certain circumstances, you have the following data protection rights:

(i) You have the right to withdraw your consent if you have previously given your consent to the processing of your Personal Information. To the extent that the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. The withdrawal does not affect the lawfulness of the processing prior to the withdrawal.

(ii) You have the right to know whether your personal information is being processed by us, to obtain information about certain aspects of the processing and to obtain a copy of your personal information being processed.

(iii) You have the right to verify the accuracy of your information and to request that it be updated or corrected. You also have the right to ask us to complete personal information that you believe is incomplete.

(iv) You have the right to object to the processing of your information if the processing is carried out on a legal basis other than consent.

Where Personal Information is processed in the public interest, in the exercise of an official authority vested in us, or for the purposes of the legitimate interests pursued by us, you may object to such processing by providing a ground relating to your particular situation to justify the objection.

You should know that, however, if your personal information is processed for direct marketing purposes, you can object to this processing at any time without providing any justification. To find out if we process personal information for direct marketing purposes, you can refer to the relevant sections of this policy.

(v) You have the right, in certain circumstances, to restrict the processing of your personal information. These circumstances include: the accuracy of your personal information is disputed by you and we need to verify its accuracy; the processing is unlawful, but you oppose the erasure of your personal information and request the restriction of its use instead; we no longer need your personal information for the processing purposes, but you need it to establish, exercise or defend your legal rights; you have objected to the processing pending verification whether our legitimate grounds prevail over your legitimate grounds.

Where processing has been restricted, such personal information will be marked accordingly and, except for storage, will only be processed with your consent or for the establishment, exercise or defense of legal claims, for the protection of the rights of another natural person, or a legal person or for reasons of important public interest.

(vi) You have the right, under certain circumstances, to obtain the erasure of your personal information from us. These circumstances include: the personal information is no longer necessary in relation to the purposes for which it was collected or otherwise processed; you withdraw your consent to consent-based processing; you object to the processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; and the personal data has been unlawfully processed.

However, there are exclusions from the right to erasure, for example where the processing is necessary: ​​for the exercise of the right to freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defense of legal claims.

(vii) You have the right to receive your personal information that you have provided to us in a structured, commonly used and machine-readable format and, if technically feasible, to have it transmitted to another controller without any hindrance from us , provided that this transmission does not infringe the rights and freedoms of others.

(viii) You have the right to complain to a data protection authority about our collection and use of your personal information. If you are unhappy with the outcome of your complaint directly to us, you have the right to lodge a complaint with your local data protection authority. For more information, please contact your local data protection authority in the EEA.

This provision is applicable provided that your personal information is processed by automated means and that the processing is based on your consent, on a contract of which you are a part or on pre-contractual obligations thereof. California Privacy Rights Consumers residing in California have certain additional rights regarding their personal information under the California Consumer Privacy Act (“CCPA”).

If you are a California resident, this section applies to you. In addition to the rights explained in this policy, California residents who provide personal information as defined in law to obtain services for personal, family, or household use have the right to request and obtain from us, once by calendar year, information about the specific categories and items of personal information we have collected and disclosed.

Additionally, California residents have the right to request deletion of their personal information or opt-out of the sale of their personal information, which may include the sale, disclosure, or transfer of personal information to another company or a third party for monetary or other consideration.

For this, you just need to contact us.

We will not discriminate against you if you exercise your rights under the CCPA. How to exercise your rights Any request to exercise your rights can be sent to us via the contact details provided in this document.

Please note that we may ask you to verify your identity before responding to such requests. Your request must provide sufficient information to allow us to verify that you are the person you claim to be or that you are that person's authorized representative.

If we receive your request from an authorized representative, we may request proof that you have provided power of attorney to such authorized representative or that the authorized representative otherwise has valid written authority to submit requests on your behalf.

You must include sufficient detail to enable us to fully understand and respond to the request.

We cannot respond to your request or provide you with personal information unless we first verify your identity or authority to make such request and confirm that personal information about you.

This document was last updated October 23, 2023