This General Data Protection Regulation Policy (“GDPR Privacy Policy”) is a supplement to our general privacy policy (“Privacy Policy”) for those individuals covered by European law. This GDPR Privacy Policy may change over time, so please be sure to reread it from time to time. Amendments, modifications or changes to this GDPR Privacy Policy will be posted at this URL and will be effective when posted. Your continued use of this Site following the posting of any amendment, modifications or change to this GDPR Privacy Policy shall constitute your acceptance thereof. If you do not agree with the terms in this GDPR Privacy Policy, please do not use this Site and do not provide any information to us.

General Data Protection Regulation (“GDPR”) permits users who are in the European Economic Area (“EEA”) or European Union (“EU”) and the United Kingdom (“UK”) to request certain information regarding the control, disclosure, and use of their Personal Information. In summary, those rights include the right to: fair processing of information and transparency over how we use your Personal Information, requires us to provide you with information regarding the information that we have about you and how we use that information, requires us to correct any mistakes in your information which we hold, requires the erasure of Personal Information concerning you in certain situations, and your right to object at any time to the processing, use, and automation of your data. As used herein, and any of its supplemental policies, “Personal Information” is any Personal Data and Other Data that identifies (or can be used to identify) you or which permits the physical or online contacting of you, such as your name, address, email address, phone number, other contact details, and any information that you provide to us. All defined terms in the Privacy Policy shall retain the same meaning as this page.

For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (“ICO”) on individuals’ rights under the GDPR. If you would like to exercise any of those rights, please contact us pursuant to the “Contact Us” section of our general Privacy Policy at https://eridirect.com/about-us/privacy-policy/.

In our operations, we may collect or obtain certain information such as, but not limited to, your name, mailing address(es), e-mail address(es), phone number(s), gender, age, date of birth, occupation, payment and applicable financial account information, and information pertaining to your creditworthiness, assets, income, or liabilities, information about your use of the Site, products and services which you have purchased, obtained, or have researched or to which, by use of the Site, have otherwise indicated interest, your IP address, time zone setting, geolocation data, domain servers, types of (and unique device identifiers for) devices and computers accessing our Site, types of browsers, operating systems, and other data of a technical nature which relates to your use and access of the Site (collectively referred to as “Information”).

1. How We Collect Information Under The GDPR

Consistent with the Privacy Policy, and subject with applicable law of the GDPR and the choices and controls available to you as set forth herein, we may collect your Information in any way we feel necessary to provide you with the best experience when using the Site or in our dealings with you, to protect your interests, communicate our interests, or generally become better informed about you as our valued customer. We sometimes obtain your Information from third parties, including family members, referral sources, or parties to a transaction in which you or your employer or family member is a party or is otherwise involved. Technical data is provided to us by service providers of technology, payment and delivery services, website analytics providers, and consumer reporting companies. Additionally, we may collect information as described in the “Contact Us” section of our general Privacy Policy. For more detailed information on the information we collect, please visit our “Privacy Disclosures” page at https://eridirect.com/about-us/privacy-disclosures/.

2. Why We Collect Your Information

We collect your Information because:

  • You are a customer or a prospective customer of our company or you are a supplier or referral source
  • You otherwise use our services
  • You are an employee or otherwise work for a customer, prospective customer, supplier or prospective supplier of ours, or for someone who otherwise uses our services
  • You are an employee or otherwise work for a party to a transaction in which our company is involved.
  • You are related to a customer of ours, or
  • You are someone (or work for someone) to whom we would like to advertise or market our products, services or events.

3. How We Use Information Under The GDPR

Generally, we have collected and used, and may have disclosed the following categories of Personal Information: identifiers, commercial information, Internet or other electronic network activity information, geolocation data, professional or employment-related information, audio, electronic, visual, or similar information, inferences drawn about you, and other categories of Personal Information that relate to, describe or are reasonably capable of being associated with you.

For a list of the specific data that we collect and disclose, the sources from which we collect this Personal Information, and Personal Information we use for the business and commercial purposes, please visit our “Privacy Disclosures” page at https://eridirect.com/about-us/privacy-disclosures/.

4. Transfer Your Information Out Of European Economic Area

We may transfer your Personal Information to areas outside of the EEA. Such countries do not have the same data protections as the EEA and the UK. The European Commission has determined some territories or countries are inadequate to receive certain data. While we take efforts to restrict transfer to those countries, we may in some instances transfer such data because it is necessary for us or we have determined it is a compelling legitimate interest. Where we transfer your Personal Information to countries outside of the EEA, we will take steps to ensure that your Personal Information will continue to be protected. In those instances, we will implement appropriate safeguards for the transfer of Personal Information to our service providers in accordance with the applicable law, such as relying on our service providers’ Privacy Shield certification or implementing standard contractual clauses for data transfers. For a list of the data transferred, please visit our “Privacy Disclosures” page at https://eridirect.com/about-us/privacy-disclosures/.

5. Automated Decision Making

We may subject you to a decision based solely on automated processing, including profiling, in a manner which produces legal effects or similarly significantly affects you, without your express consent. For a list of the purposes in which we make automated decision processing, please visit our “Privacy Disclosures” page at https://eridirect.com/about-us/privacy-disclosures/.

6. How To Complain Under GDPR

The GDPR also gives you the right to lodge a complaint with a supervisory authority, in particular in the EU (or EEA) state where you work, normally live, or where any alleged infringement of data protection laws occurred. We invite you to raise your concerns with us first, so that we can try to resolve them.

7. GDPR Rights

You have the right to access Personal Information we hold about you and to ask that your Personal Information be corrected or erased and to port your Personal Information. You may also have the right to object to, or request that we restrict, certain processing or to withdraw consent you have previously provided. If you have any requests regarding your Personal Information, have any inquiries regarding this Privacy Policy, or you would like to exercise your rights or receive any information about your rights, please contact us pursuant to the “Contact Us” section of our of our general Privacy Policy at https://eridirect.com/about-us/privacy-policy/.