Privacy Notice
Following consultation of the present website (“Site”), data relating to identified or identifiable persons may be processed.
Our website and the security measures applicable to it have been defined and developed to ensure that the information provided by users (hereinafter referred to as "Users" or "User") is processed in compliance with Regulation (EU) 2016/679 (“GDPR”) and any other relevant local legislation (hereinafter “Data Protection Legislation”).

Data Controllers
The Data Controllers are:
- Qualis U.K. Limited, registered in England and Wales under Company number 12099030, with registered office in 33 St. Mary Axe, Exchequer Court, London (UK), and 
- Qualis Europe S.r.l., registered in Italy under company registration number/VAT number 11051610969, with registered office in Via Morigi, 7 – 20123 Milan (Italy).

What type of Personal Data we collect and how we collect it?
“Personal data” means any information relating to an identified or identifiable natural person with particular reference to an identifier such as a name, an identification number, location data or an online identifier.
The types of personal data collected are:

1. Browsing data. The computer systems and software procedures used to operate this Site acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the "IP addresses" or domain names of the computers used by Users who connect to the Site. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the Site, without therefore being able to identify the User, and is intended to measure the operation of the Site and its operational functions, including the resolution of any technical problems. This data is deleted immediately after processing. This data could also be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the Site. Such processing is therefore aimed at pursuing a legitimate interest of the Data Controllers.
2. Data provided voluntarily by the User:
   This refers to all the personal data freely provided by the visitor on the Site, for example: data entered by the User when requesting a contact, provided when voluntarily sending electronic mail to the addresses indicated on the Site, as well as any other personal data included in the message.

How we use your personal data
Your personal data will be processed by means of computerised/telematic instruments for purposes strictly necessary for consultation of the Site, as well as for related and/or instrumental purposes. The data will be processed in such a way as to ensure the confidentiality and security of the data, in compliance with GDPR and Data Protection Legislation.
We will need to provide information to to third party and, in particular, to  AmTrust International Limited and its subsidiaries to manage their business and to enable them to monitor the service provided by us.
Specific security measures are observed to prevent the loss of data and illegal or incorrect use of unauthorised access.
In addition to the above, and apart from what has been specified for Browsing data, Personal Data provided by Users through the Site are processed for the following purposes:
- to allow the performance of operations that are strictly connected and instrumental to the management of relations with Users;
- to comply with legal, regulatory or statutory obligations, as well as to comply with provisions and regulations issued by authorities empowered to do so by law and by supervisory and control bodies;
- to enforce our terms, conditions and policies for business purposes, to comply with legal and regulatory requirements;
- to respond to legal requests and prevent harm;
- for statistical research/analysis on aggregated or anonymous data, without therefore the possibility to identify the User, aimed at measuring, monitoring and managing the operational functions of the Site, including the resolution of any technical problems.

Disclosure of your personal data
The Personal Data collected will be processed only by persons authorised by the Data Controllers, i.e. employees, collaborators and consultants inside and outside the Data Controllers who have been appointed in writing as persons in charge or internal and external Data Processors and who have been given specific instructions.
Personal Data may also be communicated and transferred to subjects whose right to access Personal Data is recognised by law or regulation or by provisions issued by authorities empowered to do so by the law.
We may also give such information to entities or individuals who provide services to us. All such third parties are required to maintain confidentiality in relation to Personal Data.
 
Legal basis for processing Data and legitimate Interests
The legal basis for the processing of Personal Data voluntarily provided by Users is the provision of a service or the response to a request, which do not require the consent of Users, pursuant to applicable legislation.
There are certain circumstances where we process your personal data for our legitimate business interests, in accordance to Data Protection Legislation and in particular to art. 6, f), of the GDPR.
The measuring, monitoring and managing the operational functions of the Site does not involve the processing of Personal Data.

International Transfers of Data
We do not normally transfer Personal Data to anyone outside the European Union (“EU”), however we may do so when the particular circumstances of your matter so require. Where we transfer your personal data outside of the EUA, we will ensure that it is treated securely and in compliance with the levels of protection and safeguarding of the rights of the data subject as provided by the GDPR and Data Protection Legislation.

Your rights
You have the right to ask us not to process your data for marketing purposes, to see a copy of the personal information we hold about you, to have your data deleted (subject to certain exemptions), to have any inaccurate or misleading data corrected or deleted, to restrict the processing of your data, to ask us to provide a copy of your data to any controller and to lodge a complaint with the local Data Protection Authority, as provided for in the articles 15 – 21 GDPR.

Retention and contacts of Data Controllers
Your data will not be retained for longer than is necessary, and will be processed with or without the aid of electronic and/or automated means for the time strictly necessary for the purposes for which the data are collected and subsequently processed and, in any case, for the timeframes provided for by the GDPR and the Data Protection Legislation in force from time to time. In most cases the retention period will be for a period of ten (10) years following the completion of our business relationship with you, unless we are required to retain the data for a longer period due to business, legal or regulatory requirements.
 
Data Protection in Respect of Money Laundering Checks
Any personal data we receive from you for the purposes of our money laundering checks will be processed only for the purposes of preventing money laundering and terrorist financing, or as otherwise permitted by law or with your express consent.
You consent to us retaining such data for longer than the five year statutory period, unless you tell us otherwise.

Data Protection – Your Obligations
Your data will not be retained for longer than is necessary, and will be managed in accordance with our data retention policy. In most cases the retention period will be for a period of ten (10) years following the completion of our business relationship with you, unless we are required to retain the data for a longer period due to business, legal or regulatory requirements.
If you have any questions concerning our use of your personal data, please contact The Data Protection Officer, Qualis U.K. Limited - please see website for full address details.     

Data Protection in Respect of Money Laundering Checks
Any personal data we receive from you for the purposes of our money laundering checks will be processed only for the purposes of preventing money laundering and terrorist financing, or as otherwise permitted by law or with your express consent.
You consent to us retaining such data for longer than the five year statutory period, unless you tell us otherwise.

Data Protection – Your Obligations
If you send us personal data about anyone other than yourself you will ensure you have any appropriate consents and notices in place to enable you to transfer that personal data to us, and so that we may use it for the purposes for which you provide it to us.
 
If you have any further questions, please contact our Compliance Officers for Legal Practice to the following addresses: 

Qualis U.K Limited
33 St. Mary Axe
Exchequer Court
London
EC3A 8AA
 
enquiries@qualiscreditrisk.com