Regional Data Protection Notice

Regional Data Protection Notice 

This Regional Data Protection Notice is provided as a supplement to the GPI Privacy Policy to provide additional information to individuals located in certain regions or subject to certain data protection laws as set forth below. 


California 

If you are a California resident and have any concerns about how we process your Personal Information or would like to exercise any of your California privacy rights, including those described below, you can make a request by calling 832-450-2850 or by writing to GPI USA, Inc., Attn: Legal-Privacy, 4900 Woodway Dr. #680, Houston, TX 77056 USA. Please identify yourself as a California resident and provide sufficient information so we can take appropriate action, such as your name, email address or any additional information required. If you maintain an account with us, we may require that you submit your request through your account (to the extent permitted by applicable law). Finally, if we are processing your Personal Information as a service provider for a customer or partner, we may ask you to contact our customer or partner directly, to the extent permitted under applicable law. 

“Shine the Light” Law  

California residents may request certain information regarding our disclosure (if any) of personal information to third parties for their direct marketing purposes, pursuant to California Civil Code Section 1798.83 (the California “Shine the Light” law). To make such a request, please contact us, identify yourself as a California resident and provide sufficient information so we can take appropriate action, such as your name, email address or any additional information required. 

California Consumer Privacy Act (CCPA) 

We generally process Personal Information as a service provider for our customers and partners, many of whom are enterprises who have a direct relationship with individuals using our Products. This means that, in addition to other exceptions under the CCPA that may apply (including for employees, contractors and business contacts), our processing of Personal Information as a service provider may not involve a sale of Personal Information of a consumer, and requests to exercise CCPA rights should be directed to the entity that collected your data. 


European Economic Area and United Kingdom 

Legal Basis of Processing 

GPI processes Personal Information relating to Users under the following legal bases of processing: 

  • the User has given consent for one or more specific purposes, for example, to engage in marketing activities with the User. 

  • the processing is necessary for performance of a contract, for example if we or our affiliates have entered into a contract with customers, partners, suppliers or other third parties, we may need to process your Personal Information. 

  • the processing is necessary to fulfill a legal obligation to which are subject; 

  • the processing is necessary for the performance of a task in the public interest or for the exercise of public authority vested in us; 

  • the processing is necessary for the pursuit of our legitimate interest such as (1) to communicate with you in response to your requests, questions, inquiries, and submissions; (2) to conduct advertising, marketing and promotional activities in connection with operating our business; (3) for research and development, security and optimization of our Products and Sites; and (4) to process a job application and communicate with you regarding your interest in employment with us. 

Certain other details regarding the processing of Personal Information that individuals located in the EEA or UK may be entitled to receive are contained in other provisions of the Privacy Policy. 

User Rights 

To the extent that EEA pr UK data protection laws apply to the processing of your Personal Information, you may have certain choices and other rights with respect to our processing of your Personal Information, as outlined below.  

  • Withdraw consent at any time.  The User can revoke the consent to the processing of their Personal Information previously provided. 

  • Object to, limit, or restrict use of Personal Information.  The User can oppose the processing of their Personal Information when it occurs on a legal basis other than consent. See below for further details on the right to object. 

  • Access their Personal Information.  The User has the right to obtain information on the Personal Information GPI processes, on certain aspects of the processing, and to receive a copy of the Personal Information processed. 

  • Verify and request rectification.  The User can verify the accuracy of their Personal Information and request its updating or correction. 

  • Delete Personal Information.  When certain conditions are met, the User can request the cancellation of some of their Personal Information. 

  • Have Personal Information transferred to another entity. The User has the right to receive their Personal Information in a machine-readable and, where technically feasible, to obtain the transfer of their Personal Information to another entity. 

  • File a complaint.  The User can submit a complaint with the competent personal data protection supervisory authority. 

If you have an account or accounts with us, please visit your account page(s) to review the options available to you to exercise your rights above. Please note that some functionality may not be available, or we may not be able to fulfill your request, depending on GPI’s legal obligations. For example, we may not be able to delete or anonymize all data as we may be legally required to retain certain data or retain certain data in identifiable form. If functionality to exercise your rights is not available to you directly, or you have any concerns about how we process your data under applicable data protection laws in your region, you may contact us by writing to us at the address set forth in our Privacy Policy. 

Details on the right to object 

When Personal Information are processed in the public interest, in the exercise of public authority vested in GPI or to pursue GPI’s legitimate interests, Users have the right to oppose the processing for reasons connected to their particular situation.