Vero Privacy Shield Statement 

Vero complies with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework as set forth by the US Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries and Switzerland transferred to the United States pursuant to Privacy Shield.  Vero has certified that it adheres to the Privacy Shield Principles with respect to such data. If there is any conflict between the policies in this Statement and data subject rights under the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification page, please visit https://www.privacyshield.gov/.


Purpose

The purpose of this Vero Privacy Shield Statement (“Statement”) is to outline how we comply with the Principles with respect to the personal information we collect. If you would like to obtain additional information regarding our privacy practices in connection with information collected on the Service in general, please refer to our Privacy Policy. If there is any conflict between this Statement and the Privacy Policy, this Statement shall prevail. 

Scope

This Statement applies to any personal information received by Vero from the European Union or Switzerland in reliance on Privacy Shield.

Vero Data Processing Activities 

Vero at times acts as a data processor or a data controller when processing personal data transferred from the EEA or Switzerland. Though the types of data Vero collects and processes may vary depending on the Terms of Use and our users’ preferences, data we collect typically includes personal information relating to profile information and other information as described in our Privacy Policy. Vero processes this data to provide the Service to our users; communications, customer service and product support; analytics to inform and improve our services; and for other internal purposes.

Principles

1. Notice. We will provide individuals with notice of our data collection and processing practices in our Privacy Policy, describing what personal information we collect, the purpose and use of personal information, the categories of third parties with whom we may share such information (and the purposes for which we do so), the individual’s right to access such information, the choices and means through which the individual may limit the use and disclosure of personal information, and other disclosures consistent with the Notice Principle.

You can read about our data collection and processing practices in our main Privacy Policy .

2. Choice. If individuals have any questions about reviewing or modifying your account information, they can contact us directly at [email protected]. For more information, please visit our Privacy Policy.

3. Onward Transfers (Transfer to Third Parties). Vero may transfer personal information to certain third parties (as described in our Privacy Policy). Where we transfer personal information to a third party, will take reasonable and appropriate steps to ensure the third-party processes personal information for limited and specified purposes and in a manner consistent with Vero’s Privacy Shield obligations. Where the transfer is to a third-party agent acting on our behalf, Vero may be liable if such third parties fail to meet those obligations, and we are responsible for the event giving rise to the damage.

In certain situations, we may be also required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

4. Security. We take reasonable and appropriate measures to protect personal information from loss, misuse and unauthorized access, disclosure, alteration and destruction. We have implemented appropriate physical, electronic and managerial procedures to help safeguard and secure personal information from loss, misuse, unauthorized access or disclosure, alteration or destruction.

5. Data Integrity and Purpose Limitation. We will process personal information in a manner that is compatible with and relevant to the purpose for which it was collected or authorized by individuals. To the extent necessary for those purposes, we will take reasonable steps to ensure that personal information is accurate, complete, current and reliable for its intended use. 

6. Access. EU and Swiss individuals have the right to reasonable access to the personal information about you that we hold. On request, we will also take reasonable steps to correct, update, amend or delete any information that is demonstrated to be inaccurate, except where the burden or expense of doing so would be disproportionate to the risks to your privacy in the case in question or where the rights of third parties would be violated. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data, should direct their query to [email protected]. If requested to remove data, we will respond within a reasonable timeframe.

7. Jurisdiction and Enforcement. As part of our participation in Privacy Shield, we are subject to the investigatory and enforcement powers of the US Federal Trade Commission.

8. Lawful Requests. Vero may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

9. Contact Vero and Recourse.  In compliance with the Privacy Shield Principles, Vero commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to Privacy Shield.  If you have any questions about this Statement or the information that we collect from you in reliance on Privacy Shield, please contact us at [email protected] or write to:

Vero Labs, Inc.
101 W 23rd St, Suite 2394 
10011, NY, NY

 

In the event that you are concerned about how personal information you have provided to Vero has been used, please address your inquiry or complaint first to us at the address listed above. Vero takes all concerns about privacy and use of personal information very seriously, and shall endeavor to reply to you within 45 days of receiving a complaint.

If we fail to respond within that time, or if our response does not adequately address your concerns, you may submit your complaint free of charge to JAMS, Vero’s designated Privacy Shield dispute resolution provider, using this link: https://www.jamsadr.com/file-an-eu-us-privacy-shield-or-safe-harbor-claim.

If your Privacy Shield complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See Privacy Shield Annex 1 at https://www.privacyshield.gov/article?id=ANNEX-I-introduction.


Last Updated: July 20, 2018.