Privacy Policy

ARCA INTERNATIONAL INC. is committed to the Privacy Principles covering all Personal Data received by ARCA INTERNATIONAL INC. in the U.S. from European Union member countries and Switzerland in reliance on the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).

ARCA INTERNATIONAL INC. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. ARCA INTERNATIONAL INC has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF. ARCA INTERNATIONAL INC. has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the EU-U.S. Data Privacy Framework (EU-U.S. DPF and the Swiss-U.S. Data Privacy Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov ARCA INTERNATIONAL INC. can be found on the Data Privacy list at https://www.dataprivacyframework.gov/s/participant-search. ARCA INTERNATIONAL INC. collects personal data related to people from European Union countries and Switzerland to facilitate movement of said person’s goods. ARCA INTERNATIONAL INC. can be contacted at 858-677-5500 or dataprivacy@arca-intl.com. ARCA INTERNATIONAL INC notifies Data Subjects covered by this Choice Data Privacy Policy about its data practices regarding Personal Data received by ARCA INTERNATIONAL INC in the U.S. from European Union member countries and Switzerland in reliance on the respective data privacy framework, including the types of Personal Data it collects about them, the purposes for which it collects and uses such Personal Data, the types of third parties to which it discloses such Personal Data and the purposes for which it does so, the rights of Data Subjects to access their Personal Data, the choices and means that ARCA INTERNATIONAL INC offers for limiting its use and disclosure of such Personal Data, how ARCA INTERNATIONAL INC’s obligations under the Data Privacy framework are enforced, and how Data Subjects can contact ARCA INTERNATIONAL INC with any inquiries or complaints. In compliance with the EU-U.S. DPF and the Swiss-U.S. DPF, ARCA INTERNATIONAL INC commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU individuals and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the Swiss-U.S. DPF should first contact ARCA INTERNATIONAL INC at: dataprivacy@arca-intl.com.

Choice

If Sensitive Personal Data covered by this Data Privacy Policy is to be used for a new purpose that is different from that for which the Personal Data was originally collected or subsequently authorized or is to be disclosed to a third party, ARCA INTERNATIONAL INC. will obtain the Data Subject’s explicit consent prior to such use or disclosure. If Personal Data covered by this Data Privacy Policy is to be used for a new purpose that is materially different from that for which the Personal Data was originally collected or subsequently authorized or is to be disclosed to a non-agent third party, ARCA INTERNATIONAL INC. will provide Data Subjects with an opportunity to choose whether to have their Personal Data so used or disclosed. Requests to opt out of such uses or disclosures of Personal Data should be sent to: dataprivacy@arca-intl.com.

Accountability for Onward Transfer With Respect to our Agents

We will transfer only the Personal Data covered by this Data Privacy Policy needed for an agent to deliver to ARCA INTERNATIONAL INC. the requested product or service. Furthermore, we will (i) permit the agent to process such Personal Data only for limited and specified purposes; (ii) require the agent to provide at least the same level of privacy protection as is required by the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Principles; (iii) take reasonable and appropriate steps to ensure that the agent effectively processes the Personal Data transferred in a manner consistent with ARCA INTERNATIONAL INC.’s obligations under the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Principles; and (iv) require the agent to notify ARCA INTERNATIONAL INC. if it makes a determination that it can no longer meet its obligation to provide the same level of protection as is required by the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Principles. Upon receiving notice from an agent that it can no longer meet its obligation to provide the same level of protection as is required by the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Principles, we will take reasonable and appropriate steps to stop and remediate unauthorized processing. ARCA INTERNATIONAL, INC is required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. ARCA INTERNATIONAL INC. remains liable under the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Principles if an agent processes Personal Data covered by this EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Policy in a manner inconsistent with the Principles, except where ARCA INTERNATIONAL INC. is not responsible for the event giving rise to the damage. In the event we transfer Personal Data covered by this EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Policy to a third party acting as a controller, we will do so consistent with any notice provided to Data Subjects and any consent they have given, and only if the third party has given us contractual assurances that it will (i) process the Personal Data for limited and specified purposes consistent with any consent provided by the Data Subjects, (ii) provide at least the same level of protection as is required by the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Principles and notify us if it makes a determination that it cannot do so; and (iii) cease processing of the Personal Data or take other reasonable and appropriate steps to remediate if it makes such a determination. If ARCA INTERNATIONAL INC. has knowledge that a third party acting as a controller is processing Personal Data covered by this EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Policy in a way that is contrary to the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Principles, ARCA INTERNATIONAL INC. will take reasonable steps to prevent or stop such processing.

Security

ARCA INTERNATIONAL INC. takes reasonable and appropriate measures to protect Personal Data covered by this DataPrivacy from loss, misuse, and unauthorized access, disclosure, alteration, and destruction, taking into due account the risks involved in the processing and the nature of the Personal Data.

Data Integrity and Purpose Limitation

ARCA INTERNATIONAL INC. takes reasonable steps to ensure that such Personal Data is reliable for its intended use, accurate, complete, and current. ARCA INTERNATIONAL INC. takes reasonable and appropriate measures to comply with the requirement under the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) to retain Personal Data in identifiable form only for as long as it serves a purpose of processing, which includes ARCA INTERNATIONAL INC’s obligations to comply with professional standards, ARCA INTERNATIONAL INC.’s business purposes and unless a longer retention period is permitted by law, and it adheres to the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Principles for as long as it retains such Personal Data. ARCA INTERNATIONAL INC. limits the collection of Personal Data covered by this EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Policy to information that is relevant for the purposes of processing. ARCA INTERNATIONAL INC. does not process such Personal Data in a way that is incompatible with the purposes for which it has been collected or subsequently authorized by the Data Subject. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Access

Data Subjects whose Personal Data is covered by this EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Policy have the right to access such Personal Data and to correct, amend, or delete such Personal Data if it is inaccurate or has been processed in violation of the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Principles (except when the burden or expense of providing access, correction, amendment, or deletion would be disproportionate to the risks to the Data Subject’s privacy, or where the rights of persons other than the Data Subject would be violated). Requests for access, correction, amendment, or deletion should be sent to: dataprivacy@arca-intl.com.

Recourse, Enforcement, and Liability

ARCA INTERNATIONAL INC.’s participation in the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Framework is subject to investigation and enforcement by the Federal Trade Commission. In compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Principles, ARCA INTERNATIONAL INC. commits to resolve complaints about your privacy and our collection or use of your Personal Data. EU and Swiss individuals with inquiries or complaints regarding this EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Policy should first contact ARCA INTERNATIONAL INC. at: dataprivacy@arca-intl.com. In compliance with the EU-U.S. DPF and the Swiss-U.S. DPF, ARCA INTERNATIONAL INC commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS Data privacy Framework, an alternative dispute resolution provider based in EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Framework. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/eu-us-data-privacy-framework for more information or to file a complaint. The services of JAMS are provided at no cost to you. Individuals may, under certain conditions, invoke binding arbitration referenced in Annex I of the DPF Principles (https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf)

ARCA INTERNATIONAL INC. agrees to periodically review and verify its compliance with the  EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Principles, and to remedy any issues arising out of failure to comply with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) Principles. ARCA INTERNATIONAL INC. acknowledges that its failure to provide an annual self-certification to the U.S. Department of Commerce will remove it from the Department’s list of  EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) participants. Changes to this  EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF)  Policy This  EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF)  Policy may be amended from time to time consistent with the requirements of the  EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF). Appropriate notice regarding such amendments will be given.

These subsidiaries are also adhering to the EU-U.S. DPF Principles, and Swiss-U.S. DPF Principles and are covered by ARCA INTERNATIONAL’s DPF submission.