Legal notice

Legal and regulatory information

Ocorian is an organisation of corporate entities providing fiduciary and/or administration services in and from the jurisdiction in which each is located. Ocorian is a business name of Ocorian Limited but on this website it is used generally to refer to Ocorian Limited and its affiliated entities.

Ocorian Limited may be contacted at:

26 New Street
St Helier
Jersey JE2 3RA
Channel Islands
Tel: +44 1534 507000
Fax: +44 1534 507001
Email: enquiries@ocorian.com

Ocorian offers fiduciary and/or administration services in the following jurisdictions:

Guernsey

Ocorian (Guernsey) Limited, a limited company incorporated in Guernsey under company number 45342 with its registered office at Sarnia House, Le Truchot, St. Peter Port, Guernsey GY1 4NA, is licensed and regulated by the Guernsey Financial Services Commission under the Regulation of Fiduciaries, Administration Businesses and Company Directors, etc. (Bailiwick of Guernsey) Law, 2000. Ocorian (Guernsey) Limited is operated as a managed trust company with PraxisIFM Trust as the Managing Fiduciary.

In addition, the following members of the Ocorian Group operate in Guernsey:

Ocorian Corporate Services (Guernsey) Limited, a limited company incorporated in Guernsey under company number 45300

Ocorian Secretaries (Guernsey) Limited, a limited company incorporated in Guernsey under company number 45301

Premier Circle (Guernsey) Limited, a limited company incorporated in Guernsey under company number 45308

Second Circle (Guernsey) Limited, a limited company incorporated in Guernsey under company number 45309,

each with its registered office at Sarnia House, Le Truchot, St. Peter Port, Guernsey GY1 4NA and each are licensed and regulated by the Guernsey Financial Services Commission under the Regulation of Fiduciaries, Administration Businesses and Company Directors, etc. (Bailiwick of Guernsey) Law, 2000.

Ireland

Ocorian (Ireland) Limited, a limited company incorporated in Ireland under company number 376349 with its registered office at 52-55 Sir John Rogerson's Quay, Dublin 2, Ireland, is an authorised trust or company service provider in accordance with Section 89(6) of the Criminal Justice (Money Laundering and Terrorist Financing) Act 2010 of Ireland.

Jersey

Ocorian Limited, a limited company incorporated in Jersey under company number 52417 with its registered office at 26 New Street, St Helier, Jersey JE2 3RA, Channel Islands, is regulated by the Jersey Financial Services Commission for the conduct of trust company business.

Ocorian Fund Services (Jersey) Limited, a limited company incorporated in Jersey under company number 71859 with its registered office at 26 New Street, St Helier, Jersey JE2 3RA, Channel Islands, is regulated by the Jersey Financial Services Commission for the conduct of fund services business.

Luxembourg

Ocorian (Luxembourg) S.A., a corporation (société anonyme) incorporated in the Grand-Duchy of Luxembourg, registered with the Luxembourg Trade and Companies Register under number B201926, with its registered office at 6C, rue Gabriel Lippmann, L-5365 Munsbach, Grand-Duchy of Luxembourg, is regulated by the Luxembourg financial regulator (Commission de Surveillance du Secteur Financier) under permit number P00000456.

Intruma Corporate Services S.à r.l., a limited liability company (société à responsabilité limitée) incorporated in the Grand-Duchy of Luxembourg, registered with the Luxembourg Trade and Companies Register under number B91830, with its registered office at 17, Boulevard Prince Henri, L-1724 Luxembourg, Grand-Duchy of Luxembourg, is regulated by the Luxembourg financial regulator (Commission de Surveillance du Secteur Financier) under permit number P00000301.

Ocorian Services (Luxembourg) S.à r.l., a limited liability company (société à responsabilité limitée) incorporated in the Grand-Duchy of Luxembourg, registered with the Luxembourg Trade and Companies Register under number B91999, with its registered office at 6C, rue Gabriel Lippmann, L-5365 Munsbach, Grand-Duchy of Luxembourg, is registered with and supervised by the Association of Qualified Accountants (Ordre des Experts-Comptables).

Ocorian S.à r.l., a limited liability company (société à responsabilité limitée) incorporated in the Grand-Duchy of Luxembourg, registered with the Luxembourg Trade and Companies Register under number B201701, with its registered office at 2 Place de Paris, L2314, Grand-Duchy of Luxembourg, is registered with and supervised by the Association of Qualified Accountants (Ordre des Experts-Comptables).

IMMO GESTION S.à r.l., a limited liability company (société à responsabilité limitée) incorporated in the Grand-Duchy of Luxembourg, registered with the Luxembourg Trade and Companies Register under number B123264, with its registered office at 6C, rue Gabriel Lippmann, L-5365 Munsbach, Grand-Duchy of Luxembourg.

Parkview Realty S.à r.l., a limited liability company (société à responsabilité limitée) incorporated in the Grand-Duchy of Luxembourg, registered with the Luxembourg Trade and Companies Register under number B110681, with its registered office at 17, Boulevard Prince Henri, L-1724 Luxembourg, Grand-Duchy of Luxembourg.

Mauritius

Ocorian (Mauritius) Limited, a limited company incorporated in Mauritius under company number C103542 is regulated by the Financial Services Commission of Mauritius.

MASlux (Mauritius) Limited/Ocorian Services (Mauritius) Limited, a limited company incorporated in Mauritius under business registration number C084722 is regulated by the Financial Services Commission of Mauritius.

The Netherlands

Ocorian (Netherlands) B.V., a private limited company (besloten venootschap) incorporated in the Netherlands, registered with the Commercial Register under KvK No. 33246011, with its registered office at Coengebouw, suite 8.04, Kabelweg 37, 1014 BA Amsterdam, Netherlands is regulated by De Nederlandsche Bank.

Ocorian Corporate Services (Netherlands) B.V., a private limited company (besloten venootschap) incorporated in the Netherlands, registered with the Commercial Register under KvK No. 33195052, with its registered office at Coengebouw, suite 8.04, Kabelweg 37, 1014 BA Amsterdam, Netherlands is regulated by De Nederlandsche Bank.

Singapore

Singapore Trust Company PTE Ltd, a company incorporated in Singapore under company registration no. 199603757R with its registered office at 4 Robinson Road #5-01, Singapore 048543 is a licensed trust company regulated by the Monetary Authority of Singapore.

United Kingdom

Ocorian (UK) Limited, a limited company incorporated in England and Wales under company number 5534412 with its registered office at 11 Old Jewry, London, EC2R 8DU, is regulated by the Financial Conduct Authority of the United Kingdom.

Disclaimer

The content of this website (including publications, articles, documentation and other materials) and any information/any opinion expressed in that content is intended for general information purposes only. It does not constitute legal, accounting or other professional advice and it must not be used or relied upon as such. No part of the content of this website is to be taken as a commitment on the part of Ocorian to provide you with any advice or services.

The information on this website is not intended to be comprehensive. Publications and other materials on this website are only current at the time of initial publication and Ocorian gives no warranty as to the adequacy, accuracy or completeness of any such information. You must contact a suitably-qualified lawyer or other relevant professional if you require legal or other professional advice and/or before making any decision or taking any action that might affect the conduct of your business or your personal circumstances.

Ocorian makes no warranties regarding the compatibility of the website with any device or software with which you may choose to access it.

Ocorian uses industry standard anti-virus software on all of its servers but does not guarantee that the website is secure or free from computer viruses, bugs or other malicious codes or software. It is your responsibility to ensure that each computer you use to access the website is itself protected by an industry standard anti-virus service that is regularly updated and maintained.

No member of the Ocorian Group accepts any liability or responsibility whatsoever for any loss or damage that you may incur as a result of:

your use of this website or of its content.
any computer virus, bug or other malicious code or software that you may pick up as a result of using this website.
your following any link on this website to a third party website or your use of that third party website or of its content.

If you do follow any link on this website to a third party website, we encourage you to review the privacy policy applicable to that site, especially before disclosing any personal information.

Intellectual Property Rights

The content of this website and the layout, appearance and design of the website itself is the property of Ocorian Limited and is protected by all relevant intellectual property rights laws and regulations.

Individuals are authorised to view and download or print any of the publications on this website and are also permitted to give copies (in paper or electronic form) of reasonable extracts on an occasional basis free of charge to others for their personal, non-commercial, use on terms that (i) Ocorian is acknowledged as the source, (ii) the text is not altered in any way and/or that extract has not become misleading or inaccurate by reason of it having been extracted from its original form and (iii) the attention of recipients is drawn to this intellectual property rights notice and that any copy of the publications or other materials or any portion of them must include this copyright notice in its entirety. No other copying, distribution, modification, republication or other use of the publications or other materials on this website is permitted without the express written permission of Ocorian Limited.

PRIVACY STATEMENT

Members of the Ocorian Group are bound by data protection legislation in each of the various jurisdictions in which they operate ("Applicable Data Protection Law") and they are committed to protecting your privacy. This policy sets out the basis on which Personal Data that members of the Ocorian Group collect from you, or that you provide to a member of the Ocorian Group, will be processed.

In the remainder of this Privacy Statement, "we" refers to one or more members of the Ocorian Group and "us" and "our" is to be read accordingly.

The "Ocorian Group" consists of Ocorian Limited, a company incorporated in Jersey with registered number 52417, whose registered office is at 26 New Street, St Helier, Jersey JE2 3RA and its subsidiaries, its ultimate holding body, all subsidiaries of its ultimate holding body and any corporate entity managed or controlled by any of those entities. A full list of all the members of the Ocorian Group can be found at https://www.ocorian.com/privacy-statement-list-of-ocorian-entities/

This Privacy Statement is a "privacy notice" for the purposes of Applicable Data Protection Law, and in particular the European Union's General Data Protection Regulation ("GDPR"), given by an Ocorian entity when acting in its capacity as a data controller in relation to its collection and use of Personal Data.

Where Personal Data about you is collected and then used by a member of the Ocorian Group under this Privacy Statement as the result of you engaging with an Ocorian entity, the Ocorian entity with whom you engage is the data controller in respect of that Personal Data. Where Personal Data about you is provided by someone else or is collected by an Ocorian entity itself, this Privacy Statement will also apply to its collection and use and the Ocorian entity collecting and using that Personal Data is the data controller in respect of it.

This Privacy Statement does not apply to the collection or use of Personal Data by an Ocorian entity that is a data processor, except to the extent that its terms (or some of them) are incorporated into a relevant processing agreement, either expressly or by reference.

In this Privacy Statement, the phrase "those connected with you" refers to (a) your employees or other people who deal with us on your behalf, whether you are a client that is an individual, a corporate body or some other form of entity or organisation, or an investor in, or an owner of, a client and (b) those people who represent other entities or organisations that we might deal with, such as advisers, regulators, suppliers or anyone else that makes any form of enquiry in relation to us or our services.

Please read this Privacy Statement carefully to understand our practices regarding your Personal Data and how we will treat it.

If you have any queries regarding anything in this Privacy Statement, please contact our Data Privacy Officer, whose contact details can be found at the end of this document.

Purpose of Data Protection

The purpose of data protection legislation is to protect the rights and privacy of individuals ("Data Subjects") in respect of the Processing of Personal Data concerning them. "Personal Data" is any information relating to an identified or identifiable natural person (known as a "data subject"). A person is "identifiable" if he or she can be identified, directly or indirectly, not only by things such as a name or an identification number, but also by things such as location data or some factor specific to (for example) the physical, physiological or social identity of that person. More common examples of Personal Data include names, identification numbers, contact information, identity documents, medical records and photographic images. "Processing" covers any activity involving Personal Data and includes such things as the collection, recording, storage, adaptation, use, disclosure and destruction of Personal Data.

Each member of the Ocorian Group will Process Personal Data in accordance with Applicable Data Protection Law.

Our Policies

We have policies and procedures that aim to ensure that all our staff, contractors and others that we work with and who Process any Personal Data held by us, or on our behalf, wherever in the world, are aware of, and abide by, their duties under Applicable Data Protection Law. All members of the Ocorian Group abide by standards of data protection that are substantially the same as those set out in the GDPR, which requires among other things that Personal Data must be:

processed lawfully, fairly and in a transparent manner;
collected for lawful purposes that are clearly specified and only further processed for compatible purposes;
relevant and limited to what is necessary for the purposes of the processing;
accurate and kept up to date, with inaccurate Personal Data being erased or rectified without delay;
kept for no longer than is necessary; and
processed in a secure manner, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.

Whose Personal Data do we process?

Clients (and potential clients)

We have clients that are individuals and clients that are corporate bodies, including limited liability partnerships, government departments and agencies and other public bodies. Even where our clients are not themselves individuals, they will be represented by individuals and they may be owned by individuals and invested in by individuals. As a result, we will inevitably process Personal Data in the course of our relationships with those clients too.

As a potential client and then (if applicable) as a client, the Personal Data that we Process will include personal and/or professional contact details (addresses, telephone numbers, email addresses), copy identity documents and proofs of address, copy professional and educational certificates, details of bank accounts and/or other payment details, details of financial standing and investment objectives. If you are a potential client and then (if applicable) a client of our Private Client division and particularly in the areas of family office services, luxury asset ownership services and philanthropy, the Personal Data that we Process may additionally include details of family wealth, names, addresses and other personal details concerning family members and/or those employed by families or family members and other information categorised as "special category data", such as information about an individual's race; politics; religion; biometrics (used for ID purposes) and health.

In addition, if you leave a voicemail message with us, that message may be Processed in a similar manner, and for the same or similar purposes, to email and postal correspondence from or concerning you.

Investors, Legal and Beneficial Owners, Settlors, Protectors and Beneficiaries

We deal with individuals and various types of organisations that are connected with clients, such as owners and investors and beneficiaries,

As a person connected with a potential client and (if applicable) then a client that falls under this paragraph, the Personal Data that we Process about you will include personal and/or professional contact details (addresses, telephone numbers, email addresses), copy identity documents and proofs of address, copy professional and educational certificates and data to facilitate tax information exchange.

Other Client-Connected People: Advisers and Regulators

We also deal with those organisations that provide professional advice or services to us or to our clients, those that supervise and regulate us and our clients, those that supply goods and services to us and our past, present and (in the case of job applicants) future staff.

As an "Other Client-Connected" person, the Personal Data that we Process about you will include personal and/or professional contact details (addresses, telephone numbers, email addresses) and, if you leave a voicemail message with us, that message may be Processed in a similar manner to email and postal correspondence.

Suppliers (and potential suppliers)

As a potential supplier and then (if applicable) as a supplier, the Personal Data that we Process will include personal and/or professional contact details (addresses, telephone numbers, email addresses), documents and other proofs of standing and reputation and details of bank accounts and/or other payment details.

Potential employees

If you are an applicant for a job with us (a potential employee), the Personal Data that we Process about you will include:

your name, address and contact details, including telephone numbers and email addresses;
details of your qualifications, skills, experience and employment history including notice periods and reasons for leaving and references;
information about your current and past levels of remuneration, including entitlement to benefits;
whether or not you have a disability that we may need to make adjustments for during the recruitment process;
information about your entitlement to reside and/or work in the place where you have applied for a job; and
equal opportunity monitoring information, including information about your ethnic origin, sexual orientation, health and religion or beliefs where required by legislation.
Any other information provided by you on your CV. For the information we require you to submit on your CV please refer to the careers section of our website.

If your application for a job with us is unsuccessful, we will retain your Personal Data for a minimum of 6 months after the last point of contact with you (or any recruitment agency through which you have applied to us), but only up until our next clear out of job applicant Personal Information that is no longer required, which takes place biannually at about six month intervals. We will delete any Personal Information no longer required in an appropriate and secure manner.

If your application for a job with us is successful, our retention of your Personal Data will be governed by our separate notice on staff Personal Data referred to as the Employee Privacy Notice, which will be made available to you by our HR department as part of your becoming an employee.

If you leave a voicemail message with us, that message may be Processed in a similar manner to email and postal correspondence.

Enquirers and visitors to our website

You may give us Personal Data by filling in a contact form on our website or by corresponding with us by email. In each of the above cases, the Personal Data that we Process will include personal and/or professional contact details (addresses, telephone numbers, email addresses) and, if you leave a voicemail message with us, that message may be Processed in a similar manner to email and postal correspondence. If you have stated contact preferences for service and/or jurisdiction updates and/or events that we may organise or participate in, we will also Process that information.

We will also automatically collect certain information each time you visit our website. This includes:

technical information including the Internet Protocol (IP) address used to connect your computing device to the Internet, your browser type and version, time zone setting, operating system and platform;
information about your visit which may include the pages viewed, page response times; and
your country of location by reference to a look-up of your IP address against public sources.

Our website also uses cookies and/or similar technologies to collect and store certain information about your interaction with our website. For more information about how we use cookies see our Cookies Policy.

How we use the Personal Data we Process

Clients (and potential clients)

As a potential client, we will process Personal Data about you and those connected with you, for the purpose of carrying out our business and in order to:

respond in our legitimate interests to your enquiries about our services and/or other requests;
carry out due diligence or other "know-your-customer", anti-money laundering, counter-terrorist financing or anti-bribery checks in accordance with legal obligations to which we are subject or in our legitimate interests to satisfy our regulatory obligations and our own risk management procedures;
conduct checks concerning credit worthiness and standing prior to entering into an agreement with you;
take steps in our legitimate interests to prevent, detect or investigate crime, fraud, misconduct or any unlawful action or omission, whether or not relating to your enquiry and whether or not there is any suspicion of any illegality;
enter into an agreement with you regarding the provision of services;
verify and carry out financial transactions in relation to the provision of the services under the agreement with you;
manage our infrastructure and business operations and to comply with policies and procedures that may be required by law or where necessary for our legitimate interest to satisfy other applicable industry regulation, guidelines or notices and/or that may have been put in place by us, including those relating to regulatory review and/or oversight, internal or external auditing, finance and accounting, billing and collections, IT systems, data and website hosting, training, testing and business continuity; and
correspond with you concerning our present and future services and relevant news and service updates with your consent where required by law or otherwise in our legitimate interests provided these interests do not override your right to object to such communications.

If you become a client, we will continue to process Personal Data about you for such of the purposes described above as continue to be relevant. In addition, we will process Personal Data about you and those connected with you regarding the on-going provision of services, as described below. If you do not become a client, we will only keep Personal Data that you have made available to us if it is necessary for us to keep it for legitimate business purposes and/or as we are required to keep it by law or regulation.

If you do become a client, we will need to process Personal Data in order:

under the agreement entered into between you and us to:

provide you with services and to administer and manage our relationship with you;
carry out your instructions and to respond to enquiries made by you;
conduct and verify ongoing credit worthiness and standing checks relevant to the agreement;
recover any fees owed to us under our agreement with you;

under our legal obligations to:

collect and use certain information, for example with regard to the ownership of assets and for the purpose of the automatic exchange of information concerning tax matters;
carry out on-going due diligence or other "know-your-customer", anti-money laundering, counter-terrorist financing or anti-bribery checks;
to comply with other applicable law and regulations in the various jurisdictions in which we operate;

or in our legitimate interests:

to manage our infrastructure and business and to further our business interests;
to comply with policies and procedures under applicable professional regulation, guidelines or notices and/or that may have been put in place by us, including those relating to regulatory review and/or oversight, risk management, internal or external auditing, finance and accounting, billing and collections, IT systems, data and website hosting, training, testing and business continuity; and
other purposes which we may notify you of from time to time, and obtaining your consent where necessary.

Investors, Legal and Beneficial Owners, Settlors, Protectors and Beneficiaries

If you are an investor in, or the legal or beneficial owner of, a client that is a corporate body, a partnership or an unincorporated association or body or if you are a settlor, protector or beneficiary of a trust or a founder, council member or a beneficiary of a foundation, you may be a person connected with a potential client and/or client and, as such, we will process Personal Data about you and those connected with you in order:

to provide services to the client with which you are connected;

under our legal obligations to:

collect and use certain information, for example with regard to the ownership of assets and for the purpose of the automatic exchange of information concerning tax matters;
carry out on-going due diligence or other "know-your-customer", anti-money laundering, counter-terrorist financing or anti-bribery checks;
to comply with other applicable law and regulations in the various jurisdictions in which we operate;

or in our legitimate interests to:

to manage our infrastructure and business and to further our business interests;
to comply with policies and procedures under applicable professional regulation, guidelines or notices and/or that may have been put in place by us, including those relating to regulatory review and/or oversight, risk management, internal or external auditing, finance and accounting, billing and collections, IT systems, data and website hosting, training, testing and business continuity; and
other purposes which we may notify you of from time to time, and obtaining your consent where necessary.

Other Client-Connected People: Advisers and Regulators

If you are a person that is connected with a client or a potential client by reason of being the accountant, lawyer, banker or other adviser to that client (or potential client) or if you are a person that carries out any supervisory or regulatory function in any jurisdiction in connection with any member of the Ocorian Group or a client (or potential client) of any member of the Ocorian Group, we may process Personal Data about you and those connected with you for the purpose of our legitimate interest in carrying out our business including in providing services to the client (or potential client) with which you are connected.

Suppliers (and potential suppliers)

As a potential supplier, we will process Personal Data about you and those connected with you, for the purpose of entering into and receiving services under a contract with you relevant to carrying out our business and in order to:

respond to your enquiries about supplying goods or services to us;
conduct checks concerning standing and reputation;
enter into an agreement with you regarding the provision of services; and
correspond with you concerning your present and future goods or services.

If you do become a supplier, we will need to process Personal Data in order to:

administer and manage our relationship with you;
respond to enquiries made by you;
carry out on-going checks in accordance with legal or regulatory obligations and our own risk management procedures;
conduct and verify ongoing standing and reputation checks;
pay for goods and services received;
comply with legal or regulatory obligations, for example with regard to a regulator's outsourcing policy; and
for other purposes which we may notify you of from time to time, and obtaining your consent where necessary.

Potential employees

If you are an applicant for a job with us (a potential employee), we will process Personal Data about you in order, in our legitimate interests, to assess your application and to advance that application through our recruitment processes, including by making details of your application, including Personal Data, to relevant members of our management and of our HR group, and to comply with policies and procedures under applicable professional regulation, guidelines or notices and/or that may have been put in place by us, relation to staff and recruitment.

Enquirers and visitors to our website

If you have completed a form on our website, making a new business enquiry or asking a general question, indicating the services and/or jurisdictions then we will process Personal Data about you for the purpose of our legitimate interest in responding to your enquiries and/or request for information.

Likewise, if you have contacted our public relations team by email, either via the website or independently, or otherwise with a media enquiry, we will process Personal Data about you on the same grounds in order to respond to your enquiries and/or request for information.

Further, if you leave a voicemail message with us, that message may be Processed in a similar manner, and for the same or similar purposes, to email and postal correspondence from or concerning you.

If you or someone who works for you has given us a business card at a conference or a business meeting, we will use the contact details on the card in connection with the specific purpose it was provided. Where the card is provided for the specific purpose of requesting our promotional update communications we may first, where permitted by Applicable Data Protection Law, send an email promptly after receiving the business card, to confirm the request, clarify its scope and provide for you to complete contact preferences.

We use information about visitors to our website in our legitimate interests for internal operations, to ensure that content is presented in the most effective manner for you and your computer and to keep our website safe and secure.

Ocorian promotional updates and communications

Where permitted by law or otherwise with your prior consent, we will use Personal Data to provide you with promotional update communications about us or our services, and we may also invite you to tell us what your areas of interest are.

If you are on one of our contact lists for communications from members of the Ocorian Group, you will be able to check and update your contact details, to change your preferences or to "unsubscribe" at any time either by following the links which appear at the end of all our marketing and promotional update communications or by contacting us through our website and we will ensure that your details and preferences or your request to "unsubscribe" are dealt with promptly. Even if you tell us that you do not want to receive marketing or promotional update communications from us, we still may have the right to process Personal Data for the purposes of providing the services and, in such cases, we will continue to process that Personal Data for those purposes.

We do not sell or otherwise pass on your contact details to any third party outside the Ocorian Group for marketing purposes.

Who we share Personal Data with

We may share Personal Data with:

Any other member of the Ocorian Group that supports our processing of Personal Data under this policy. A full list of all the members of the Ocorian Group can be found at https://www.ocorian.com/privacy-statement-list-of-ocorian-entities/
business partners, suppliers, affiliates, agents and/or sub-contractors for the performance of any agreement we enter into with you. They may assist us in providing the services we offer, processing transactions, fulfilling requests for information, receiving and sending communications, updating marketing lists, analysing data, providing IT and other support services or in other tasks, from time to time. These third parties will only use your information to the extent necessary to perform their functions.
credit reference agencies for the purpose of assessing your credit standing where this is a condition of us entering into a contract with you.
external networking sites. Our website contains plug-ins to such sites. If you are a member of one of those social networking providers and you are logged in while visiting our website the relevant social network provider may assign information to your social media account. By interacting with one of the plug-ins on our website by clicking the interaction button information that you visited our site may be shared with the relevant social networking provider and held as part of your separate social networking user account. You should read the privacy policies of your social networking provider for further information about their collection and use of your Personal Data.
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of supply terms and other agreements with you; or to protect the rights, property, or safety of Ocorian, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Security and data retention

We have taken steps to apply appropriate technical and organisational measures to prevent the unauthorised or unlawful processing of Personal Data, and/or the accidental loss or destruction of, or damage to, Personal Data. This includes but is not limited to using properly configured and maintained firewalls and anti-virus /malware protection on servers and PCs with emails scanned for viruses and spam. Our staff have an obligation to ensure that appropriate security measures are implemented at all times in accordance with the guidance set out in our data protection policies and procedures.

As a general rule, Ocorian's IT tools and applications such as the e-mail system and the data/client/document management systems are administered by members of the Ocorian's IT team in Jersey. In Luxembourg, Ocorian's IT tools and applications are controlled by [Luxembourg management but are administered by a third party IT service provider regulated by the Luxembourg regulator, the CSSF.

Ocorian has retention policies in place to meet regulatory requirements and client obligations. We retain Personal Data for the duration of the services that we provide as necessary to meet our obligations under our contractual obligations to you, to identify issues or to issue and resolve legal proceedings. We also retain Personal Data beyond the duration of the services that we provide as necessary to meet our legal and regulatory obligations to retain such information under applicable law. We may also retain aggregate information beyond this time for statistical analysis and research purposes and to help us improve our services. Old media (PC and server disks, tapes, etc.) are stored and then destroyed using a reputable specialist organisation.

Retention periods are kept under review. There may be some cases in which we are obliged to delete Personal Data we process, such as the data having been processed in breach of the Applicable Data Protection Law or to comply with a legal obligation to delete it. In other cases, there may be no specific time limit applicable to the retention of particular Personal Data and, in determining how long particular Personal Data will be retained for, we will use criteria including whether:

a) the data is no longer necessary for the purpose in relation to which it was collected;

b) the data can, if required, be collected again without undue delay or difficulty.

We will not, as a general rule, seek or rely on your consent to process Personal Data about you. However, to the extent that we do on occasion rely on your consent in respect of particular Personal Data, we will cease processing that Personal Data by deleting it if you withdraw that consent at any time.

Likewise, where we rely on your consent to process "special category" Personal Data, we will cease processing that "special category" Personal Data by deleting it if you withdraw that consent at any time.

You do have the right to object to the processing of Personal Data by us on the grounds of performance of a legal task or our legitimate interest, but that objection must be on grounds relating to your particular situation. In such circumstance, we will stop processing the Personal Data in question unless:

a) we can demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms of the individual; or

b) the processing is for the establishment, exercise or defence of legal claims.

If you do object to the processing of your Personal Data by us and, as a result, we stop processing it, we may not be able to continue to provide services to you in a particular manner or at all and we may, as a result, need to terminate our service agreement with you.

Where, for example, we process your Personal Data with your consent in order to send you promotional update communications about us or our services, if you withdraw that consent, we will not be able to send you such communications.

If, as an unsuccessful job applicant you ask us to retain your Personal Data being the 6-month period for which we would normally retain it, but you later change your mind and ask us to delete it, we will not be able to refer to your original application should a potentially suitable vacancy subsequently occur.

We will delete any Personal Data no longer required, and will do so in an appropriate and secure manner.

Data Location

Ocorian stores data in Jersey, on Ocorian's servers at its physically-secured premises in St Helier, backed-up to an independently-certified third party data centre, and in Luxembourg, where data is related to clients of members of the Ocorian Group in Luxembourg is stored on servers in a data centre in Luxembourg provided by a third party IT service provider regulated by the Luxembourg regulator, the CSSF.

All premises and data centres used by Ocorian for its IT infrastructure are secured by access control systems and only a limited number of staff members and, on occasion, reputable and trusted third party IT suppliers that are subject to appropriate data protection and confidentiality obligations, have supervised physical or remote access to Ocorian's IT infrastructure and systems.

Certain clients have portals and/or document repositories provided by Ocorian, facilities for controlled secure access to a documents and information to be shared between Ocorian and the client in question and through which Ocorian and the client in question can communicate. Such portals and document repositories are operated by Ocorian in conjunction with third party service providers and client data is held (and backed-up) in "the cloud" on servers hosted in independently-certified third party data centres, physically located, variously, in Jersey, Guernsey and/or an EEA member state. Both Jersey and Guernsey are on the European Commission's list of countries ensuring an adequate level of protection for the rights and freedoms of data subjects.

The portals and document repositories provided by Ocorian are, in each case, the subject of contractual arrangements between us and the relevant third party imposing, among other things, obligations on the third party to ensure that appropriate technical and organisational measures are implemented by it at all times to prevent the unauthorised or unlawful processing of Personal Data, and/or the accidental loss or destruction of, or damage to, Personal Data.

Ocorian's CRM (customer relationship management) system is provided by Salesforce, an internationally-recognised service provider and client contact details (addresses, telephone numbers, email addresses) are held (and backed-up) in "the cloud" on servers hosted within the European Union.

In certain cases, Personal Data may be transferred to other countries where Ocorian maintains operations or where its service providers are located. Where these transfers are to be made outside the European Union, we will make sure that the receipt of the Personal Data has provided adequate safeguards, in accordance with the requirements of the GDPR by, for example, entering into appropriate European Commission-approved standard contractual clauses relevant to transfers between data controllers or between a data controller and a data processor.

In the case of transfers of Personal Data among members of the Ocorian Group, all such members are subject to the internal data protection policies and procedures of the Ocorian group, which are based on GDPR-compliance and they are parties to an intra-group data protection agreement, which obliges recipients of Personal Data that are located in a country that is not subject to an adequacy decision by the European Commission, to nevertheless apply EU standards by agreeing to abide by the obligations set out in the European Commission-approved standard contractual clauses.

In the case of transfers of Personal Data to third parties that are located in a country that is not subject to an adequacy decision by the European Commission, we will only transfer your Personal Data to third parties that have been approved for use by the Ocorian Group following due diligence and, in each case, provided that such third parties are the subject of contractual arrangements with us imposing, among other things, obligations on the third party to ensure that appropriate technical and organisational measures are implemented by it at all times to prevent the unauthorised or unlawful processing of Personal Data, and/or the accidental loss or destruction of, or damage to, Personal Data, again consistent with the obligations set out in the European Commission-approved standard contractual clauses.

Your rights

You have a number of rights under the GDPR in relation to your Personal Data.

You have the right under certain circumstances to:

have access to your Personal Data by making a "subject access request";
have your Personal Data corrected if it is wrong or, in certain circumstances, to have it deleted;
have the processing of your Personal Data restricted (while we verify or investigate your concerns with this information for example);
object to the further processing in certain circumstances of your Personal Data including the right to object to marketing;
request we move your provided Personal Data elsewhere (data portability);
to withdraw any consent that you have given us if we are processing your Personal Data only because you have given that consent; and
not have your Personal Data automatically processed.

Ocorian contact details

If:

you wish to exercise any of you rights in relation to your Personal Data;
you have any complaint about the way in which we process Personal Data; or
you require any further information about this Privacy Statement or its contents,

please contact us in the first instance at: The Data Privacy Officer, Ocorian Limited, 26 New Street, St Helier, Jersey JE2 3RA, Tel: +44 (0)1534 507000; Email: privacy@ocorian.com

In respect of any controller of your Personal Data that is situated outside of the European Union, that controller's EU-based representative is:

Ocorian Services (Luxembourg) S.à r.l., 6C, rue Gabriel Lippmann, L-5365 Munsbach, Grand Duchy of Luxembourg, Tel: +352 26 25 88 88; Fax: +352 26 25 88 79; Email: privacy@ocorian.com and enquiries should be marked to the attention of: The Data Privacy Officer.

Data protection regulator contact details

If your request or concern is not satisfactorily resolved by us you may approach your local data protection data protection authority in the jurisdiction in which we provide services to you.

The contact details for the data protection regulators in the jurisdictions in which we operate are as follow:

Cote d'Ivoire: National Data Protection Authority (Autorité de protection des données à caractère personnel) c/o ARTCI, Marcory Anoumabo, Abidjan or by post to 18 BP 2203 Abidjan 18 - Côte d'Ivoire. Tel: +225 20 34 43 73 / +225 20 34 43 74. Email: courrier@artci.ci
Dubai: The Data Protection Commissioner, Dubai International Financial Centre Authority, Level 14, The Gate, P.O. Box 74777, Dubai, United Arab Emirates. Tel: +971 4 362 2623. Email: administrator@dp.difc.ae
Jersey: Office of the Information Commissioner, Brunel House, Old Street, St Helier, Jersey JE2 3RG. Tel: +44 (0)1534 716530. Email: enquiries@dataci.org
Guernsey: Office of the Data Protection Commissioner, North Esplanade, St Peter Port, Guernsey GY1 2LQ. Tel: +44 (0)1481 742074. Email: enquiries@dataci.org
Ireland: Office of the Data Protection Commissioner, Canal House, Station Road, Portarlington, Co. Laois, R32 AP23, Republic of Ireland. Tel: +353 (0761) 104 800, LoCall 1890 25 22 31. Email: info@dataprotection.ie
Luxembourg: National Commission for Data Protection, 1, avenue du Rock 'n' Roll, L-4361 Esch-sur-Alzette, Luxembourg. Tel. +352 (0) 26 10 60-1. Online: https://cnpd.public.lu/en/support/contact.html
Mauritius: Data Protection Office, 5th Floor, SICOM Tower, Wall Street, Ebene, Republic of Mauritius. Tel: +(230)460-0251. Email: pmo-dpo@govmu.org
Netherlands: Dutch Data Protection Authority (Autoriteit Persoonsgegevens), Bezuidenhoutseweg 30, 2594 AV The Hague, Netherlands or by post to Postbus 93374, 2509 AJ The Hague, Netherlands. Tel: +31 (0)70 888 85 00.
Singapore: Personal Data Protection Commission,10 Pasir Panjang Road, #03-01 Mapletree Business City, Singapore 117438. Tel: +65 6377 3131. Online: https://www.pdpc.gov.sg/contact
South Africa: The Information Regulator (South Africa), SALU Building, 316 Thabo Sehume Street, Pretoria, South Africa. Tel: +27 (0) 12 406 4818. Email: inforeg@justice.gov.za
United Kingdom: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Tel: 0303 123 1113 (local rate). Online: https://ico.org.uk/global/contact-us/email/
United States of America: Federal Trade Commission, 600 Pennsylvania Avenue, NW, Washington, DC 20580. Tel: +1 (202) 326-2222. Online: https://www.ftc.gov/contact

Updates

We review our policies and procedures regularly and we reserve the right to amend the terms of this Privacy Statement from time to time at our absolute discretion. Any amended Privacy Statement will be posted on our website and you are encouraged to visit our website from time to time to ensure that you are aware of our latest policies in relation to the protection of Personal Data.

Cookies are small text files placed on your computer by websites and are used to make websites work efficiently and to improve the user experience. They also provide site owners with some information. All information these cookies collect are anonymous. You may decline cookies from Ocorian's website. Ocorian's Cookie policy is found here.

E-mail

E-mail and any attachments are confidential and may also be privileged. They are intended solely for the addressee(s). If you are not the intended recipient of an e-mail, please delete it and notify Ocorian immediately by telephoning or e-mailing the sender. If you are not the intended recipient, you must not copy or use the content of an e-mail and/or its attachment(s) for any purpose or disclose its contents to any other person. Any unauthorised use of the content of an e-mail and/or its attachment(s) is prohibited and may be unlawful.

All statements of opinion or advice addressed to an Ocorian client contained in an e-mail and/or its attachment(s) are subject to the terms and conditions of the engagement between Ocorian and that client.

Ocorian does not accept responsibility for the accuracy, completeness or delivery of e-mail. Communication by e-mail is not totally secure. Please notify the sender immediately if you suspect that any e-mail may have been intercepted or amended. No responsibility is accepted for any statements, views or opinions expressed by the sender where an e-mail is a non-business e-mail. If Ocorian receives a request from you via e-mail Ocorian will treat that as authority to reply by e-mail.

While Ocorian scans all e-mail and attachments for viruses, Ocorian does not guarantee that either is virus-free and accept no responsibility for any computer virus, bug or other malicious code or software or damage caused by any of the foregoing that might be transferred by or picked-up from e-mail.

Applicable Law

This website is subject to the law of Jersey, Channel Islands and the jurisdiction of the Jersey courts.

Any communication with this website shall be deemed to have taken place in Jersey, Channel Islands, irrespective of where you, or any other user on your behalf, may be located.