Only Watch Data Protection Policy 

Introduction

This data protection policy (hereinafter referred to as “the Policy”) sets out the conditions under which the ASSOCIATION MONEGASQUE CONTRE LES MYOPATHIES [Monaco Association Against Myopathies], whose registered office is located at Résidence Azur, 11, 13 Rue Louis Auréglia, 98000 Monaco (hereinafter referred to as “AMM”) processes personal data of individuals who are interested in, wish to participate in, or are participating in its biannual auction of unique pieces from the watch industry for the benefit of research into myopathies (hereinafter referred to as referred to as “Only Watch”).

Before participating in Only Watch, the person browsing the site, the person interested in Only Watch, the bidder or the buyer (hereinafter referred to as the “User”) is invited to fully consider the provisions below.

1. DEFINITIONS

The purpose of this Policy is to define how the personal data of Users is collected and processed by the Data Controller. The terms indicated below have the following definition: 

“Buyer” refers to the natural person acquiring a piece as part of Only Watch;
“Personal Data” or “Data” refers to any information allowing the direct or indirect identification of a natural person; 
“Bidder” refers to the natural person who registers with the Joint Data Controller for the purpose of making a purchase offer;
“Data Controller” refers to the natural or legal person who determines the purposes and means of processing personal data, in this case AMM, whose registered office is located at Résidence Azur, 11, 13 Rue Louis Auréglia, 98000 Monaco; 
“Joint Data Controller” refers to the natural or legal person who determines the purposes and means of processing Data jointly with AMM, in this case Christie Manson & Woods Ltd (hereinafter referred to as “Christie’s” or “the Joint Controller”), a limited liability company, whose registered office is located at 8 King Street London, United Kingdom;
“Sub-Processor” refers to the natural or legal person in charge of processing Personal Data on behalf of the Data Controller as part of a service or performance; 
“Processing” refers to any operation concerning Personal Data, regardless of the process used, computerised or not, such as the collection, recording, organisation, adaptation, modification, extraction, consultation, communication, use, dissemination or matching of Data; 
“User” refers to the natural person who browses the pages of the Only Watch event, including persons interested in the sale, Bidders and Buyers.
“Sale” refers to the biennial auction organised by AMM and implemented by Christie’s. 

2. PURPOSES AND LEGAL BASIS FOR DATA PROCESSING

The Personal Data of Users is collected and processed by the Data Controller on the basis of legal grounds and to the extent strictly necessary for the purposes defined below, which are explicit and legitimate.
For Processing carried out on the basis of consent, the User may withdraw his or her consent at any time, without affecting the lawfulness of Processing carried out before the withdrawal thereof, by contacting AMM at info@onlywatch.com. 

For Processing based on the execution of a contract, the Data requested from the User is necessary for the conclusion and execution of the contract between AMM and the User, AMM acting as an intermediary between Bidders/Buyers and AMM’s partners who have manufactured the parts subject to the Sale. The failure to provide this Data can therefore prevent the formation of the contract.

The User has the option to unsubscribe, at any time, from any electronic communication by clicking on the “Unsubscribe” button accessible at the bottom of each communication.

3. JOINT LIABILITY OF PROCESSING

AMM is called upon to determine jointly with Christie’s certain purposes and certain methods of Processing the Personal Data of Users. Consequently, the Joint Controllers undertake to transparently define their respective roles and obligations for the purpose of ensuring compliance with the applicable regulations.   

The User is invited to consult the data protection policy of the Joint Controller for more information on the data processing that they implement. 

4. RECIPIENTS OF THE DATA

The recipients of the Data collected and processed by AMM are:

• Authorised members of its staff due to their functions;
• Individuals possibly in charge of site maintenance, whether they are internal or external to AMM;
• Authorised members of Joint Controller’s staff.

The Data Controller may communicate the User’s Data to third parties who are legally authorised for regulatory reasons.

5. USER RIGHTS

The rights of Users concerning their Data are as follows: 

• Right of Access to Data 
Users may request confirmation from the Data Controller as to whether or not their Personal Data is being processed.
If the Data Controller is indeed processing the Data, they can verify its accuracy by requesting a copy, readable in an understandable format, of all information that the Data Controller holds about them. 

• Right to Rectification 
The User may request the modification of their Personal Data if it is incorrect or incomplete. 

• Right to Object to Processing 
The User may object, for legitimate reasons, to their Personal Data being used for specific purposes. 

• Right to Withdraw Consent
The User can withdraw their consent at any time if the processing of their Personal Data is based on it.

• Right to Restrict Processing 
The User may request that the Processing of their Personal Data be blocked for a certain period of time, notably while a request to exercise rights is being reviewed. 

• Right to Erasure 
The User may request the erasure of their Personal Data that the Data Controller holds about them, subject to compelling or legal reasons that permit AMM to retain them. 

• Right to give instructions regarding the management of personal data after death
The User has the option of informing the Data Controller about how they would like their Data to be used after their death. 

• Right to Data Portability  
The User may request the retrieval of some of their Data for their own use or for the purpose of transferring it to another entity. 

6. HOW TO EXERCISE YOUR RIGHTS

Any request to exercise rights concerning the processing carried out by AMM should be sent to info@onlywatch.com.

AMM may request a copy of proof of identity if necessary and undertakes to respond as quickly as possible, and in any case within one (1) month from the receipt of the complete request. This period may nevertheless be extended by two (2) months, taking into account the complexity and number of requests. 

In the absence of a satisfactory response from AMM, the User has the right to lodge a complaint with the competent Data Protection Authority.  

7. DATA RETENTION PERIOD

AMM undertakes to comply with the retention periods imposed by the regulations in force. These vary according to the purposes of the Processing carried out. 

8. LOCATION OF DATA PROCESSING

The Data collected and processed by AMM is done so outside the European Union since AMM is located outside this area. However, AMM endeavours to reconcile the application of the Monegasque law on data protection and the application of the regulations applicable to any citizen resident within the European Union.  

9. DATA SECURITY

AMM undertakes to take all necessary and appropriate technical and organisational measures to guarantee the security and integrity of Users Data. These measures guarantee the protection of this data against any unauthorised access, modification, alteration, disclosure, loss, or destruction.

10. MODIFICATIONS OF THIS POLICY

The Data Controller reserves the right to modify this Personal Data Protection Policy. In such a case, an updated version will be published on the website and the User will be informed by any means. 

11. CONTACT DETAILS

For any further information or any complaint relating to the use of his/her Data, the User can contact AMM at info@onlywatch.com.
Last modified on June 29, 2023