More information about our collection, use and disclosure of your data, and your rights can be found in the sections below.
We collect data about you directly from you and from third parties, as well as automatically through your use of the Services under the following circumstances.
We will only use or process your data for the following legal basis:
Your data may be disclosed to third-parties. Your privacy is important to us so we have taken measures to ensure that all of the entities we share your personal data/information with have implemented strong data privacy and data protection practices of a level comparable to that which we employ. Your personal data may be disclosed under the following circumstances:
We may be required by law to retain some of your data for so long as necessary, often for a period of several years for the purposes of combating money laundering and for reporting purposes. We may additionally retain your data for a longer period than is required by law to the extent it is in our legitimate interests to do so (for example, we may retain it to prevent fraud on the Services) and is not otherwise prohibited by law.
We use servers located in the European Union and the United States to store personal data gathered by the Services. Additionally, to the extent we transfer your data to a third-party, including our related affiliates, as described in this Policy, these third-parties may be located outside our usual business location and your country of residence. In all such cases, data transfers will be carried out only after we ensure the third-party provides comparable levels of data protection and that they will use your data only for the purposes set out in this Policy.
Your Data Protection Rights
Subject to certain exemptions, and in some cases dependent upon the processing activity we are undertaking, you have certain rights in relation to your personal data. Every user is entitled to the following:
The right to access - You can confirm with us whether or not we have processed your personal data. If we processed your personal data, you have the right to request for copies of your personal data. We may charge you a small fee for this service.
The right to rectification - You have the right to request that we correct any information about you that you believe is inaccurate. You also have the right to request that we complete information about you that you believe is incomplete.
The right to erasure - You have the right to request that we erase your personal data, under certain conditions. We may not be required to comply with your request to delete personal data if the processing of your personal data is necessary for compliance with a legal obligation or for the establishment, exercise, or defense of legal claims.
The right to restrict processing - You have the right to request that we restrict the processing of your personal data, under the following circumstances: (i) you contest the accuracy of your personal data; (ii) the processing is unlawful but you wish to restrict rather than prohibit the processing of your personal data; (iii) the purposes for processing your personal data no longer exist, but you require the personal data for the establishment, exercise, or defense of legal claims; or (iv) you have legitimately objected to the processing of your personal data and the processing is therefore restricted pending the verification of whether the legitimate grounds of the controller override your objection.
The right to object to processing - You have the right to object to our processing of your personal data in cases where the processing is based on our legitimate interests or a third- party’s legitimate interests if you believe your fundamental rights and freedoms outweigh our legitimate interests. If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests for the processing that override your rights and freedoms.
The right to data portability - To the extent that we process your personal data, (i) based on your consent or under contractual obligations, and (ii) through automated means, you have the right to request that we transfer your personal data that we have collected to another organization where technically feasible, or directly to you in a structured, commonly used, machine-readable format.
The right to withdraw consent at any time - If processing is based on consent, you can withdraw your consent at anytime. Your withdrawal of consent does not affect the lawfulness of processing based on consent before your withdrawal.
The right to lodge a complaint with a supervisory authority - If applicable under Article 77 of the GDPR, you can lodge a complaint with a supervisory authority, in particular in the member state of the European Union of your habitual residence, place of employment or place of alleged infringement.
We do not process personal data of children under the minimum legal age pursuant to local legal requirements in the state, province, country or jurisdiction of residence. We take appropriate measures to ensure that children do not use the Services. If you discover that a child under age has provided us with his/her personal data, please contact us at firstname.lastname@example.org.
To exercise your data protection rights as listed above, please send the privacy request form to email@example.com. Please note that we may request for additional identification including photo identification in order to verify and grant an individual access to their requested personal data. For further questions and concerns, you may reach our Data Protection Officer at firstname.lastname@example.org.
Changes to this Policy
This Policy is current as of the Effective Date set forth below. We may change this Policy from time to time, so please be sure to check back periodically. We will post any changes to this Policy on the Site and the Services. If we make any changes to this Policy that materially affect our practices with regard to the personal data that we have previously collected from you, we will endeavor to provide you with notice in advance of such change by highlighting the change on the Site and the Services.