European Data Rights
How We Support Transparency, Lawful Processing And Individual Rights Under The GDPR
This Page Summarizes Our Approach To The General Data Protection Regulation For Individuals In The European Economic Area And Other Locations Where Comparable Requirements Apply. It Should Be Read Together With The Privacy Policy And Any Service Specific Notice Presented At The Point Of Collection.
Processing Principles
Personal Data Is Handled According To Purpose, Necessity And Accountability
Lawfulness And Transparency
We Identify An Applicable Lawful Basis And Provide Clear Information About The Relevant Purposes And Uses Of Personal Data.
Purpose And Minimization
Personal Data Should Be Collected For Defined Purposes And Limited To What Is Reasonably Needed For Those Purposes.
Accuracy And Retention
Reasonable Steps Support Data Accuracy, And Information Is Not Retained Longer Than Required For Legitimate And Legal Needs.
Lawful Bases
The Applicable Basis Depends On The Specific Data And Service Activity
Contract
Processing May Be Necessary To Create An Account, Deliver A Plan, Produce A Requested Report Or Provide Customer Support.
Legitimate Interests
Security, Fraud Prevention, Service Improvement And Limited Business Operations May Rely On Balanced Legitimate Interests.
Consent And Legal Obligation
Consent Is Used Where Appropriate And Can Be Withdrawn. Other Processing May Be Required To Meet A Legal Obligation.
Your GDPR Rights
Eligible Individuals Can Submit Verified Requests About Their Personal Data
Access, Correction And Portability
Ask Whether Your Data Is Processed, Receive A Copy, Correct Inaccuracies Or Request Portable Data Where Applicable.
Deletion And Restriction
Request Erasure Or Restricted Processing Where Legal Conditions Are Met And No Overriding Retention Requirement Applies.
Objection And Complaint
Object To Certain Processing And Raise A Concern With The Relevant Supervisory Authority If You Believe Your Rights Were Not Respected.
Processors And Transfers
Service Providers And International Transfers Are Managed Through Appropriate Safeguards
Processor Controls
Providers Processing Personal Data On Our Behalf Are Required To Follow Applicable Contractual Confidentiality, Security And Data Protection Obligations.
International Transfers
Where Required, Transfer Mechanisms Such As Adequacy Decisions Or Standard Contractual Clauses May Be Used With Additional Safeguards.
Security And Breaches
Technical And Organizational Measures Support Protection, And Reportable Personal Data Breaches Are Addressed Under Applicable Notification Rules.
Submit A Request
Privacy Requests Are Reviewed Securely And Without Unnecessary Delay
Identity Verification
We May Request Information Reasonably Necessary To Confirm Identity, Validate Authority And Prevent Unauthorized Access To Personal Data.
Response Process
Requests Are Evaluated Under Applicable Timelines. Complex Or Multiple Requests May Require An Extension Where The Law Allows.
Authorized Representatives
A Representative May Submit A Request When Valid Authority And Identity Evidence Can Be Confirmed.
Submit GDPR Requests Through Our Contact Page
Controller Governance
Accountability Measures Support Transparent Processing And Meaningful Individual Control
Controller And Processor Roles
Our Role Depends On The Service Context. We Generally Act As Controller For Direct Account And Website Operations And May Act As Processor Where A Customer Determines The Purpose And Means Of Processing.
Data Protection Assessments
Processing That May Present A High Risk To Individual Rights Is Evaluated To Determine Whether Additional Safeguards, Consultation, Restrictions Or A Formal Impact Assessment Are Required.
Automated Processing
Automated Analysis May Assist With Classification, Scoring Or Prioritization. We Do Not Intend Such Outputs To Produce A Legal Or Similarly Significant Effect Without An Appropriate Lawful Basis And Required Safeguards.
Supervisory Authority
Individuals May Raise A Complaint With The Data Protection Authority Competent For Their Residence, Workplace Or The Location Of An Alleged Infringement, Without Prejudice To Other Available Remedies.
Verified Requests Are Handled Without Discrimination Or Retaliation
Questions Or Requests
Contact Our Team For Policy Questions, Privacy Requests Or Compliance Concerns