The GDPR provides the following rights for individuals:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling
Any such request must be made by email to our Data Protection Officer at info@tiltaffinity.com and the request will be processed within 30 days and free of charge.
The right to be informed
We provide transparency on all data which we collect about you, how we process this information and on what legal basis this processing is conducted, and in turn how and where data is shared with other sub-processors. For full details see the linked articles below.
What information do we collect about you?
The right of access
We provide full visibility of your personal contact data which we collect and process. You can see this contact data via your Admin > Control Panel on the User Accounts tab. Additionally, if you would like a full breakdown of all data held over and above contact information you can submit a request to that effect.
For full details see the linked articles below:
What information do we collect about you?
How you can export your personal data
The right to rectification
You can edit some of your personal data through your account via Admin > Control Panel on the User Accounts tab. Additionally, you can ask us to amend your data in certain cases, particularly if it is inaccurate.
Your own data subjects in turn have these rights via your own business as their data controller. This is not the responsibility of Curo Software, so will need to implement processes and procedures to deal with such requests, but you can amend their personal data via the product(s) at any time.
The right to erasure
If we no longer provide services to you, e.g. you no longer have an active product subscription, you can ask us to erase or delete all or some of your personal data. When you cease a product subscription we will automatically queue your account data for deletion after a period of between 30-60 days.
Some personal data may need to be retained on the basis of contract obligation or legitimate interest, e.g. accounting data relating to invoices issued to and payments received from your agency.
For full details see the linked articles below:
What information do we collect about you?
How do we delete data when you leave us?
The right to restrict processing
This right is not absolute, but is an alternative to full erasure of personal data in some circumstance whereby we can continue to store personal data but not process it in certain ways.
For example, although we automatically send product updates to all active users via email, you can unsubscribe from these product updates.
For full details see the linked articles below:
What information do we collect about you?
The right to data portability
The right to data portability allows individuals to obtain and reuse their personal data for their own purposes across different services.
We allow product account owners, or other agency system users with appropriate access rights, to export data from our products in electronic format at any time, or use in whatever way they wish. This is achieved via Admin > Export where various types of data may be downloaded in CSV format. We will not provide data in any other format.
There is no facility to download or transfer files which have been uploaded for storage on our platform. Requests to export these files should be submitted by email and will be processed within 30 days, with access provided via a secure file sharing platform such as WeTransfer. These requests can only be made on active accounts.
The right to object
You can ask us to stop using all or some of your personal data (e.g., if we have no legal right to keep using it) or to limit our use of it (e.g., if your personal data is inaccurate or unlawfully held).
We do not share personal data for marketing purposes to any third party. However, Curo Software may communicate via with system users (current and past) and verified sales prospects via newsletters or email. If you wish not to receive any further such communications you can either click the Unsubscribe link present in the footer of all newsletters, or email us directly to withdraw consent for such correspondence. We will cease all further electronic, phone or postal correspondence immediately.
We employ the use of third-party sub-processors to provide core features and functionality within our product suite. Users have the right to object to any of these, and we will consider the feasibility of sourcing an alternative provider if the grounds for objection are based on valid concerns which would apply across our entire subscriber base. However, we are under no obligation to change sub-processors since we have already established their compliance and changing the provider may incur significant resource costs. Any user who still objects after our consideration may terminate their use of our service within the agreed cancellation terms.
Rights in relation to automated decision making and profiling
The GDPR has provisions on automated individual decision-making (making a decision solely by automated means without any human involvement), and profiling (automated processing of personal data to evaluate certain things about an individual).
We do not perform any such automated decision making or personal profiling within our company or product suite.
Comments
0 comments
Please sign in to leave a comment.