Privacy Policy

Data Controllers

We are ACCESA, a group of companies including ACCESA IT SYSTEMS SRL and ACCESA CONSULTING SRL, collectively referred to as "ACCESA". 

In accordance with applicable data protection laws, we operate as joint controllers when processing your personal information. This means that we share responsibility for how your data is collected and used to provide our various services, including Cloud Solutions, Process Automation Platforms, and AI Custom Software Development Operations & Support. 

Contact Details

Head Office: Constanta 12, Platinia Office, 400158 Cluj-Napoca, Romania 

Phone: +47 22 83 39 50 

Email: hello@accesa.eu  

Website: https://www.accesa.eu/ 

Contact Us

If you have any questions, concerns, comments, or requests regarding this Privacy Policy or our data practices, please contact us to dpo@accesa.eu.

Technical Information

We collect device, browser, and internet connection details when you access our website. 

Website Usage

We track your actions on our site, like page visits, link clicks and other actions taken, to improve and personalise your experience. 

Usage data represents information collected automatically through this Website (or third-party services employed in this Website), which can include: the IP addresses or domain names of the computers utilised by the Users who use this Website, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilised to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilised by the User, the various time details per visit (e.g., the time spent on each page within the Application) and the details about the path followed within the Application with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User's IT environment. 

Cookies Data

We use cookies and similar technologies to collect info like your IP address, browser type, and how you browse.  

Contact Information and Subscription Data 

If you contact us or subscribe to newsletters, we may collect your name, email, phone, city, company, and other info for inquiries, support, and updates. You can unsubscribe anytime. 

Opt-In Data

We might request permission for non-essential cookies, storing your preferences for personalised site use. 

Demographic Information 

If you choose to provide it, we might collect info about your age, gender, location, or preferences. 

Geographic Position 

With consent, we collect approximate locations (country and city) for location-based services and site enhancement. 

Other necessary data 

Depending on interactions, we may process additional data like name, surname, user-generated content, feedback, usage data, service logs, activity history, performance metrics, feature usage statistics, contact details, incident reports, and more for service provisioning and support.  

Data from Third Party Services 

We may use third-party tools and platforms like Google Analytics, Hotjar and Intercom for website enhancement, user behaviour analysis, and service improvement. These tools collect and process personal data, detailed in the "Third Party Services" section.  

Website Security 

We process data to protect the website, prevent unauthorised access, and stop fraud.  

Legitimate Interest 

IP addresses, device info, browser info, website usage data, clickstream data, and session info. 

Monitoring compliance with our Terms of Service 

Ensuring service users' compliance with our Terms of Service, acceptable use policies, and any other contractual obligations. 

Legitimate Interest 

Website usage data, IP Addresses and Device Information, User-Generated Content, and Communication metadata.  

Responding to Inquiries Contact Form 

We process data from website contact forms to respond to inquiries. 

Legitimate Interest 

Contact info (e.g., name, email, phone), user-submitted inquiries or support requests. 

Cookie Consent Recording 

We request and record your consent for non-essential cookies and manage cookie preferences to comply with legal requirements. 

Legal Obligation, Legitimate Interest 

Recorded consent, cookie preferences, device and browser info, and IP address. 

Data Retention Execution 

We process data to meet legal obligations, like record-keeping requirements, data retention and erasure requirements.

Legal Obligation 

Erasure of data after the retention period. 

Responding to Legal Requests 

Data is processed to respond to legal requests like court orders.

Legal Obligation 

All personal data collected through our website.

Website Analytics and Performance 

Data is used for website analysis to enhance performance and user experience. 

Legitimate Interest 

Website usage data, clickstream data, session info, device info, browser info, anonymised data, and preferences. 

Research and Development 

We process data to improve website features.

Consent 

Website usage data, user feedback, and survey responses.

Newsletter Subscription and Mailing List 

With your consent, we send news about our services or upcoming events.

Consent

Contact info (e.g., name, email), city, company, usage data.

Location-based Interactions 

Geolocation data is collected with consent to enhance the website experience. 

Consent

Geographic Position 

Customising User Experience 

We personalise your website experience based on your preferences. 

Consent

Website usage data, page views, clickstream data, session info, device info, browser info. 

User Feedback and Surveys 

User insights are gathered through feedback and surveys with consent. 

Consent

User-provided feedback, survey responses, and any shared personal data.

Cookies and Tracking Technologies 

Data about browsing activities, preferences, and interactions are collected through cookies and similar tech with consent (unless strictly necessary).

Consent (Unless strictly necessary) 

IP address, device information, browser information, and website usage data. 

Personalised Marketing and Advertising 

Data is collected for personalised marketing and targeted advertising with consent.

Consent

Cookies, IP address, device information, browser information, website usage data, demographic information, and visitor interactions. 

Conversion tracking and remarketing 

Tracking actions and behaviour for remarketing or targeted advertising purposes. 

Consent

Cookies, IP addresses, device information, browser information, website usage data, conversion data, and interaction data. 

Lead generation and marketing analytics 

Generating leads, assessing marketing effectiveness, and measuring campaign performance. 

Consent

Website form data, contact information, interaction data, marketing analytics data and demographic information. 

Displaying content from external platforms

This service allows viewing content from external platforms.

Consent

Web traffic data may be collected even when Users do not use it.

Monitoring and auditing 

Monitoring and auditing, internal or external audits, compliance assessments, and adherence to security standards. 

Legitimate interest 

Identifying info, documentation, audit logs, records, and compliance data. 

Technical Information 

Up to 12 months 

Website Usage Data 

Up to 12 months 

Cookies Data 

Usually, until you finish browsing, or up to 12 months 

Contact Information, Subscription Data 

For 3 years, so we can respond to and document your requests and to establish, defend and exercise our rights in court. 

Opt-In Data 

Until you unsubscribe or ask us to remove it. 

Demographic Data 

Up to 12 months if you provide it. 

Geographic Position 

Up to 12 months, and you can change your settings anytime. 

Other Necessary Data 

Up to 3 years, depending on what data is and why we collected it. 

Data collected through third-party tools 

Up to 12 months or up to 3 years, so we can respond and document your requests and to establish, defend and exercise our rights in court. 

Identification Information 

Your name, contact details (like phone and mailing addresses), and any other personal information shared during email exchanges, like employee IDs, and usernames. 

Professional Information 

Job titles, company names, industry affiliations, professional qualifications, and business contact information. 

Communication Data 

The content of emails exchanged, including text, attachments, documents, images, and any other information shared during our correspondence. 

Communication Metadata Logs and IT Usage Data 

To investigate and document incidents, check phishing emails, and maintain security, we may collect logs and other IT usage data related to email communications. This data may include timestamps, email addresses, and subject lines related to our email communications, server logs, IP addresses, device information, email delivery logs, metadata related to email exchanges, and information for security monitoring and incident response. 

Financial and Transaction Data (if relevant) 

Billing information, financial transaction records, payment details, bank account and invoices related to professional agreements, order histories, and details of products or services discussed during email exchanges. 

Other necessary data 

Depending on your interactions, we might process additional personal data, such as information related to our professional agreements, project details, event information, or contractual terms and any other data relevant to our professional relationship. 

Email Communication 

To facilitate email communication and correspondence between you and our company.  

To communicate with you efficiently and effectively through email for business-related matters. 

Contract execution  

Steps to enter a contract 

Legitimate interest  

Regulatory Compliance 

To comply with legal obligations, including record-keeping, regulatory requirements, and responding to legal requests.  

Legal obligation  

Responding to Inquiries 

To respond to inquiries, questions, or requests made via email.  

Contract execution  

Steps to enter a contract 

Legitimate interest  

Newsletters and Updates 

To send newsletters, updates, or promotional materials related to our services or products. 

Consent 

Customising User Experiences 

To personalise and improve your user experience based on your email interactions. 

Legitimate interest 

Research and Development Business Analytics and Reporting 

We use aggregated data for business analytics, reporting, and performance assessment for research and development purposes to enhance our services and activity and to monitor our business operations. 

Legitimate interest 

Fraud Prevention, Incident Investigation, Security Monitoring 

We may process email, IT usage data and logs to prevent fraud and investigate/document incidents, unauthorised access, phishing, and security breaches. 

Legal obligations  

Legitimate interest 

Dispute Resolution 

To facilitate resolution, investigations, or legal proceedings in the event of disputes arising from our cooperation. 

To establish, exercise, or defend our legal rights. 

Legitimate interest 

Complaints Resolution, Data Subjects Requests 

To address and resolve complaints or concerns raised by you or third parties regarding our services, processes, or treatment of personal data and to respond to data subjects’ requests.  

To document and respond to complaints and data subjects’ requests and/or 

To establish, exercise, or defend our legal rights. 

Legal obligations  

Legitimate interest 

Improving Services, Business Development 

To monitor the quality of our services, identify areas for improvement, enhance the overall user experience, identify potential business opportunities, collaborations, or partnerships. 

Legitimate interest 

Internal/External Audit, Compliance Monitoring 

To conduct internal and external audits and ongoing compliance monitoring to ensure that our organisation adheres to regulatory requirements, policies, and internal standards. 

Legal Obligation and/or 

Legitimate Interests 

Risk Management and Control Activities 

To assess, manage, and control risks related to data security, privacy, and compliance. 

Ensuring proper risk management, sustainability, and compliance of our operations. 

Legitimate interest 

Identification Data 

Name, surname and other identification information shared during the business relationship and relevant for our cooperation. 

Business Data 

Job titles, company names, industry affiliations, professional qualifications, and business contact information. 

Communication Records 

Records of email correspondences, meeting minutes, call logs, and other communication-related data exchanged during our professional interactions. Records of email correspondences, meeting minutes, call logs, and other communication-related data exchanged during our professional interactions. 

Legal Information 

Data from legally binding documents, such as service agreements and other relevant legal documents. 

Financial Data 

Billing information, financial transaction records, including bank account details, credit ratings, payment terms, financial transactions, billing history, invoices related to professional agreements, order histories, and details of products or services and other financial data relevant to our collaborations. 

Due Diligence Data 

Information related to the counterparty risk assessment, considering factors such as financial stability, reputation, and compliance history. This may also include data related to the assessment of potential conflicts of interest between our company and its Business Partners. 

Regulatory Data 

Data related to regulatory requirements, certifications, licenses, permits, accreditations, and industry-specific qualifications obtained by our Business Partners. 

Intellectual Property Data 

Information about intellectual property rights and agreements between you and our company, such as patents, trademarks, or copyrights. 

Performance Data 

Data related to the performance and service quality, including service level agreements, performance evaluations, and feedback. 

Representatives’ Data 

Data of assigned employees or legal representatives, such as names, job titles, contact details, and other relevant information for business relationship management. 

Insurance Data 

Information about the insurance coverage and liability agreements. 

Marketing Preferences 

Preferences for marketing communications, feedback, survey results, and other marketing-related data shared during our interactions. 

Dispute Records 

Information related to any legal disputes or complaints that may arise during our cooperation. 

Audit and Compliance Data 

Data related to audits, assessments, or inspections conducted by / or related to our cooperation. 

Access Rights and Permissions Data 

Data about the access rights and permissions granted to our Business Partners for different systems, applications, and IT resources within our company. 

Technical Data 

Technical information, such as system and application access logs, IP addresses, and the usage of corporate digital resources relevant to our collaborations. 

IT Data 

Information about the hardware and software relevant for IT support purposes. 

Device Data 

Data about the devices used to access our application, such as laptops, smartphones, or tablets. 

Metadata Logs and  IT Usage Data 

We collect metadata and IT usage data across our application, which is important for investigating incidents, verifying communications, and maintaining security. This data includes timestamps, user identifiers, system activity records, access logs, IP addresses, device details, application usage logs, server logs, cloud environment data, and metadata related to interactions. It helps in monitoring security and responding to incidents in our application and IT infrastructure. 

Other Relevant Data 

Depending on your interactions, we might process additional personal data, such as information related to our professional agreements, project details, event information, or contractual terms and any other data relevant to our professional relationship. 

Sensitive Data 

By exception, in the context of our relationships with our Business Partners, sensitive data is only processed in specific situations, which include the Due Diligence process, where we may collect and process sensitive data related to criminal convictions, fraudulent activities, or politically exposed person (PEP) status (if such information is disclosed in the public official lists) as part of our Due Diligence procedures to ensure compliance with regulatory requirements and mitigate potential risks associated with individuals or entities. It's important to note that the processing of sensitive data is carried out with the utmost care and in strict compliance with applicable data protection laws. Our primary aim is to safeguard the rights and freedoms of individuals while fulfilling our legal obligations and maintaining the highest ethical standards in our professional relationships. 

Managing Business Relationships 

Establish and maintain business relations and contractual activities. 

Managing contracts, including negotiations, drafting agreements, and executing contracts, as well as administering contract-related obligations, amendments, and terminations. 

Monitoring and enforcing compliance with contractual terms, service level agreements, and other obligations under the agreement. 

Contract Execution

Steps to enter a contract

Legitimate Interest 

Managing B2B and Business Partners' accounts  

Maintaining clients' and business partners' records, managing account details, and ensuring accurate billing and invoicing. 

Contract Execution

Steps to enter a contract

Legitimate Interest 

Providing and delivering services 

Fulfil contractual obligations and deliver the agreed-upon services. 

Contract Execution  

Billing and Payments 

Process financial transactions, billing, payments, and related financial activities. 

Contract Execution

Legal Obligation 

Facilitating Communication  

Facilitate communication and correspondence for business purposes. 

Sending important updates, notifications, and service-related communications. Establishing channels for effective communication and information exchange between the parties involved for the execution of the service agreements. 

Contract Execution

Steps to enter a contract

Legitimate Interest

Recording and documenting interactions 

Keeping records of communication, agreements, and any changes or modifications to the terms of the agreement. 

Contract Execution

Steps to enter a contract

Legitimate interest. 

Responding Your Inquiries 

Addressing your inquiries and requests for information and providing support. 

Contract Execution

Steps to enter a contract

Legitimate Interest 

Newsletters and Updates 

Send updates, newsletters, or promotional materials. 

Consent  

Personalising services 

Customising the services and experiences based on the specific preferences and needs of the clients. 

Contract Execution

Legitimate Interest 

Improving User Experiences 

Improve user experience with our applications and services. 

Legitimate Interest 

Regulatory Compliance 

Comply with legal obligations, including record-keeping, regulatory requirements, and responding to legal requests. 

Legal Obligation 

Financial reporting, Tax & Accounting 

Fulfil legal obligations to comply with: (i) financial reporting requirements, such as generating financial statements, conducting audits, and ensuring compliance with accounting standards; (ii) tax obligations, including calculating and reporting taxes, providing tax-related documentation, and responding to tax authorities' inquiries; (iii) financial and accounting obligations, such as invoicing, payment processing, managing accounts payable and receivables. 

Legal Obligation 

Due Diligence and Risk Assessment 

Execute the counterparty due diligence process and assess related risks, including identification of potential conflicts of interest between our company and Business Partners to ensure transparency and ethical conduct. 

Legal Obligation

Legitimate Interest  

Checking Regulatory Requirements 

Verify certifications, licenses, and industry qualifications. 

Legal Obligation 

Intellectual Property Rights Management 

Manage intellectual property rights and agreements, such as patents, trademarks, or copyrights. 

Establish, exercise, or defend our legal rights.  

Contract Execution

Legitimate Interest 

Service Performance Evaluation 

Evaluate the performance and service quality, including service level agreements and feedback. 

Legitimate Interest. 

Marketing and Surveys 

Manage marketing preferences, feedback, survey results, and other marketing-related data shared during our interactions. 

Consent 

Dispute Resolution 

Facilitate dispute resolution, investigations, or legal proceedings and address any legal claims or issues that may arise during the agreement. 

Establish, exercise, or defend our legal rights. 

Legitimate Interest 

Complaints Resolution, Data Subjects Requests 

Address and resolve complaints or concerns regarding our services, processes, or treatment of personal data and respond to data subjects’ requests.  

Document and respond to complaints and data subjects’ requests. 

Establish, exercise, or defend our legal rights. 

Legal Obligation

Legitimate Interest 

Fraud Prevention, Incident Investigations, Security Monitoring 

Prevent fraud and investigate/document incidents, unauthorised access, phishing, and security breaches.  

Protect our business and maintain information security. 

Legal Obligation

Legitimate Interest 

Research and Development 

Use aggregated data for research and development to improve our offerings and activity, 

Legitimate Interest  

Business Analytics, Business Reporting 

Business analytics, reporting, and performance assessment. Monitoring and improving our business operations. 

Legitimate Interest 

Improving Services Business Development 

Monitor service quality, identify improvement areas, explore opportunities, and pursue business growth and development. 

Legitimate Interest 

Internal /External Audit, Compliance Monitoring 

Conduct internal / external audits and ongoing compliance monitoring to ensure adherence to regulatory requirements and standards. 

Legal Obligation

Legitimate Interest 

Risk Management, Control Activities 

Assess, manage, and control risks related to data security, privacy, and compliance. Ensuring sustainability and compliance of our operations. 

Legitimate Interest 

Data Sharing for Business Insights 

Sharing aggregated and anonymised business insights and trends with clients, partners, or industry associations for research, benchmarking, or collaboration purposes on an international level. 

Legitimate Interest 

Participation in Events 

We may seek your consent to participate in specific events, workshops, or conferences. 

Consent 

Use of Photo or Video for Marketing Campaigns 

With your explicit consent, we may use your photo or video content for marketing campaigns. This may include featuring your image or video in promotional materials, advertisements, social media posts, website content, or other marketing channels. Your consent will be sought prior to using your photo or video, and you have the right to withdraw your consent at any time. 

Consent 

Testimonials and Case Studies 

We may request your consent to use your name, logo, or testimonials for marketing and promotional purposes. 

Consent 

Social Media Engagement 

With your consent, we may engage with you through social media platforms or feature your content in our company's social media channels. 

Consent 

Sharing with Third Parties 

We may share your personal data with specific third parties for collaborative projects, partnerships, or marketing initiatives. 

Consent 

Partnership Opportunities 

We may assess potential partnership opportunities, collaborations, or joint ventures based on the personal data you provide. 

Consent 

Service Providers 

These are companies that assist us in managing our business activity, including technical support, hosting, cloud solutions, security and risk management tools, software applications, data analysis, and IT services. When we disclose the personal data to the aforementioned processors, we remain the controller and responsible for the lawfulness of the processing. These partners are contractually bound to comply with our data privacy and security requirements, ensuring the protection of your personal information. They are authorised to access personal data solely for the purposes we specify, contributing to the efficiency and security of our services. 

Professional Advisors 

We might work with lawyers, accountants, auditors, or consultants who could access your data while providing their services. 

Legal and Regulatory Authorities 

Occasionally, legal obligations may require us to share email data with law enforcement, regulators, or government authorities. 

Business Transfers 

If we undergo a merger, asset sale, or significant organisational change, your data may be transferred to the new entity or owners. 

Third-Party Tools and Platforms 

We use various third-party tools and platforms to enhance our processes. These tools may process your data on our behalf. 

Other Authorised Recipients 

There might be other authorised recipients we have to share data with, depending on specific situations and laws. Employees of the company also have access to personal data. Employees have access to personal data only if this is necessary for the purposes described above. Employees are bound by an obligation of professional secrecy. 

Organisational Safeguards 

We have put in place various organisational measures, including policies, procedures, and guidelines that govern data protection practices across our organisation. We regularly assess data processing activities to identify and mitigate risks to your privacy, ensuring a balanced approach. 

Data Encryption 

We use encryption techniques to safeguard your personal data during transmission and storage, rendering it impervious to unauthorised access or interception. 

Access Controls 

Strict access controls are firmly in place to guarantee that only authorised personnel have access to your personal data. Access privileges are granted on a need-to-know basis and are routinely reviewed and updated. 

Data Minimisation 

We only collect and process personal data that is necessary for the purposes outlined in this Privacy Policy. The data collected is limited to what is necessary and relevant. 

Privacy from the Start 

We integrate data protection into our processes from the very beginning, using privacy-enhancing technologies and practices to uphold the highest standards of data protection and privacy. 

Employee Training  

We make sure our team knows how to keep your data safe through training. 

Incident Response  

In the unlikely event of a data breach or security incident, we have procedures in place to respond, investigate, and mitigate the impact promptly. We will notify you and the relevant authorities as required by applicable regulations. 

Regular Assessments 

We conduct regular assessments and audits of our data protection and security measures to identify and address any vulnerabilities or risks related to personal data. This helps us maintain the effectiveness of our security controls and ensure ongoing data protection. 

Other  

Other security measures required to manage the confidentiality, availability, and integrity of the data, aligned with the technology development. 

Right to withdraw your consent  

You can withdraw your consent for the processing of your Personal Data at any time. 

Right to be informed 

You have the right to be informed about how your Personal Data is collected and processed. This includes knowing the purposes, who is processing your data, and how long it will be kept.  

Right to object to processing 

When we process your Personal Data based on public or legitimate interest, you can object to it. You have the right to object to direct marketing at any time.  

Right to access your data 

You can find out if we process your Personal Data, get details about the processing, and a copy of your Personal Data. 

Right to rectify your data 

You have the right to ensure that your Personal Data is accurate and to request corrections if necessary. 

Right to restrict the processing of your data 

You have the right, under certain circumstances, to restrict the processing of your Personal Data. In this case, we will not process the Personal Data for any purpose other than storing it. 

Right to have your data erased or otherwise removed 

You have the right, under certain circumstances, to obtain the erasure of your Personal Data.  

Right to portability of Your data 

You can receive your Personal Data in a structured, machine-readable format and, if possible, have it sent to another controller. This right applies when your Personal Data is processed automatically, based on your consent, a contract, or pre-contractual obligations. 

Right not to be subject to profiling and automated decision-making 

You have the right not to be subjected to solely automated decision-making processes, including profiling, that significantly affect you. This means that important decisions, such as those related to your rights, benefits, or legal matters, should not be made solely by automated systems without human intervention. This right safeguards against unfair or discriminatory automated decisions. 

Right to lodge a complaint 

You have the right to bring a claim before the Romanian Supervisory Authority (National Authority for the Supervision of Personal Data Processing - https://www.dataprotection.ro/) or directly to the court. 

Personal Data 

Any information about you, such as your name or other identifying information that can directly or indirectly identify you. 

Data Controller 

As the Data Controller, we determine how and why data is processed, and we ensure data protection compliance. Additionally, when we act as a Data Processor on behalf of our B2B clients, they become the Data Controllers, and we assist them in managing and processing the personal data of their enrolled users according to their instructions and in compliance with applicable data protection laws and regulations. 

Data Processor 

Assists us as a Data Controller in managing and taking care of your personal data. They follow our instructions and make sure your data is securely processed. 

Additionally, when we act as a Data Processor on behalf of our B2B clients, we assist them in managing and processing the personal data of their enrolled users according to their instructions and in compliance with applicable data protection laws and regulations. 

Data Processing Agreement 

A legally binding contract that outlines the terms and conditions under which we, as the data processor, handle and process personal data on behalf of our B2B clients, who act as the data controller. 

Data Processed 

The specific personal data we collect, use, or otherwise process according to this Privacy Policy. 

Data Processing 

The actions performed on personal data, including but not limited to collection, storage, organisation, alteration, use, disclosure, or erasure. 

Data Protection Officer (DPO) 

Our appointed person responsible for overseeing data protection compliance within our company, acting as a point of contact for personal data-related inquiries. 

Data Subject 

An individual whose personal data is being processed. This term often refers to you, our Website User, Client, and User. 

Data Subject Rights 

Your legal rights regarding your personal data, including the right to access, rectify, erase, restrict processing, object to processing, and data portability. 

Consent 

Your voluntary and informed agreement for us to process your data for specific purposes, obtained through clear and transparent means. 

Opt-In/Opt-Out 

The act of choosing to agree (opt-in) or disagree (opt-out) with specific data processing activities, such as subscribing or unsubscribing to our newsletters, or for cookies and tracking technologies. 

Cookies 

Small pieces of data stored on your device to enhance your web browsing experience, including tracking preferences and user behaviour for various purposes.  

Geographic Position 

Information about the approximate location of a user, such as their country and city, often collected with user consent for location-based services. 

Purposes 

Specific and transparent reasons for processing personal data, outlined in this Privacy Policy or provided to you when obtaining your consent. 

Legal Basis  

The lawful justification for processing personal data, ensuring that processing aligns with applicable data protection laws. 

Legal Obligation 

Processing personal data due to applicable laws, regulations, or legal obligations. 

Legitimate Interests 

One of the legal bases for processing personal data indicating that we have valid reasons for data processing that don't compromise your rights or interests. 

International Data Transfers 

The process of sharing data across borders outside the Economic European Area ("EEA"), which may require specific safeguards to ensure data protection. 

Adequacy Decisions 

Official approvals indicating that certain countries outside the EEA provide an adequate level of data protection, allowing for data transfers without additional safeguards. 

Standard Contractual Clauses 

Legally binding agreements established to ensure data protection when personal data is transferred outside the EEA to entities that may not have equivalent data protection laws. 

Retention of Your Data 

Storing or using your data for specific periods during which we store or use your data for specific purposes, in compliance with legal and regulatory requirements. 

Profiling 

Automated data processing for the purpose of analysing and predicting behaviour, preferences, or interests, often used to personalise user experiences, perform risk assessments, or for analytics. 

Automated Decision-Making 

Decisions made solely by machines or automated systems, without human intervention, which may impact individuals' rights and freedoms. 

Due Diligence 

The process of conducting research and assessments to evaluate the suitability and credibility of potential business partners, ensuring they align with our business objectives and standards. 

Security Measures 

Proactive actions and safeguards taken to protect your data from unauthorised access, disclosure, alteration, loss, or destruction. 

Access Controls 

Mechanisms and policies in place to manage and control who has access to specific data, limiting access to authorised individuals. 

Data Minimisation 

The practice of collecting only the data that is necessary for the specified purposes of processing, minimising the amount of personal data collected. 

Data Encryption 

The process of converting data into code or cipher to protect its confidentiality and integrity during transmission and storage. 

Privacy by Design and Default 

Making privacy a priority during its processing. An approach that incorporates data protection and privacy considerations into the design and operation of systems and processes by default.