Terms & Conditions for Data Subject Rights

At Datacultr, we are committed to maintaining compliance with data protection laws and ensuring that the rights of data subjects are respected in the handling of their personal data. The following outlines the terms and conditions related to data subject rights, specifically for employees, vendors, and clients.

1. Our Role as a Sub-Processor

We act as a sub-processor for the majority of data shared with us, including data such as device identifiers and other information provided to us through our services. As a sub-processor, we do not own the data; rather, we process it on behalf of our clients, who are the data controllers. We only process data according to the instructions provided by our clients, and we adhere to strict contractual agreements to ensure compliance with applicable data protection regulations.

2. Employee, Vendor, and Client Data

For employee, vendor, and client data, we act as a data controller and process this information for the purposes of business operations, including employment, vendor management, and client engagement.

3. Data Subject Rights

Data subject rights under the applicable data protection laws are available to employees, vendors, and clients of Datacultr. These rights can only be exercised if there is no ongoing engagement between the data subject and Datacultr. This means that data subject rights may not be applicable during the period in which an employee is employed, a vendor is contracted, or a client is actively using our services.

The rights of data subjects under applicable law include:

• Right to Access: Employees, vendors, and clients have the right to request access to their personal data held by Datacultr. However, this right can only be exercised if there is no active employment, vendor relationship, or client engagement. Access requests will be processed within the legal timeframes.
• Right to Rectification: If any personal data held by Datacultr is inaccurate or incomplete, employees, vendors, and clients may request corrections. This right applies only if there is no ongoing relationship or engagement.
• Right to Erasure: Individuals can request the deletion of their personal data, subject to legal obligations or other legitimate reasons for retention. This request can only be made if there is no ongoing relationship with Datacultr.
• Right to Restriction of Processing: Employees, vendors, and clients may request the restriction of processing of their personal data under certain circumstances, such as if the data is contested. This right can only be exercised if there is no ongoing relationship or engagement.
• Right to Data Portability: If an individual wishes to transfer their data to another data controller, they may request a copy of their personal data in a machine-readable format, provided there is no active relationship with Datacultr.
• Right to Object: Employees, vendors, and clients can object to certain types of data processing, including for direct marketing purposes, provided there is no ongoing engagement.
• Right to Withdraw Consent: If Datacultr processes personal data based on consent, employees, vendors, and clients have the right to withdraw that consent. This can only be done if there is no ongoing engagement or contractual relationship.

4. How to Exercise Your Rights

To exercise any of the above rights, please contact Datacultr using the information provided in the Contact Us section below. Since we process personal data as a sub-processor for most of our clients, some requests related to data subject rights should be directed to the data controller (i.e., the client or employer) for further action.

We will work with our clients to facilitate the exercise of data subject rights when appropriate.

5. Data Security and Confidentiality

We prioritize the security of the personal data we process. We have implemented technical and organizational measures to protect data from unauthorized access, disclosure, and loss. As a sub-processor, we process data in accordance with the instructions given by the data controller and maintain strict security protocols.

6. Changes to This Policy

Datacultr may update these terms and conditions regarding data subject rights from time to time in response to legal or operational changes. Any updates will be posted on our website, and we encourage you to review this policy periodically to stay informed about how we handle personal data.