Política de privacidade

Legal Basis for Processing

O artigo 6 (1) (a) do GDPR serve como base legal para operações de processamento para as quais o XAppset obtém consentimento para uma finalidade específica. Se o processamento de Informações Pessoais for necessário para a execução de um contrato do qual Você é parte, como é o caso, por exemplo, quando as operações de processamento são necessárias para um determinado Produto, o processamento é baseado no Art. 6(1)(b). O mesmo se aplica às operações de tratamento que sejam necessárias para a execução de medidas pré-contratuais, por exemplo, no caso de inquéritos ou análises de funcionalidades relativas a Produtos ou serviços do XAppset. Se o XAppset estiver sujeito a uma obrigação legal pela qual o processamento de Informações Pessoais seja necessário, como para o cumprimento de obrigações fiscais, o processamento será baseado no Art. 6(1)(c). Se o processamento de Informações Pessoais for necessário para proteger os seus interesses vitais ou os de outro Indivíduo Qualificado, então o processamento é baseado no Art. 6(1)(d). Finalmente, as operações de processamento podem ser baseadas no Artigo 6 (1) (f) se o processamento for necessário para os fins dos interesses legítimos perseguidos pelo XAppset ou por terceiros, exceto quando esses interesses forem proibidos ou substituídos por Seus direitos e liberdades fundamentais sob o GDPR.

GDPR Rights:

I. Right of Confirmation

You may obtain confirmation of whether or not Your Personal Information is being processed. If You wish to exercise Your right of confirmation, You may contact XAppset using the contact information as provided in Section G, below.

II. Right of Access

You may obtain information about Your stored Personal Information at any time and a copy of this information. If You wish to exercise Your right of access, You may contact XAppset using the contact information as provided in Section G, below.

III. Right to Rectification

You may request the rectification of any inaccurate Personal Information. Taking into account the purposes of the processing, You have the right to have inaccurate or incomplete Personal Information completed or deleted, by means of first appropriately identifying Yourself and then providing a supplementary statement. If You wish to exercise Your right of rectification please may contact XAppset in accordance with Section G, below.

IV. Right to Erasure (Right to be Forgotten)

You may request the erasure of Your Personal Information by contacting XAppset using the contact information provided in Section G, hereof. Furthermore, You may delete Your User Account information, as applicable, by accessing Your User Account settings page on the Website or within the Product(s). Please note that while any changes You make will be reflected in active user databases within a reasonable time, XAppset may retain all information You submit for the prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where XAppset otherwise reasonably believes that it has a legitimate reason to do so, such as for archiving purposes within the public interest.

V. Right to Restriction of Processing

As a Qualified Individual, You have the right to restrict processing where one of the following applies:

• The accuracy of the Personal Information is contested by the data subject, for a period enabling the controller to verify the accuracy of the Personal Information;
• The processing is unlawful and the data subject opposes the erasure of the Personal Information and requests instead the restriction of the controllers use of such data;
• The controller no longer needs the Personal Information for the purposes of processing, but it is required by the data subject for the establishment, exercise, or defense of legal claims; or
• The data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.

VI. Right to Data Portability

You may request to receive Your Personal Information in a structured, commonly used and machine-readable format. You have the right to transmit this data to another controller without interference.

Furthermore, You may have the Personal Information transmitted directly from one controller to another, where technically feasible and where such transmission does not adversely affect the rights and freedoms of others.

VII. Right to Object and Automated Decision-Making

You may object to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects You, as long as the decision is not (i) necessary for entering into, or the performance of, a contract between You and XAppset; (ii) authorized by EU or Member State law to which You are subject; or (iii) based on the data subject’s explicit consent.

VIII. Right to Object to Processing

You may object to the processing of Your Personal Information using the contact information provided in Section G below, unless there are legitimate grounds for the processing within the public interest, or for the establishment, exercise, or defense of legal claims.

If XAppset processes Personal Information for direct marketing purposes, You shall have the right to object at any time to the processing of Your Personal Information for such purposes. This right also applies to profiling to the extent that the processing is related to such direct marketing purposes. If You object to XAppset processing Your Personal Information for direct marketing purposes, then XAppset will no longer process the Personal Information for such purposes.

Retention Policy

XAppset only retains personally identifiable information about You for as long as Your User Account remains active and for as long as it needs to provide You with Products or otherwise fulfill the purposes for which XAppset had initially collected such information, unless otherwise required by law. XAppset will retain and use information as necessary to comply with its legal obligations, for archival purposes, to assist in the resolve of disputes, and to enforce its agreements.

Cross-Border Data Transfers

If and when sharing of information involves cross-border data transfers, for instance to the U.S. from an EU Member State, XAppset uses data contracts with EU standard contract clauses or other suitable data clauses and safeguards to permit data transfers from the EU to other countries. These standard contractual clauses commit companies transferring and receiving Your Personal Information to protecting the privacy and security of Your data. Copies of XAppset’s current standard contractual clauses may be available on request using the contact details listed below.