GDPR Privacy Rights
If you are a resident of one of many European countries, including the United Kingdom and Switzerland, an important European privacy law (or an equivalent counterpart to it) the General Data Privacy Regulation (the “GDPR”) provides you with certain rights, and places certain obligations on companies regarding how your “personal data” (as the GDPR uses that term) is used. We describe those rights and obligations below, and how and in what circumstances we honor them.
We set out our compliance with the GDPR and, to the extent applicable, those other laws, in this section.
Legal Basis
The GDPR requires us to tell you about the legal ground we’re relying on to process any personal data about you. The legal grounds for us processing your personal data for the purposes set out in Section IV above will typically be because:
You provided your (legally sufficient) consent;
It is necessary for our contractual relationship, e.g., in order to provide you services or features you’ve requested and we’ve promised;
The processing is necessary for us to comply with our legal or regulatory obligations – for instance, to communicate with you about or to help honor your legal rights; and/or
The processing is in our legitimate interest. For instance, we may process and share business data collected from our website for our own internal marketing purposes, or other information for purposes of security, data hygiene or validation, in a manner that constitutes a “legitimate interest”.
Your Data Subject Rights
Right to Rectify, Delete, Restrict or Object to the Processing
Your rights to deletion or revocation of consent (sometimes referred to as a right to be forgotten, to restrict processing, or to otherwise object to processing). You have the right to request that we delete your personal data (or where applicable, withdraw your prior consent to our processing of your data). You may also request that we correct or rectify your personal data if it is inaccurate, incomplete or false.
If you request that we delete your personal data, or withdraw your consent, we will customarily retain a copy of your data sufficient to suppress it from our active databases in the future: but if that is not what you wish, you may indicate that to us (in which case your information may be added to our database later, because we will not have “suppressed” it).
Moreover, when we delete your personal data, we may retain it (to the extent legally permissible) for certain important (but narrow) internal purposes such as legal, compliance, accounting or auditing purposes, and in some cases, for security purposes.
Personalized Online Advertising Opt-Outs
You may object to profiling by online advertising platforms with whom we sometimes partner to help generate (and measure or analyze) “personalized” online advertising. These platforms are generally separate third party “controllers” of your data.
You may unsubscribe from marketing and other communications that we may send (on behalf of ourselves or others) by clicking the “opt-out” or “unsubscribe” link in the footer of those emails.
Your Right to Access
In some jurisdictions, you may have the right to request access to a copy of your personal data. When you request access to your personal data, we are required — for privacy and other important compliance reasons — to verify your identity in a legally sufficient manner: if we cannot do so, we will not be able to satisfy your access request.
Please note that as part of the verification process, we may not be able to sufficiently “verify” your identity in a manner sufficient to safeguard against the potential adverse privacy effects on disclosure of personal data to the wrong individual (or a person who is purposefully seeking the information of another). Because such improper disclosure would likely adversely affect the privacy rights and freedoms of a relevant data subject/consumer, we limit certain personal data we make available.
Questions or Concerns
If you have a complaint or concern or question about how we handle your personal data, please contact us as at the above contact addresses, and we will seek to address any concerns you may have. If you are not happy with how we have attempted to resolve your complaint, you may contact the relevant data protection authority.
When We are a Processor
EU data protection law (and certain other data protection laws) makes a distinction between organizations that process personal data for their own purposes (known as “data controllers”) and organizations that process personal data on behalf of other organizations (known as “data processors”). We sometimes act as data controller (for instance, when we make decisions about the data that comprises our own datasets) and most of the times act as a processor (for instance, if we process the personal data of guests/tenant/renters of our Client, such as to collect, store, analyze or use it solely for our Client’s benefit and at their direction as part of the Services we provide. We generally are only able to help data subjects exercise their rights as to the personal data we are a data controller of. If you have a question or request as to data we’re a processor of, you should generally address that to the relevant data controller.
Exercising Your Rights
This provides for instructions on how you can exercise your rights under applicable Data Privacy Laws.
How to Exercise Your Rights
To submit a request to access, rectify, delete, port your personal data you can submit a request to via email at: privacy@razzinteractive.com
Note in the body of the email the specific right you want to exercise. In the subject line, include “<Your State/Country> Consumer Request”.
To protect the privacy and security of your personal information, we will attempt to verify your identity before acting on your request. Your request must include details sufficient for us to properly understand, evaluate, and respond to the request.
Please also note that as part of the verification process, we’re required to consider:
(a) the difficulty of verifying whether data that we hold and data we have linked to it truly and solely belongs to the data subject making the request, along with; and
(b) the potential adverse effects on disclosure of personal data to the wrong individual (or a person who is purposefully seeking the information of another) because such improper disclosure would likely adversely affect the privacy rights and freedoms of the relevant data subject/consumer, we limit certain personal data we make available.
Use of an Authorized Agent
An agent legally authorized to act on your behalf—may make a verifiable request related to your personal information. If you are making a request through an authorized agent, you must provide the authorized agent with written permission to do so, and a power of attorney that fulfills the requirements of the Data Privacy Laws. We may request more information from the authorized agent (or from you) if needed to verify the authorized agent’s identity or to avoid any breach of security or instances of fraud.
Minors
We do not knowingly collect personal information of minors (minority age depends on the applicable Privacy Laws) under the age of 13, nor are our Sites or Services developed for, offered to, or directed at children under the age of 13. If you believe that we have collected information of a child under the age of 13, please contact us and we will take appropriate action.
Razz as a Service Provider
Most of the time we act as a “Service Provider” to other companies, our Subscribers — for instance, when we help their businesses use their own customers’ information (e.g. Prospect/Applicant information) as we provide our Services to them. As to personal information that we hold as a “Service Provider,” you would generally need to reach out to the business (our Subscriber) or we will refer your request to them so they can act on your request to exercise your rights stated here.
