Xola is committed to you and the protection of your data. In addition to remaining compliant with relevant requirements, we consistently seek to engage in data protection and privacy best practices. We have put in place appropriate changes to ensure we are in compliance with the General Data Protection Regulation (GDPR). GDPR is a new EU-wide privacy and data protection law, effective May 25, 2018. This law protects European Union data subjects' right to privacy and the protection of personal data. Read on to learn more about what that means for you and your data.
Individual RightsIf you are a resident of the EEA or Switzerland, you are entitled to the following rights.
- The right to be forgotten — Individuals have the right to ask Xola to erase all personal data without undue delay in certain circumstances.
- The right to data portability — If an individual has provided personal data to a service provider, they can require the provider to ‘port’ the data to another provider, provided this is technically feasible.
- The right to object to profiling — Individuals can exercise this right to not be subject to a decision based solely on automated processing.
- The right to restrict or object to our processing — Individuals have the right to restrict the processing of their personal data where they have a particular reason for wanting the restriction.
International Data Transfers
The E.U.-U.S. Privacy Shield is a method of ensuring that an organization offers an adequate level of data protection, by requiring that an organization certify and register according to the Privacy Shield framework. We have previously, and will continue to self-certify under the E.U.-U.S. Privacy Shield, committing to appropriate data transfer mechanisms as required by GDPR. Xola's E.U.-U.S. Privacy Shield certification can be viewed here.
Additional Resources and Contact Information
Further information on GDPR specifically can be found at eugdpr.org.
If you would like to act of any of the above mentioned rights or have questions about Xola and GDPR, please write to firstname.lastname@example.org.