GDPR

Last Revised: 12 February, 2019
Effective Date: 17 February, 2019

The General Data Protection Regulation, or “GDPR”, is a comprehensive privacy regulation that sets forth the rules for processing the personal data of individuals in the EU (“data subjects”) and the rights of data subjects with respect to their Personal Data.

GDPR applies if you are an individual in the EU (for these purposes, reference to the EU also includes the European Economic Area countries of Iceland, Liechtenstein and Norway and, to the extent applicable, Switzerland).

Your Data Subject Rights

If GDPR applies to you, you have the following rights (summarized) in relation to your Personal Data:

• right to request information about personal data being processed and the rationale for such processing;
• right to rectification of personal data without undue delay;
• right to erasure of personal data without any undue delay, except where processing is necessary for legal purpose and public interest;
• right to restrict processing or to object to processing;
• right to data portability, where technically feasible;
• right to lodge a complaint with a supervisory authority;
• right to access (or obtain from us a confirmation if your personal data is being processed by us) the purpose of processing, recipients of your personal data;

Sortd’s Commitment and Compliance

We have undertaken the following actions in connection with GDPR compliance:

• Reviewing our marketing practices to ensure we are communicating with prospects, users and subscribers in a manner that respects their rights under GDPR;
• Reviewing our security practices to ensure that the personal data we process on behalf of our users, through their use of our services, is adequately protected;
• Modifying our Services to ensure compliance with GDPR requirements for processing personal data;
• Training employees on GDPR requirements and privacy/security best practices generally;
• Updating product design processes to ensure we are building products with privacy principles in mind;
• Making sure our data deletion practices comply with GDPR’s right of erasure requirement;
• Reviewing our vendors and third parties commitment and compliance to GDPR security obligations and privacy requirements;
• Updating our Privacy Policies to keep our website visitors and users informed of how we may collect and use their Personal Data;

Contact Us

If you would like to obtain more information on your rights and or would like to exercise one of these rights, please send a request to privacy@sortd.com with the following information:

• Your full name,
• Your email address used to access Sortd, and
• What you would like to know or request (a copy of your Personal Data, to amend your Personal Data or to permanently delete your Personal Data).