GENERAL DATA PROTECTION REGULATION (GDPR)

Since May 25, 2018, organizations established in the EU that process personal data about EU-based individuals have, in almost all cases, been required to follow the GDPR. The regulation modernizes and harmonizes personal-data processing across the European Union, introducing obligations for organizations and rights for individuals.

Our Committment

BrandBlasting is fully committed to meeting GDPR requirements. Our legal and policy specialists have examined the regulation and continue to follow implementation guidance and best practices. We have updated products, contracts, and policies to meet these requirements. BrandBlasting services comply with the GDPR as of May 25, 2018.

Worldwide Product Compliance

Our customers often work across several jurisdictions. To provide a consistent experience, BrandBlasting applies GDPR requirements throughout its platform and supports them worldwide. We believe consistent rules and program logic help customers meet their own GDPR obligations.

Your Rights Regarding Your Personal Information

We compile platform statistics into traffic reports to understand user needs and respond to them. For example, greater interest in a particular part of the BrandBlasting website may lead us to highlight it on the Platform home page. These insights help improve the overall experience for Platform users.

Right of Access:

You can request access to, and a copy of, the personal information BrandBlasting processes about you. We will provide the following information without charge: the purposes of processing; the categories of personal information; its recipients; how long it will be stored; your privacy rights; and information about data transfers. Send your request and relevant details to our Privacy Team. Please include enough information to identify the request.

Right of Rectification:

Contact our Privacy Team with the relevant details if you want to correct, update, or complete personal information we hold about you. We may also correct, supplement, or remove incomplete or inaccurate information at any time at our discretion.

Right of Erasure:

You may ask us to delete your personal information at any time. We will erase it when no overriding legitimate interest requires continued processing. Send the request to our Privacy Team with the details needed to identify your information.

Right of Restriction of Processing:

If you dispute the accuracy of your personal information, you may ask us to restrict its processing. Contact our Privacy Team and include all information relevant to your request.

Right to Data Portability:

You have the right to receive personal information in a structured, commonly used, machine-readable format. Contact our Privacy Team with the details needed to process your request.

Right to object to processing Data:

You may object to the processing of your data. Send the request and relevant details to our Privacy Team so we can review it.

These rights are not absolute and may be limited by our legitimate interests and applicable regulatory requirements.
If our response does not satisfy you, or you believe we collect or process your personal information unlawfully, you may complain to the relevant data protection authority.

Retention

BrandBlasting retains personal information for as long as needed to deliver services, meet legal obligations, settle disputes, and enforce policies. We determine retention periods by considering the information type, why it was collected, applicable requirements, and the need to destroy outdated or unused information as soon as reasonably possible.

You may request deletion as described above. Information fully removed from the BrandBlasting Database could be collected again later from public platforms or business partners. After fulfilling a deletion request, we will no longer have the contact record needed to recognize that later collection, so contact information may enter the Database again. We recommend checking your profile or the Services periodically to ensure they show only the information you want displayed.

Consent is one lawful basis for processing personal information about EU data subjects, but it is not the only basis permitted by the GDPR.
BrandBlasting relies on its legitimate interest in delivering services, helping users fight online fraud, and verifying and authenticating online identities.

The categories of recipients of the personal data

To deliver our service, we may share certain personal data with subscribing companies and individuals. We may also share it with the following types of recipients:

(i) BrandBlasting subsidiaries;

(ii) subcontractors and third-party providers, such as payment processors, advertisers, marketers, and hosting services;

(iii) auditors or advisers reviewing our business processes; and

(iv) prospective purchasers of, or investors in, BrandBlasting.

Transfer of Data to a Third Country

When personal data is transferred outside the EU or EEA, we use the legal mechanisms described in the GDPR, such as the Privacy Shield or transfers to territories the European Commission has recognized as providing an adequate level of protection.

Contact

For further questions about our privacy practices, email contactus@brandblasting.com.

Individuals in the EU may also address data-protection and privacy requests to our EU representative under Art. 27 GDPR: