Additional Privacy Information for the European Economic Area, UK
Last Updated: January 9, 2023
Processing
We process your personal information on one or more of the following legal bases:
- As necessary to enter into a contract with you or a legal entity you represent, to perform our contractual obligations, to provide the Services, to respond to requests from you, or to provide customer support;
- Where we have a legitimate interest, as described in our Privacy Policy;
- As necessary to comply with relevant law and legal obligations, including to respond to lawful requests and orders; or
- With your consent.
For more information about the personal information that we collect, refer to our Privacy Policy, found here. Unless otherwise defined, all capitalized terms used in this Additional Privacy Information document will have the meanings given to them in the Privacy Policy.
Information We Retain
- We may need to keep certain information for an additional period of time for legal and legitimate business purposes. For example, we may retain personal information such as your contact information (e.g., name, email address, physical address), or record of purchases (for tax and accounting purposes). If applicable, Respondus may also retain records of communications with you, as well as relevant logs for dispute resolution purposes. We further may keep records for preventing fraud and ensuring security, for example in case of misuse of our services or violation of our terms.
- Where ‘consent’ is the basis for our lawful processing of your data, we will retain your data so long as both the purpose for which it was collected and your consent are still valid. We will review the status of your consent should the purpose for which the data was collected change and treat non-response to any requests for renewal of consent made by us as if they were your request to withdraw consent. Occasionally, we might identify a legitimate interest in retaining some of your personal data that has been obtained by consent. If we do, we will inform you that we intend to retain it under these conditions and identify the interest specifically.
Your Rights
Subject to applicable law, you have the right to:
- Ask whether we hold personal information about you and request copies of such personal information and information about how it is processed;
- Request that inaccurate personal information is corrected;
- Request deletion of personal information that is no longer necessary for the purposes underlying the processing, processed based on withdrawn consent, or processed in non-compliance with applicable legal requirements;
- Request us to restrict the processing of personal information where the processing is inappropriate;
- Object to the processing of personal information; and
- Request portability of personal information that you have provided to us (which does not include information derived from the collected information), where the processing of such personal information is based on consent or a contract with you and is carried out by automated means.
If you wish to do any of the things listed above or have a data-protection related question, please contact us at [email protected].
When you consent to our processing your personal information for a specified purpose, you may withdraw your consent at any time, and we will stop any further processing of your data for that purpose.
Cookies
Please refer to our Cookie Notice.
Transfers outside of the EEA/UK
When we transfer your personal information outside the EEA or the UK we do so in accordance with the terms of our Privacy Policy, this Additional Privacy Information document, our Data Processing Agreement and applicable data protection law.
Contact Us
If you have any questions, concerns or complaints about our Privacy Policy, our practices or our Services, you may contact our Data Privacy Officer by email at [email protected].
If you prefer, you can send correspondence to:
Respondus
Attn: Privacy Team
8201 164th Ave NE, Suite 200
Redmond, WA 98052
USA
If you are in the European Union or United Kingdom, you may address privacy-related inquiries to our EU / UK representative pursuant to Article 27 GDPR:
EU:
Writing to – EDPO at Spaces Rio, Calle Manzanares 4, 28005 Madrid, Spain
Online request form – http://edpo.com/gdpr-data-request/
UK:
Writing to – EDPO UK at 8 Northumberland Avenue, London WC2N 5BY, United Kingdom
Online request form – https://edpo.com/uk-gdpr-data-request/
We will respond to requests, inquiries or concerns within thirty (30) days, but probably much sooner than that. If you submit a Data Subject Access Request, we will respond according to the applicable data protection law.
You may also lodge a complaint with the data supervisory authority competent for your country or region, if you feel unsatisfied with our treatment of your personal data.