Data Protection

Risely is committed to protecting the privacy of personal information and to compliance with data protection laws. This page explains how we protect the personal and sensitive information that we collect and process as part of delivering our services.

What personal data means

Personal data refers to any data that relates to an identified or identifiable individual. In practice, personal data includes anything that can be assigned to an individual in any way. Examples include a telephone number, credit card number or identification number, account data, appearance, customer number, or address. This policy sets out how we secure the processing of personal data that we collect, directly or indirectly, from the customers and users of Risely’s services.

Principles for processing personal data

We incorporate the following principles of data protection in the way we collect and store personal data. We ensure that the data we collect is:

• Processed lawfully, fairly, and in a transparent manner.
• Collected for specific, explicit, legitimate, and limited purposes.
• Adequate, relevant, and limited to what is necessary.
• Accurate and, where necessary, kept up to date.
• Kept in an identifiable form for no longer than is necessary.
• Processed in a manner that ensures appropriate security.

Security of personal data

We use appropriate technical and organizational measures to protect the personal data we collect and process. These measures are designed to provide a level of security appropriate to the risk of the personal data that we process.

Depending on requirements arising from business commitments or regulations, the following advanced technical solutions may be considered to provide an additional layer of protection:

• Data Leak Prevention (DLP) tools: to monitor and restrict data flow from potential endpoints to unauthorized systems.
• Data Masking: to restrict the ability to read sensitive data within the organization and to help protect it from external parties.

Data subject rights

We adhere to the data subject rights listed below. Requests from data subjects exercising these rights are acknowledged and fulfilled within one month of receipt:

• Right to be informed: the right to know how personal data is used, in clear and transparent language.
• Right of access: the right to know and have access to the personal data held about an individual.
• Right to data portability: the right to receive and transfer data in a common and machine-readable electronic format.
• Right to be forgotten: the right to have personal data erased.
• Right to rectification: the right to have data corrected where it is inaccurate or incomplete.
• Right to object: the right to complain and to object to processing.
• Right to restriction of processing: the right to limit the extent of the processing of personal data according to an individual’s wishes.
• Rights related to automated decision-making and profiling: the right not to be subject to decisions without human involvement.
• Right to non-discrimination: the right not to be discriminated against for exercising these rights.

Training

We provide data protection training to the members of our team who have constant or frequent access to personal data, who are involved in the collection of data, or who develop the tools used to process personal data. This training covers the content and handling of this policy.

Our role as a data processor

Where Risely processes personal data on behalf of customer organizations, Risely acts as a data processor:

• Personal data is processed only on the customer’s documented instructions.
• Sub-processors are engaged only with appropriate data protection terms in place.
• We assist customers in fulfilling their obligations regarding data subject rights and breach notification.

Where personal data is transferred across borders, Risely relies on appropriate safeguards such as Standard Contractual Clauses, and the UK Addendum where applicable.

Questions

If you have any questions about this policy or wish to exercise a data subject right, contact us at [email protected].