EU GDPR.

Comversum applies data-protection principles to personal information processed through this website and, where the EU General Data Protection Regulation applies to a particular processing activity, handles that information in accordance with the applicable GDPR requirements.

Core principles

Personal information should be processed lawfully, fairly and transparently; collected for defined purposes; limited to what is necessary; kept accurate; retained only as long as needed; and protected with appropriate organisational and technical measures.

Transparency

The Privacy Policy explains the types of information handled by the public website, its purposes, cookies and preference controls, recipients and contact details.

Data-subject rights

Where the GDPR applies, individuals may have rights including access, rectification, erasure, restriction, data portability and objection, as well as the right to withdraw consent where processing relies on consent. Rights can be subject to statutory conditions and exceptions.

Processors and transfers

When service providers process personal data on behalf of Comversum, appropriate contractual and organisational safeguards should be used. If a processing activity involves an international transfer, the transfer must rely on an applicable legal mechanism and safeguards.

Security and privacy by design

Website features should be configured to limit unnecessary data collection, protect submitted information and give users meaningful control over optional services. Security measures are reviewed as the website and its providers change.

Requests

For a data-protection request, contact info@comversum.com and provide enough information to identify the relevant interaction without sending passwords or unnecessary sensitive data.