{"id":9557,"date":"2021-06-08T14:59:46","date_gmt":"2021-06-08T11:59:46","guid":{"rendered":"https:\/\/snov.io\/knowledgebase\/?p=9557"},"modified":"2024-09-19T14:45:42","modified_gmt":"2024-09-19T11:45:42","slug":"gdpr-faq-for-third-party-data-subjects","status":"publish","type":"post","link":"https:\/\/snov.io\/knowledgebase\/gdpr-faq-for-third-party-data-subjects\/","title":{"rendered":"GDPR FAQ (for third-party data subjects)"},"content":{"rendered":"<h2><b>How long do we process your personal data?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">We process your personal data either as a joint data controller with our clients or as a data processor on behalf of and under the directions of our clients.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">When we act as a data controller jointly, we store your personal data for the entire period the particular client uses our services and 3 months following the termination of their account on our platform.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In some cases, two or more clients provide your data to us simultaneously. In such a case, we store your personal data during the entire period during which one of such clients uses our services and 3 months thereafter.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">When we act as a data processor, we process your personal data only for the period of time specified by the client.<\/span><\/p>\n<h2><b>What is the legal basis for your personal data processing?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">When we act as a joint data controller with a client, we process your personal data on the basis of our, the clients\u2019, and your legitimate interests. These interests are specified in our <\/span><a href=\"https:\/\/snov.io\/privacy-policy\"><span style=\"font-weight: 400;\">Privacy Policy<\/span><\/a><span style=\"font-weight: 400;\">.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">When we act as a data processor, we process your personal data only on the \u0441lients\u2019 behalf and due to their directions. In this case, we process your personal data on the basis of either our, the clients\u2019, and your legitimate interests or duty to perform a contract with the clients.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">We also urge our clients to ensure the presence of the legal grounds for your personal data processing under the GDPR and believe that clients have the rights to provide your personal data to us.<\/span><\/p>\n<h2><b>What rights do you have under the GDPR?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">You have all the rights provided under the GDPR. These include:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">r<\/span><span style=\"font-weight: 400;\">ight to access<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">right to rectification<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">right to erasure (\u201cright to be forgotten\u201d)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">right to restriction of processing<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">right to be informed<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">right to data portability<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">right to object<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">right to withdraw the consent<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">right not to be subject to a decision based solely on automated processing<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">right to lodge a complaint with the supervisory data protection authority<\/span><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">You may exercise any of your rights by contacting us at help@snov.io or via live chat in the lower right corner.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Please make sure to provide your name, contact information, personal data processed and details for the reason\/justification of your request.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">When we are unable to solely fulfill your request without the involvement of a data controller, we will promptly direct your request to a data controller and assist the data controller in fulfillment of your request the best we can by providing necessary information and performing requested technical and organisational measures.<\/span><\/p>\n<h2><b>Can you request to provide you with a copy of your personal data?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Yes, you can.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">You may request to provide the following information:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">access to your personal data<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the copy of your personal data<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the purposes of the processing<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the categories of personal data concerned<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the recipients of the personal data, if any<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the retention period (or the criteria used to determine such period)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the source from where the personal data were obtained<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">your rights regarding your personal data<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Before fulfilling your request, we have to confirm your identity. That means we may request additional information to confirm the identity if required.<\/span><\/p>\n<h2><b>Can you delete your data?\u00a0<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Yes, you can.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">You may request us to delete (\u2018erase\u2019) your personal data that we process as a joint data controller at any time by contacting us at <\/span><a href=\"mailto:help@snov.io\"><span style=\"font-weight: 400;\">help@snov.io<\/span><\/a><span style=\"font-weight: 400;\"> or via live chat on the website.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">We will fulfill your request to deletion without undue delay where one of the following grounds applies:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">your personal data is no longer necessary for the purpose for which it was collected<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">there is no legal ground for processing<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">you object to the processing of your personal data<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">your personal data has been unlawfully processed\u00a0\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">your personal data has to be erased for compliance reasons, i.e. to meet our legal obligations<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">where the personal data was relevant to you as a child<\/span><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">Where we act as a data processor regarding your personal data, after we receive your request to delete your personal data we will promptly direct it to the data controller who is solely responsible for its fulfillment.\u00a0<\/span><\/p>\n<h2><b>How does Snov.io comply with articles 13 and 14 of the GDPR?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Articles <\/span><a href=\"https:\/\/gdprhub.eu\/index.php?title=Article_13_GDPR\" rel=\"nofollow\"><span style=\"font-weight: 400;\">13<\/span><\/a><span style=\"font-weight: 400;\"> and <\/span><a href=\"https:\/\/gdprhub.eu\/index.php?title=Article_14_GDPR\" rel=\"nofollow\"><span style=\"font-weight: 400;\">14<\/span><\/a><span style=\"font-weight: 400;\"> of the GDPR oblige the data controller to provide certain information to the data subjects.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">At the same time, <\/span><a href=\"https:\/\/gdprhub.eu\/index.php?title=Article_26_GDPR\" rel=\"nofollow\"><span style=\"font-weight: 400;\">Article 26<\/span><\/a><span style=\"font-weight: 400;\"> of the GDPR provides that where personal data is processed by joint controllers, they have to determine their <\/span><span style=\"font-weight: 400;\">responsibilities for compliance with obligations under<\/span><span style=\"font-weight: 400;\"> the GDPR themselves.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Under our Joint Controllership Agreement concluded with each our client, our and clients\u2019 responsibilities are divided as follows:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">we are responsible for the technical and organizational security of your personal data<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">clients are responsible for informing you regarding the processing of your personal data\u00a0\u00a0<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">When we act as a data processor, it is the responsibility of the respective data controller to provide you with the respective information under the Articles 13 and 14 of the GDPR.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">You can find all information regarding your personal data processing in our <\/span><a href=\"https:\/\/snov.io\/privacy-policy\"><span style=\"font-weight: 400;\">Privacy Policy<\/span><\/a><span style=\"font-weight: 400;\">, <\/span><a href=\"https:\/\/snov.io\/cookie-policy\"><span style=\"font-weight: 400;\">Cookies Policy<\/span><\/a><span style=\"font-weight: 400;\">, <\/span><a href=\"https:\/\/snov.io\/joint-controllership-agreement\"><span style=\"font-weight: 400;\">Joint Controllership Agreement<\/span><\/a><span style=\"font-weight: 400;\">, and other articles of our <\/span><a href=\"https:\/\/snov.io\/knowledgebase\/gdpr\/\"><span style=\"font-weight: 400;\">Knowledgebase<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In some cases, our data processing activities fall under Brazilian data protection laws. If you want to find out how Snov.io complies with the LGPD, click <a href=\"https:\/\/snov.io\/knowledgebase\/lgpd-faq-for-snov-io-users-and-clients\/\">here<\/a>.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>How long do we process your personal data? We process your personal data either as a joint data controller with our clients or as a data processor on behalf of and under the directions of our clients.\u00a0 When we act as a data controller jointly, we store your personal data for the entire period the [&hellip;]<\/p>\n","protected":false},"author":8,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[620],"tags":[],"_links":{"self":[{"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/posts\/9557"}],"collection":[{"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/comments?post=9557"}],"version-history":[{"count":0,"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/posts\/9557\/revisions"}],"wp:attachment":[{"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/media?parent=9557"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/categories?post=9557"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/tags?post=9557"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}