DATA SUBJECT RIGHTS POLICY

Last updated: Wednesday, Friday, August 31, 2018

Avanquest Software SAS. (“Company” or “we”) values the privacy rights of our customers, partners, suppliers, vendors and others; as required by the EU General Data Protection Regulation (“GDPR”), European Union residents are permitted to make certain requests regarding our processing of personal data. This Data Subject Rights Policy (“Policy”) shall provide you with a summary of the rights you have when we process your personal data. We recommend you review this Policy and if you decide to submit a request please do so through our online form available hereinbelow.

The right to basic information

Data subjects have the right to understand who the Company and its affiliates are, and why and how it or they process personal data. The right to basic information includes, but is not limited to, the right to know the identity of the data controller, the reasons and grounds for processing personal data, and any other information necessary to ensure the fair and transparent processing of personal data. This information is also available to you at: https://www.avanquest.com/legal/privacy-policy/

The right of access (“Subject Access”)

Data subjects have a right to obtain confirmation from the Company that it processes certain personal data related to a data subject and a right to obtain a copy of that information, along with other details about how and why the Company uses the data subject’s information. Once the veracity and appropriateness of an access request is affirmatively determined by the Company, we will, within the period required by the law, provide you with, among other information, a description of the personal data and categories of data processed, the purpose for which such data is being held and processed, and details about the source of the personal data if not provided by the data subject.

The right of rectification

The Company must ensure that all personal data that it holds and uses about a data subject is correct. If such data is not accurate, a data subject has the right to require that the Company updates such data so it is accurate. In addition, if the Company has passed on incorrect information about a data subject to a third party, the data subject also has a right to oblige the Company to inform those third parties that this information should be updated.

The right of erasure (“right to be forgotten”)

Data subjects have a right to require the Company to erase certain personal data if particular conditions are satisfied. The Company is legally obligated to comply with a request to delete personal data if: the data is no longer needed for the original purpose and no new lawful purpose exists for continued processing; the lawful basis for processing is consent of the data subject and such consent is withdrawn; the data subject exercises his or her right to object to the Company’s processing of his or her personal data, and the Company has no overriding grounds for processing the data; the personal data is processed unlawfully; or erasure of the data is necessary to comply with applicable laws. In addition, if the Company has passed on personal data to a third party, a data subject also has a right to oblige the Company to tell those third parties that the information should be erased. The right to erasure is not absolute. Even if a data subject falls into one of the categories described above, the Company is entitled to reject the data subject’s request and continue processing data if such processing is: necessary to comply with legal obligations; necessary to establish, exercise or defend legal claims; or is necessary for scientific research, etc. – all subject to applicable laws.

The right to object

In the event the Company processes personal data on the basis that it is in its legitimate interests to do so (i.e., direct marketing), a data subject has the right to object to our processing on such grounds. Notwithstanding the receipt of such an objection, the Company shall be permitted to continue processing a data subject’s personal data if: the Company has compelling legitimate grounds for processing the information which overrides the rights, interests and freedoms of the data subject; the data is necessary to establish, exercise or defend a legal claim or right, etc. – all subject to applicable laws and regulations.

The right of restriction

A data subject may limit the purposes for which the Company may process its personal data. The Company’s processing activities may be restricted if: the accuracy of the data is contested; processing is unlawful and data subject requests restriction instead of erasure; the Company no longer needs the data for its original purpose, but the data is still required to establish, exercise or defend legal rights; or consideration of overriding grounds in the context of an erasure request.

The right of data portability

A data subject can request that the Company send or “port” its personal data to another entity. Portability rights only apply if the data in question was provided by the data subject to the Company, processed automatically, and is processed on the legal basis of either consent or fulfillment of a contract.

The right to object to direct marketing

If the Company sends you marketing communications by email or other electronic methods, a data subject has the right to require the Company to stop sending such communications.

USER RIGHT FORM

Avanquest Software values the privacy rights of our customers, partners, suppliers, vendors and others. As required by the EU General Data Protection Regulation (“GDPR”), European Union residents are permitted to make certain requests regarding our processing of personal data. In order to submit a data subject request pursuant to the GDPR, please send your request to this email address dpo@avanquest.com. Upon receipt of your completed request, we will process it and respond within the timelines required by the law. If additional information is necessary, we will contact you using the contact information you provided. Information provided in connection with this request will be processed only for the purpose of processing and responding to your request and will be deleted immediately thereafter, In order to confirm that you really own the account you wish ro delete, we’ll be sending a verification email to the email address linked to that account, if we have no answer from that email address we won’t be able to proceed with the deletion. For more information please review our privacy policy and user right policy.

If you’re a non-EU resident and if you have questions or inquiries about your personal data, please send an email to dpo@avanquest.com with details about your request.