- Process”, “Processes”, “Processing”, or “Processed” means any operation which is performed on personal data, whether or not by automated means, such as collection, recording, structuring, storing, adapting, altering, retrieving, consulting, using, disclosing by transmission, erasing, destructing, disseminating, or otherwise making available.
EU-US AND SWISS-US PRIVACY SHIELD FRAMEWORK COMPLIANCE
Drawbridge complies with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework as set forth by the US Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries, the United Kingdom, and Switzerland transferred to the United States pursuant to Privacy Shield.
With respect to personal data received or transferred pursuant to the EU-US and/or Swiss-US Privacy Shield Frameworks, Drawbridge is subject to the regulatory enforcement powers of the Federal Trade Commission.
Pursuant to the Privacy Shield Frameworks, EU, UK, and Swiss individuals have the right to obtain our confirmation of whether we maintain personal information relating to you in the United States. Upon request, we will provide you with access to the personal information that we hold about you. You may also correct, amend, or delete the personal information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data transferred to the United States under Privacy Shield, should direct their query to email@example.com. If requested to remove data, we will respond within a reasonable time frame.
We will provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal information, please submit a written request to firstname.lastname@example.org
In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Drawbridge's accountability for personal data that it receives in the United States under the Privacy Shield and subsequently transfers to a third party is described in the Privacy Shield Principles. In particular, Drawbridge remains responsible and liable under the Privacy Shield Principles if third-party agents that it engages to process personal data on its behalf do so in a manner inconsistent with the Principles unless Drawbridge proves that it is not responsible for the event giving rise to the damage.
In compliance with the Privacy Shield Principles, Drawbridge commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to Privacy Shield. European Union, United Kingdom, and Swiss individuals with Privacy Shield inquiries or complaints should first contact Drawbridge at:
Three Stamford Landing
46 Southfield Avenue | Suite 450
Stamford, CT 06902
email@example.com or filling out the contact us form located at Contact Us Drawbridge has further committed to refer unresolved privacy complaints under the Privacy Shield Principles to an independent dispute resolution mechanism, the BBB EU PRIVACY SHIELD. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbb.org/EU-privacy-shield/for-eu-consumers for more information and to file a complaint. This service is provided free of charge to you.
If your Privacy Shield complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See Privacy Shield Annex 1 at https://www.privacyshield.gov/article?id=ANNEX-I-introduction.
TYPES OF PERSONAL DATA COLLECTED
Drawbridge may collect the following categories of personal data:
- Full Name
- Title or Position
- Mailing Address
- Email Address
- Telephone Number
- Business Contact Information
- Username and Password
- Any other personal data you provide Drawbridge access to via our portals, website, email, or any other means of communication
LEGAL BASIS FOR PROCESSING
Drawbridge only collects personal data from you or about you that is reasonably necessary for us to provide the applicable products or services you have engaged us for, to contact you for the purposes of carrying out our contractual obligations, to establish a business relationship with you, to send your marketing communications in accordance with your communication preferences, for a legitimate business interest, or to comply with our legal or regulatory obligations.
Where consent is required, Drawbridge will request your consent to process your personal data. You are free to withdraw your consent at any time by contacting firstname.lastname@example.org
HOW WE COLLECT YOUR PERSONAL DATA
Drawbridge may collect personal data from the following sources:
- You directly (e.g., email, phone, in-person)
- Our website or social media accounts, if you choose to submit your information through our website or social media accounts
- Our third-party or hosted portals
- Publicly available databases
HOW WE PROTECT YOUR PERSONAL DATA
Drawbridge has reasonable technical, administrative, and physical security measures in place to protect your personal data. If you have reason to believe that our security measures or your interactions with us are no longer secure (e.g., you feel that the security of an account you have with us may have been compromised), please contact us immediately at (203) 569-6400 or email@example.com.
RETENTION OF YOUR PERSONAL DATA
HOW YOUR PERSONAL DATA IS SHARED
- Third-Party Service Providers: We may share your personal data with third parties who perform services on our behalf such as, but not limited to, hosting or operating our services or sites, accounting or audit services, tax services, legal services, or IT services. We do not authorize these third parties to use your personal data for purposes other than for which it has been provided, and we do not authorize these third parties to disclose your personal data to unauthorized parties. We require these third parties to maintain appropriate security to protect your information from unauthorized access or processing.
- Legal Authorities or Basis: We may share your personal data with legal or regulatory authorities, courts, and government agencies, where we believe that doing so would be in accordance with, permitted or required by any applicable law, regulation, or legal process to defend the interests, rights, or property of Drawbridge.
- Sale of Business: We may transfer your personal data to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, brands, affiliates, subsidiaries or other assets. To the extent permitted by applicable law, we may share your personal data with a prospective buyer or transferee of the business as part of the diligence process, provided that we require any such third party to maintain the confidentiality of your personal data and protect it with appropriate technical, administrative, and physical security measures.
Drawbridge may share your personal data with other third parties as directed by you or subject to your consent. Under no circumstances does Drawbridge sell, trade, or rent your personal data.
YOUR COMMUNICATION PREFERENCES
You may choose to receive or not receive marketing communications from Drawbridge by:
- Contacting us at firstname.lastname@example.org
- Replying to any marketing email communication you receive from us and requesting to be
unsubscribed from future marketing email communications.
We will try to comply with your request as soon as reasonably practicable as required by law. Please note that we may need to retain certain information for record keeping purposes, to complete any transactions that you began prior to your request, or for other purposes as required or permitted by law. In addition, please note that even if you opt-out of receiving marketing communications, we may need to send you service-related communications. If you have questions regarding your communication preferences or our marketing activities, please contact us at email@example.com
YOUR RIGHTS & REQUESTS
You may have the following set of rights with respect to your personal data:
- Right to access your personal data
- Right to request information regarding your personal data
- Right to request correction of your personal data
- Right to request transfer of your personal data
- Right to request erasure of your personal data
- Right to withdraw your consent to the processing of your personal data
- Right to object to the processing of your personal data
- Right to restrict or limit the processing of your personal data
- Right to lodge a complaint with a supervisory authority (such as the supervisory authority in your member state of habitual residence or place of work or where the alleged infringement took place)
You may also have the right to make a GDPR complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here: https://edpb.europa.eu/about-edpb/board/members_en
Please note that the above-mentioned rights may not be applicable to you in certain cases and are subject to conditions as specified under the applicable law. Drawbridge may require you to verify your identity if you elect to exercise your rights, and we will try our best to comply with your request as soon as reasonably practicable, but no later than the time frame required by law.
For more information regarding your rights or to exercise your rights, please contact us at firstname.lastname@example.org
COOKIES & SIMILAR TECHNOLOGIES
“Cookies” are automatically collected pieces of data that identify you as a unique user, facilitate your ongoing access to and use of this website, and helps diagnose server problems. If you prefer to disable cookies on this website, we suggest consulting the Help section of your browser.
Drawbridge does not engage in decision-making based on the automated processing of your personal data, including profiling, which produces legal effects concerning an individual or similarly significantly affects an individual.
LINKS TO THIRD-PARTY WEBSITES & SERVICES
Drawbridge takes children's privacy seriously. We do not knowingly collect personal data from minors (children under 13 years of age, or any other age defined under applicable law). If we become aware that a minor is attempting to or has submitted personal data via our website, we will notify the user that we may not accept his or her personal data. We will then remove any such person from our records.
Three Stamford Landing
46 Southfield Avenue, Suite 450
Stamford, CT 06902