privacy policy
Privacy Policy
Purpose
This policy outlines how Augment Professional Services (APS) collects, processes, stores, and protects personal data in compliance with the General Data Protection Regulation (GDPR). It demonstrates our commitment to upholding the rights of data subjects and maintaining transparency in data handling practices.
Policy Statements
Lawfulness, Fairness, and Transparency
Augment Professional Services (APS) processes personal data lawfully, fairly, and transparently in accordance with GDPR principles.
Data subjects are informed about the purpose and legal basis for processing their personal data through clear and accessible privacy notices.
Data Collection and Use
Personal data is collected and used only for specified, explicit, and legitimate purposes.
Augment Professional Services (APS) ensures that data processing is limited to what is necessary for achieving these purposes.
Legal Bases for Processing
Augment Professional Services (APS) processes personal data based on one or more of the following legal bases:
Consent: Obtained prior to processing where required.
Contractual Necessity: When processing is necessary to fulfill a contract.
Legal Obligation: To comply with legal requirements.
Legitimate Interests: When processing is necessary for legitimate business purposes.
Data Minimization
Only personal data that is adequate, relevant, and limited to what is necessary is collected and retained.
Accuracy of Data
Personal data is kept accurate and up to date. Reasonable steps are taken to ensure that inaccurate data is corrected or deleted without delay.
Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, in accordance with the Data Retention and Destruction Policy.
Data Security
Augment Professional Services (APS) implements appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction.
Data Subject Rights
Data subjects have the following rights under GDPR:
Right to access their personal data.
Right to rectification of inaccurate data.
Right to erasure (the "right to be forgotten").
Right to restrict processing.
Right to data portability.
Right to object to processing.
Rights regarding automated decision-making and profiling.
Data subjects can exercise their rights by contacting our Data Protection Officer (DPO).
Third-Party Sharing
Personal data is shared with third parties only when necessary and in compliance with GDPR.
Third-party service providers are required to adhere to data protection obligations equivalent to those of Augment Professional Services (APS).
International Data Transfers
Personal data transferred outside the European Economic Area (EEA) is protected through appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions by the European Commission.
Incident Response
Any personal data breaches are managed in accordance with the Incident Response Policy, and data subjects are notified promptly when required under GDPR.
Training and Awareness
Augment Professional Services (APS) provides regular GDPR compliance training to employees and contractors to ensure a thorough understanding of their responsibilities under this policy.
Compliance Monitoring and Updates
Regular audits and reviews are conducted to ensure continued compliance with GDPR.
This policy will be updated as necessary to reflect changes in the regulatory environment or business practices.
Scope
This policy applies to all applicants, employees, contractors, and third-party collaborators processing personal data on behalf of Augment Professional Services (APS).
Approval and Review
This policy will be reviewed annually and updated as necessary to ensure ongoing GDPR compliance.
Acknowledgment
By interacting with Augment Professional Services (APS), data subjects acknowledge their understanding of this privacy policy and their rights under GDPR.