Privacy Policy

Data Protection Policy – Third Option

 

Purpose and Commitment: Third Option is committed to ensuring the highest level of data protection in compliance with applicable global data protection laws, including the European Union’s General Data Protection Regulation (GDPR). We strive to safeguard the privacy and personal information of our clients, partners, and employees, ensuring that all data is collected, processed, and stored in accordance with legal requirements and ethical standards.

 

Scope: This Data Protection Policy applies to all Third Option entities, employees, and affiliates worldwide. It establishes a framework for cross-border data transfers and guarantees compliance with internationally recognized data protection principles. This policy covers all aspects of personal data processing within the organization.

 

Key Principles of Personal Data Processing

Lawfulness, Fairness, and Transparency:

 

All personal data is processed in a lawful, fair, and transparent manner.

Personal data is collected for specified, legitimate purposes and not further processed for incompatible purposes.

Data subjects are informed about how their data is processed and for what purposes.

Data Minimization and Accuracy:

 

We collect only the data that is necessary for the specific purposes outlined. Excessive or irrelevant data is not retained.

Personal data is kept accurate and up to date. Incorrect data is promptly corrected or erased.

Purpose Limitation:

 

Personal data is processed for specific, explicit, and legitimate purposes and is not used for any other reason without obtaining further consent from the data subject.

Storage Limitation:

 

Personal data is stored in a form that permits identification of data subjects for no longer than necessary to achieve the purpose for which the data was collected. Data that is no longer needed is securely deleted or anonymized.

Integrity and Confidentiality:

 

Personal data is processed in a manner that ensures appropriate security. We implement strong organizational and technical measures to protect against unauthorized access, loss, or damage.

Accountability:

 

Third Option maintains detailed records of data processing activities and is responsible for ensuring compliance with all applicable data protection regulations.

Lawfulness of Processing:

According to the GDPR, the processing of personal data is considered lawful if it meets one or more of the following conditions:

 

The data subject has given explicit consent.

Processing is necessary for the performance of a contract.

Processing is required to comply with a legal obligation.

Processing is in the legitimate interests of the controller, provided that such interests do not override the rights and freedoms of the data subject.

How We Collect Personal Data:

We collect personal data through the following channels:

 

Direct interactions: When you contact us via our website, email, or phone to inquire about our services.

Automated technologies: Our website may collect certain technical data (e.g., IP address, browser type) through cookies and similar technologies.

Third-party sources: We may collect information from publicly available sources such as social media platforms or third-party data providers.

If you are under the age of 16, we request that you provide personal data only with the consent of a parent or guardian.

 

Your Rights as a Data Subject:

You have the following rights under GDPR:

 

Right of Access: You have the right to request information about how your data is processed and to obtain copies of your personal data.

Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to have it corrected.

Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you have the right to request the deletion of your personal data.

Right to Restrict Processing: You may request a restriction of processing if you believe the data is inaccurate or if you object to processing activities.

Right to Object: You may object to the processing of your data if the processing is based on legitimate interests or for direct marketing purposes.

Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Withdraw Consent: If you have provided consent for data processing, you have the right to withdraw it at any time.

To exercise your rights, contact us at [insert email/contact form].

 

International Data Transfers:

Third Option operates across multiple countries. We ensure that any transfer of personal data between countries adheres to applicable data protection laws, including the use of Standard Contractual Clauses (SCCs) to ensure that your data remains protected during international transfers.

 

Data Security Measures:

Third Option takes comprehensive measures to protect your personal data, including:

 

Encryption: All data transfers are encrypted to prevent unauthorized access.

Access Control: Only authorized personnel with a legitimate business need have access to personal data.

Monitoring: We regularly monitor our systems to detect and prevent data breaches or misuse.

Third-Party Providers:

Some of our services may involve sharing data with third-party providers (e.g., analytics or cloud service providers). We ensure that these third parties comply with our data protection standards and applicable laws.

 

Contact Us:

For any questions regarding this policy or to exercise your data protection rights, please reach out to us at info@thirdoption.ai

 

This policy will be reviewed and updated regularly to reflect changes in our operations or data protection requirements.