Certova is committed to compliance with the EU General Data Protection Regulation (GDPR) and the UK GDPR. This page describes how those rights apply to your use of Certova.
Roles
For personal data contained in documents you upload, you are the data controller and Certova acts as a data processor, processing that data on your instructions to provide the Service. For your account data, Certova is the controller.
Your rights
- Access - request a copy of the personal data we hold about you.
- Rectification - correct inaccurate or incomplete data.
- Erasure - request deletion of your personal data.
- Portability - receive your data in a structured, machine-readable format.
- Restriction and objection - limit or object to certain processing.
Legal bases for processing
- Contract - to provide the Service you signed up for.
- Legitimate interests - to secure, maintain, and improve the Service.
- Consent - where specifically requested.
- Legal obligation - where required by law.
Data Processing Agreement
We offer a Data Processing Agreement (DPA) to customers. To request one, contact [email protected].
International transfers
Where data is transferred outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses.
Exercising your rights
To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with your local supervisory authority.