1. Important information and who we are
Full name of legal entity: Justice Bid, LLC
Email address: firstname.lastname@example.org
Postal address: Justice Bid, LLC, 12559 South Holiday Drive, Suite A, Alsip, IL 60803
2. Data collection and use
Whenever you visit our website, we use a third-party service, Google Analytics, to collect information sent by your browser (the “Log Data”). Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser version, pages of our website that you visit, the time and date of your visit, the time spent on those pages, and other statistics. This information is only processed in a way that does not identify you.
The purpose of implementing such processing is to maintain and monitor the performance of our website and to improve it as well as our services. The legal basis we rely on to process your personal data in this specific situation is Article 6(1)(f) of the GDPR, which allows us to process personal data when it is necessary for the purposes of our legitimate interests. When we use the legitimate interest legal basis, we need to provide a rationale and assess the proportionality and necessity of the processing and the balance between our legitimate interests and your rights and interests. Our legitimate interest in this situation lies in ascertaining the number and type of visitors on our website, as well as understanding the use made of it and any potential issues to be resolved. As the information processed does not identify you, the processing in this specific situation does not materially impact your rights, freedom or interests. This information can be retained for up to 48 months from your last action on our website.
Please note that you have a right to object to the processing based on legitimate interests. Please contact us at email@example.com if you wish to object.
When contacting us, or enquiring about or using our services, we may require you to provide us, either by email or through an online form, with certain personal data, including but not limited to identity and contact details such as your name, telephone number, email address and postal address. The data that we collect will be used to register you as a client, contact or identify you for the facilitation and provision of our services and to manage our relationship with you. We may also receive personal data indirectly when your personal data is given to us by our client in the course of the provision of our services, for instance if you are our client’s key contact employee. The legal basis we rely on to process your personal data is Article 6(1)(b) of the GDPR, which relates to processing necessary to enter into a contract or to perform it once concluded. Not providing us with this information may prevent us from properly identifying you as our client and providing you with efficient services or answers tailored to your requests.
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. Regulatory provisions require us to keep some basic information, such as contracts concluded with our clients or service delivery records for 6 years after the end of a contract. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation with respect to our relationship with you.
3. Service providers
We may employ third-party companies and individuals, including but not limited to any or all of the following reasons: (i) to facilitate and market our services; (ii) to provide services on our behalf; (iii) to perform services-related services; and/or (iv) to assist us in analyzing how our services are used.
These service providers may include: (i) technology partners (such as DXC Technology); (ii) information security companies; (iii) consulting firms; (iv) law firms; and/or (v) audit firms. If you use our website, these third parties may have access to your personal data to enable them to perform the tasks assigned to them on our behalf. However, we require all third parties to respect the security of your personal data and we ensure through contractual provisions that they treat it and protect it in accordance with the law. We do not allow our third-party service providers to disclose or use the information for any other purpose than the ones specified in this policy.
4. International transfers
We have a presence in the US. For recruitment purposes, analytics purposes and to provide our services, we may need to transfer your personal data to our contractors and service providers in the US, as well as wherever our clients are.
Many of these countries are outside the European Economic Area (EEA) and are not covered by adequacy decisions. In those circumstances, transfer of data will be legally based on contractual provisions between us and the recipient, approved by the European Commission, to impose on the recipient the same protection and security obligations as if they were in the EEA.
5. Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
6. Your legal rights
Under data protection laws, you have various rights such as the right of access that gives you the right to ask us for copies of any of your personal data that is in our possession; the right to rectification that allows you to rectify and complete information that you think is inaccurate or incomplete; and the right to erasure that gives you the right to ask us to erase your personal data in certain circumstances. You also have the right to restriction of processing, to object to processing and to data portability.
These rights available to you may depend on our reason for processing your information and the circumstances. You are not required to pay any charge for exercising your rights, unless your request is clearly unfounded, repetitive or excessive. We will respond to any legitimate requests within one month. In the event that your request is clearly unfounded, repetitive or excessive or if we are not in a position to identify you, we are entitled to refuse to act on your request.
Please contact us at firstname.lastname@example.org if you wish to make a request.