The General Data Protection Regulation (GDPR), enacted in 2016 and effective May 25, 2018, is a comprehensive EU regulation designed to strengthen and harmonize data protection laws across the European Union.
It aims to give individuals greater control over their personal data and imposes significant obligations on organizations that process such data. The GDPR defines "personal data" broadly, encompassing any information related to an identified or identifiable individual.
The GDPR applies to all entities and individuals within the EU that process personal data, and also to those outside the EU who process the personal data of EU residents.
ClickSambo acts as a data processor. This means ClickSambo processes personal data on behalf of its customers (who are the data controllers), according to their instructions.
ClickSambo does not determine the purpose or means of processing the data; its customers do.
ClickSambo's customers are data controllers. They are responsible for determining the purpose and means of processing the personal data they collect and share with ClickSambo. They must ensure compliance with all GDPR requirements.
The specific personal data ClickSambo collects depends on the services used by our customers. However, this could generally include:
Customer Data: Contact information (name, email, phone number, address) provided during signup or support requests, and IP addresses.
Data Processed on Behalf of Customers: This data depends entirely on the customer's use of ClickSambo's services and may include information about users interacting with the customer's website or advertisements. Examples might include IP addresses, operating system and version, browser and version, geolocation data (derived from IP address), time spent on a site, user interactions, and anonymized/hashed browser fingerprints.
ClickSambo has a Data Processing Agreement (DPA) that outlines the privacy and security measures we employ to protect customer data processed under the GDPR. This agreement details ClickSambo's obligations as a data processor and clarifies the responsibilities of our customers as data controllers.
By agreeing to ClickSambo's Terms of Service, customers automatically agree to the DPA. Customers may share this DPA with their own customers to demonstrate ClickSambo's GDPR compliance.
If ClickSambo processes or stores data outside the EU, we will employ appropriate safeguards, such as Standard Contractual Clauses, to ensure compliance with GDPR data transfer rules.
Customers can request the deletion of their personal data held by ClickSambo at any time. ClickSambo will respond to these requests in a timely manner according to GDPR requirements.
Customers can also deactivate their accounts, resulting in the deletion of their associated data.
Clients can access their data stored by ClickSambo via their account dashboard. Data exports in CSV format are also available.
Clients can request deletion of their data; we will respond to deletion requests within 30 business days.
For any questions regarding our GDPR compliance or data handling practices, please contact us at support@clicksambo.com