The purpose of this policy is to highlight various obligations, best practices, and tools that support compliance with data privacy regulations applicable to OBL in its role as both a data controller and a processor.
This policy applies to all OBL personnel, operating units, and wholly owned subsidiaries worldwide.
Your personal information is stored on the cloud provider partner systems. For further information on data storage, please visit our supplier website https://aws.amazon.com/.
Commitment to Data Security
Your personally identifiable information is kept secure. Only authorized employees, business partners, clients, vendors, and other third-party providers (who have agreed to keep information secure and confidential) have access to this information. Data access is strictly on a need-to-know, least privilege principle.
OBL ensures that our supplier employs industry-standard security measures to ensure the security of information through legally binding terms and conditions. However, users of our website are responsible for maintaining the security of any password, user ID, or other form of authentication involved in obtaining access to password-protected or secure areas of the websites. Access to and use of password-protected and/or secure area of this website are restricted to authorized users only. Any unauthorized access to such areas is prohibited and may lead to criminal prosecution.
Retention and Disposal
We keep your Personally Identifiable Information for no longer than necessary for the purposes for which the Personally Identifiable Information is processed. The length of time we retain Personally Identifiable Information for depends on the purposes for which we collect and use it and/or as required to comply with applicable laws and to establish, exercise or defend our legal rights.
Where OBL Services are being provided through an agreement, the retention and disposal of records will be governed by the client agreement.
Please refer to the end of this policy for providing your consent. Your consent to personal data collection and processing may be revoked by notifying us via email (Refer to Section “Privacy Contact Information.”). For users below the age of 16, the consent should be provided by the holder of parental responsibility of the child.
Please note, in case you choose to not provide us with the consent or withdraw the consent at any given point of time, we shall not be able to provision the services as detailed in Section 4.2 of this policy.
Privacy Contact Information
f you have any questions regarding our Privacy Statement or if you need to update, change, or remove information, you can do so by contacting Privacy Office at OBL by email addressed to: firstname.lastname@example.org.