Last Updated: May 25, 2018

At Pasilobus, our company mission is to help build a better internet. We believe that the protection of our customers' and their end users' data is fundamental to this mission.

Below you'll read how GDPR applies to Pasilobus and our customers.

COMPLIANCE IN RELATION TO OUR EMPLOYEES AND VENDORS

Pasilobus, Inc. is the entity that owns and operates the Pasilobus service, a Delaware Corporation in United States of America. This entity is fully GDPR compliant, which means we only request and process data based on legal bases as defined in the GDPR. In cooperation with our legal partners we have made a thorough assessment of all of our processes and data stores. Where needed, we changed our internal policies and procedures to be in compliance with GDPR, and deleted data that we didn't need or want. We also defined a new Privacy Policy.

COMPLIANCE IN RELATION TO OUR CUSTOMERS

In relation to our customers, Pasilobus is both a Data Controller and a Data Processor depending on the type of data collected.

Data Controller - Pasilobus is the Data Controller for the information we collect about our customers and visitors, which means that we determine the "purposes and means" of the data we collect as the Controller. Some examples: their name, their email address, their credit card number, and any other data that we collect based on the GDPR legal bases. This data is safeguarded by various policies and procedures. When sharing data with vendors, we have made sure there are contracts in place that ensure they also receive and process this data in a lawful way. You can read more about the data we collect for which purpose in our new Privacy Policy.

Data Processor - Our customers are the Data Controllers for the data that they gather and send to Pasilobus. Pasilobus processes that data on behalf of them for contractual obligations, which makes us the Data Processor. To enable our customers to be fully GDPR compliant while using Pasilobus, we have taken various measures. In short: Pasilobus doesn't wish to receive any personal data about your business or or visitors, and will provide the tools that enable you to strip this information before sending it to Pasilobus for processing.

DATA REMOVAL PROCEDURE

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information. When you start a project on our platform, it establishes a contractual relationship between you and Pasilobus. We will retain your Personal Information, including any uploaded records and documentation, for the time period necessary or required in order to satisfy the requirements and purposes established in contractual agreements and in our Privacy Policy, unless we are legally required or permitted to retain them for a longer period of time. We have initiated a procedure that allows us to remove account data when requested in an email to [email protected].