This GDPR Addendum supplements the OFFSTREET Technology Inc. Privacy Policy and applies to individuals located in the European Economic Area (EEA), the United Kingdom (UK), and Switzerland. It ensures compliance with the General Data Protection Regulation (EU 2016/679) (“GDPR”) and the UK Data Protection Act 2018 (UK GDPR).
A. LEGAL BASIS FOR PROCESSING
OFFSTREET processes personal data under one or more of the following lawful bases:
1. Consent – You have given clear consent for processing your personal data for a specific purpose.
2. Contractual Necessity – Processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a
contract.
3. Legal Obligation – Processing is necessary to comply with a legal obligation.
4. Legitimate Interests – Processing is necessary for our legitimate business interests, except where such interests are overridden by your fundamental rights and freedoms.
B. YOUR GDPR RIGHTS
Under the GDPR, you have the following rights regarding your personal data:
1. Right of Access – To obtain confirmation of whether your data is being processed and to receive a copy.
2. Right to Rectification – To request correction of inaccurate or incomplete data.
3. Right to Erasure (“Right to be Forgotten”) – To request deletion of your personal data where it is no longer necessary or where consent is withdrawn.
4. Right to Restrict Processing – To request that we limit how your data is processed.
5. Right to Data Portability – To receive your data in a structured, commonly used, machine-readable format and to transmit it to another controller.
6. Right to Object – To object to processing based on legitimate interests or for direct marketing purposes.
7. Right to Withdraw Consent – Where processing is based on consent, you may withdraw it at any time.
Requests to exercise these rights can be sent to our Data Protection Officer atp rivacy@joinoffstreet.com.
C. INTERNATIONAL TRANSFERS
Personal data may be transferred outside of the EEA or UK to jurisdictions that do not have the same level of data protection laws. Where such transfers occur, OFFSTREET will take reasonable steps to ensure that your personal data is handled securely and in accordance with this Privacy Policy.
D. SUPERVISORY AUTHORITY
You have the right to lodge a complaint with your local supervisory authority for data protection.
A list of EU authorities can be found at https://edpb.europa.eu/about-edpb/about-edpb/members_en.
For the United Kingdom, you may contact the Information Commissioner’s Office (ICO) at https://ico.org.uk.