PlanTrust GDPR Compliance
Last Updated: August 26, 2024
1. Introduction
PlanTrust is committed to protecting the privacy and rights of individuals in the European Union (EU) and European Economic Area (EEA). This page outlines our compliance with the General Data Protection Regulation (GDPR).
2. Data Controller
PlanTrust acts as a data controller for personal data collected through our website and services. Our contact details are:
PlanTrust
619 Lake Ave, 3rd Fl (Cowerks) Asbury Park, NJ 07712
Email: success@plantrust.com
Phone: (800) 918-7305
3. Data Protection Officer
PlanTrust has not appointed a Data Protection Officer as we do not fall within the categories requiring mandatory appointment. However, for any GDPR-related queries, please contact our dedicated privacy team at success@plantrust.com.
4. Personal Data We Collect
We may collect and process the following personal data:
- Identity Data (e.g., name, username)
- Contact Data (e.g., email address, phone number)
- Professional Data (e.g., job title, employer information)
- Technical Data (e.g., IP address, browser type)
- Usage Data (e.g., information about how you use our website and services)
5. Legal Basis for Processing
We process personal data on the following legal bases:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
- Contract: Where processing is necessary for the performance of a contract with you.
- Legal Obligation: Where processing is necessary for compliance with a legal obligation.
- Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party.
6. Data Subject Rights
Under GDPR, you have the following rights:
- Right to be informed
- Right of access
- Right to rectification
- Right to erasure (‘right to be forgotten’)
- Right to restrict processing
- Right to data portability
- Right to object
- Rights related to automated decision-making including profiling
To exercise these rights, please contact us at success@plantrust.com.
7. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
8. Data Security
We have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data
- Ability to ensure ongoing confidentiality, integrity, availability, and resilience of processing systems and services
- Ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident
- Process for regularly testing, assessing, and evaluating the effectiveness of technical and organizational measures for ensuring the security of the processing
9. International Data Transfers
When we transfer personal data outside the EU/EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
- Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.
10. Data Breach Notification
In the case of a personal data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify affected individuals without undue delay.
11. Changes to This GDPR Compliance Statement
We may update our GDPR Compliance Statement from time to time. We will notify you of any changes by posting the new statement on this page and updating the “Last Updated” date.
12. How to Contact Us or File a Complaint
If you have any questions about our GDPR compliance or wish to file a complaint, please contact us at success@plantrust.com. You also have the right to lodge a complaint with your local data protection authority.