Your Right to Access Information We Have About You

Under regulations such as the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act of 2018 (CCPA), and similar data privacy laws, you have the right to access and request deletion of your stored information. If you wish, we can remove your contact details from our records.

To proceed, please complete the form below and submit it. Upon receipt, DuoCircle will send you a confirmation message. We will then address your requests regarding the provision or deletion of your data within the required timeframe as specified by relevant data privacy regulations. Before fulfilling your request, we may need to contact you for verification purposes.

Your Right to be Deleted or Right to Be Forgotten

According to the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act of 2018 (CCPA), and similar data privacy laws, individuals have the right to request the deletion of their personal data from the controller, DuoCircle, without undue delay. The controller is obligated to erase the personal data promptly under certain circumstances:

1. When the personal data are no longer needed for the purposes for which they were collected or processed.
2. If the individual withdraws consent, there is no other legal basis for processing the data.
3. In cases where the individual objects to the processing, and there are no overriding legitimate reasons for the processing, or if the objection is related to direct marketing. When the personal data have been unlawfully processed.
4. If erasure is required to comply with a legal obligation under Union or Member State law.
5. When the personal data have been collected in connection with the offer of information society services to minors.

If you wish to exercise your right to erasure, please contact us, and we will handle your request promptly under applicable data protection regulations.

If the controller has published the personal data and is required to erase it according to paragraph 1, the controller must, considering available technology and implementation costs, take reasonable measures, including technical steps, to notify other controllers processing the personal data. This notification should inform them that the data subject has requested the removal of any links to, copies of, or replications of, the personal data.

Paragraphs 1 and 2 do not apply to the extent that processing is required:

1. When exercising the right to freedom of expression and information.
2. To fulfill a legal obligation mandated by Union or Member State law or for tasks performed in the public interest or in the exercise of official authority vested in the controller.
3. For the establishment, exercise, or defense of legal claims, such as situations involving a “legal hold order” or similar litigation rules that may prohibit deletion.

Under the California Consumer Privacy Act of 2018 (“CCPA”), which came into effect on January 1, 2020, California consumers possess the right to request the deletion of their personally identifying information. However, there are nine exemptions to this right. Upon receiving a consumer’s deletion request for their personal information, DuoCircle will either delete the information or inform you if any of the nine exemptions apply, within 45 calendar days from the initial request.

Thus, DuoCircle commits to deleting personal data under CCPA within 45 calendar days. While completing this form is not mandatory for a valid request, it is designed to gather the necessary information for processing your request efficiently. If needed, we may reach out to you via telephone or email for additional information.

The applicable law might permit or necessitate us to decline your request, or we may have already disposed of, erased, or anonymized your personal data in line with our record retention policies and practices. If we are unable to fulfill your request for erasure, we will provide you with the reasons for our decision, taking into account any legal or regulatory constraints. In cases where we ascertain that the personal data you seek to erase is not covered under Article 17 of GDPR, the CCPA, or other data privacy regulations, we will notify you accordingly.

For information regarding the usage of your personal data by DuoCircle, please refer to our Privacy Policy.

For further inquiries, please contact:

DuoCircle’s Director of Information Security via email at privacy@duocircle.com or call +1-855-700-1386.

If you represent a data subject as a third party

If you are not the data subject, at the request of DuoCircle, you must provide either an original letter of authority (dated within the last three months) or a certified copy of any legal document authorizing you to act on behalf of the data subject (e.g., power of attorney). Please submit your request by completing the information below.