Celona GDPR

• Celona will process Personal Data in accordance with the customer’s documented instructions.
• Celona acts as a service provider and processor in connection with personal data.
• The purpose of the processing of personal data is to provide Celona products and services.
• Celona has agreements with its subprocessors to restrict use of personal data.  Celona will provide a list of subprocessors and provide notice of new subprocessors.
• Celona does not sell personal data.
• Celona will implement and maintain appropriate technical and organizational measures to protect personal data and ensure authorized personnel with access to personal data are subject to confidentiality obligations.
• Celona will have a valid cross-border data transfer mechanism in place as required by applicable law.
• Celona will delete personal data in accordance with terms and conditions in place with its customers.

These commitments are included in Celona’s Data Processing Agreement (DPA).  The DPA contains the data privacy and data protection terms governing Celona’s use of a customer’s personal data. All customer orders are governed by the terms of the DPA and only one DPA is needed between customer and Celona. The DPA has been drafted specifically to address Celona’s narrow use of personal data.  The DPA can be found here.  For more details about the application of GDPR to Celona products and services, please review our DPA Cover Sheet found here.

For any other requests to exercise your GDPR privacy rights, please email us at privacy@celona.io

Note, in order to protect the security, confidentiality, and integrity of your Personal Information, we may need to verify your identity before processing your request. In some cases, we may need to collect additional information to verify your identity, such as a government issued ID.