Rights of individuals

The rights of personal individuals must be ensured, complying with at least the following premises:

Right to Access, Rectification, Update, and Deletion: The personal individual may request access, rectification, update, or deletion of personal information held about them. The company must fulfill the request, after validation of the individual’s identity, within a period not exceeding 10 business days.

Information Content: Information requested by the individual must be provided in a clear manner and free of coding.

Requests for access, rectification, update, or deletion of personal information are processed free of charge. We may charge a reasonable fee for excessive or repetitive requests.

State-Specific Rights (US Residents)

• California residents: rights under CCPA/CPRA including opt-out of sale/sharing
• Virginia, Colorado, Connecticut, Utah residents: similar rights under state laws
• To exercise rights, contact: your-data@predicore.com or through your employer

Data Controller, Registry, and Database

The following guidelines associated with responsibility, registration, and use of personal information bases must be considered:

Data Controller: Management designates a personal information Processing Officer (DPO), who will assume at minimum all responsibilities defined and derived from this policy and the Law.

Asset Inventory: The DPO must maintain a formal registry of all databases containing personal information, containing at minimum the type of data,  the personal information fields it possesses, and the origin of the data.

Advertising: Whenever data is collected for advertising purposes, each communication will provide the individual with the possibility and means to process the removal, withdrawal, and blocking of data used for such purpose.

Statistical Analysis: In any statistical or similar analysis, personal information will not be manipulated or retained, and must be anonymized if it is part of the data source.

Privacy Policy

This policy primarily covers data of employees and authorized users of our business customers (‘Customer Personnel’). We do not target or knowingly collect data from consumers or individuals under 16.

Information Collection

The processing of data collected by the organization is governed by the following principles:

• We only collect information from our clients associated with business functions and exclusively with activities related to the service provided.
• All personal and/or sensitive information that our clients provide to us, whether their own or from third parties, must have a contractual declaration by them regarding the legality of:
  • The information provided
  • Method of obtaining
  • Purpose of obtaining
  • Permission to transfer to Predicore for processing and use for the purposes of the service.
• In the absence of formalization of the above, what is established will still apply, responding in accordance with the Law.

Categories of Personal Information

• Identifiers: names, email addresses, phone numbers, IP addresses
• Professional information: job titles, employer information
• Activity data: platform usage, sensor interactions, login records
• Payment information: processed on behalf of customer companies only

Retention: Active account data retained during service term plus 90 days

Sale or Sharing of Personal Information

We do not sell or share your personal information. We do not respond to Do Not Track signals. We do not use automated decision-making or profiling.

Verification of Identity for Data Requests

To verify your identity, we will send a confirmation link to the email address we have on file for you. You must respond from that email to confirm your request.

Requests may be submitted by authorized agents with proper written authorization. For Customer Personnel: We may verify requests through your employer’s authorized representative.

We will respond to verified requests within 10 business days of receipt.

Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights under this policy. This applies to all US state privacy laws where applicable.

Children’s privacy

We do not knowingly collect information from individuals under 16. Access is restricted to adult employees of our customers.

Use and Purpose of Collected Data

The use and purpose of data collected by the organization is governed by the following principles:

• Information will only be used for the function of services contracted by our clients.
• Any additional protection requirement different from what is expressed in this policy and governed by Law must be requested and formally communicated to Predicore as part of the service requirements, and formalized contractually.
• Information of individuals will never be used for illicit purposes.
• The company may use data for statistical purposes and/or service improvement, always seeking to anonymize it beforehand.

Modification and Deletion of Data

The modification and deletion of data collected by the organization is governed by the following principles:

• For data transferred directly to Predicore by individuals, Predicore ensures the right to request, rectify, modify, and delete data upon simple request of the individual.
• For data transferred indirectly to Predicore by client companies, Predicore ensures the right to request, rectify, modify, and delete data upon request of the client company and/or the individual.
• The client, when providing data, whether their own or from third parties, accepts that the data is accurate and is responsible for communicating any modification of information regarding it.
• Once the need to maintain the collected personal information has ended, either due to termination of the service contract that gave rise to the collection or due to another applicable circumstance, Predicore will delete said data from existing databases.

Data will be securely deleted following industry-standard protocols.

About SMS messages

SMS notices. We send SMS for authentication and service alerts related to your Predicore account. Message frequency varies. Text HELP for help. Text STOP to opt out at any time. Message and data rates may apply.

Data use. We store your phone number, opt-in status, timestamps, and delivery metadata to operate the service and meet compliance.

No sharing of opt-in data. Text message originator opt-in data and consent will not be shared with any third parties.

Retention. Kept while your account is active and for up to 12 months after opt-out for compliance, then deleted or de-identified.

Contacts. SMS Terms and privacy questions: your-data@predicore.com.

Information Disclosure

Regarding information disclosure, Predicore:

• May provide collected personal information upon request from legal authorities in accordance with the Law.
• Will only transfer collected personal information to third parties or related companies when the same purpose for which they were obtained applies, and with acceptance from the data owner.
• Will under no circumstances provide personal information to third parties without acceptance from the data owner or legal requirement.

Information Protection

The company commits to protecting collected personal information, using appropriate security measures to protect it from loss, unauthorized access, and/or modification. Measures include, among others and without limitation, data encryption, controlled access management, physical/logical perimeter protection, information backup, critical system monitoring, incident management, and service continuity.

Update and Contact

Changes to the personal information and Privacy Policy

The company reserves the right to update or modify this personal information and Privacy Policy at any time. In case of significant changes, relevant interested parties will be notified.

Contact

The company makes the following communication channel available to individuals and its clients for any inquiries regarding this policy and requests associated with personal information:

your-data@predicore.com