Formes Personal Data Protection Policy For Users
 
At Formes, we are committed to protecting the privacy and confidentiality of personal data that we collect and process. This Personal Data Protection Policy outlines our practices and procedures to ensure compliance with applicable data protection laws and regulations.

​

1. Collection and Use of Personal Data

1.1. Types of Personal Data: We may collect and process various types of personal data, including but not limited to names, contact information, employment details, and other relevant information necessary for the provision of our services.

1.2. Purpose of Data Collection: We collect and use personal data for the following purposes:

• To provide services and fulfill contractual obligations with clients.

• To communicate with clients, employees, suppliers, and other relevant parties.

• To comply with legal and regulatory requirements.

• To improve our services and enhance client experience.

1.3. Data Minimization: We will only collect and process personal data that is necessary for the above-mentioned purposes. We will not retain personal data for longer than necessary to fulfill the intended purpose.
 
  2. ​Data Security and Confidentiality
2.1. Data Security Measures: We have implemented appropriate technical and organizational measures to safeguard personal data against unauthorized access, loss, destruction, or alteration. These measures include encryption, access controls, secure storage, and regular security assessments.

2.2. Confidentiality Obligations: Our employees and third-party service providers are bound by strict confidentiality obligations to ensure the confidentiality and integrity of personal data.

   3. Data Sharing and Transfers
3.1. Third-Party Service Providers: We may engage trusted third-party service providers to assist in the provision of our services. These service providers are required to comply with applicable data protection laws and regulations and will only process personal data on our behalf and for the purposes specified by us.

3.2. Cross-Border Transfers: In some cases, personal data may be transferred to recipients located in countries outside of the jurisdiction where the data was collected. We will ensure that appropriate safeguards are in place to protect personal data during such transfers in accordance with applicable laws.

   4. Data Subject Rights
4.1. Right to Access, Rectification, and Erasure: Data subjects have the right to request access to their personal data, to rectify inaccurate information, and to request the erasure of their data, subject to legal requirements.

4.2. Right to Withdraw Consent: If we rely on consent as the lawful basis for processing personal data, individuals have the right to withdraw their consent at any time.

4.3. Right to Data Portability: Data subjects have the right to receive a copy of their personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
   5. Data Breach Notification
In the event of a personal data breach that is likely to result in a high risk to the rights and freedoms of individuals, we will promptly notify the affected individuals and relevant authorities in accordance with applicable legal requirements.

   6. Compliance and Updates
We will regularly review and update this Personal Data Protection Policy to ensure its continued relevance and compliance with applicable data protection laws and regulations.
By engaging with our firm, individuals acknowledge and consent to the collection, use, and processing of their personal data as described in this policy.
If you have any questions or concerns regarding our Personal Data Protection Policy or the handling of your personal data, please contact our Data Protection Officer at data.privacy@formessolutions.com.

This Personal Data Protection Policy is effective as of 05/22/2023.