This Policy applies where Clutch Technologies, LLC provides services to customers whose end users are resident within the European Union. The personal data required to provide these services falls under the scope of the General Data Protection Regulation (GDPR).
Clutch Technologies is committed to ensuring that we and our suppliers handle all personal data entrusted to us by our customers, in accordance with our legal obligations under the General Data Protection Regulation.
Clutch collects and uses personal data as a data processor under the GDPR, in order to provide products and services on behalf of our customers. This policy applies to all Clutch employees and contractors, will also apply to any Clutch or third-party systems which store or otherwise process personal data, in our capacity as data processor.
In particular, the company will:
d) Adopt appropriate technical and organizational security measures to protect the confidentiality, integrity and availability of the personal data we collect, store and transfer on behalf of our customers.
f) Adopt a privacy by design and default approach to systems and product development and project management, assisting our customers in carrying out Data Protection Impact Assessments as required to protect the privacy rights of customers and employees.