GDPR overview
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy in the European Union (EU) and the European Economic Area (EEA). It also addresses the transfer of personal data outside the EU and EEA areas. The GDPR's primary aim is to give individuals control over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU. The products offered by CHEQ AI Technologies (2018) Ltd. and its affiliates enable our clients to maintain their GDPR compliance. To learn how CHEQ complies with the GDPR see the information below.
Personal Data
Paradome by CHEQ does not require access to information that directly identifies end-users accessing your site. CHEQ products collect and use the end user's IP address, which, by itself, is not considered personal data under the GDPR.
CHEQ is a processor under the GDPR, and a service provider under the CCPA. In its capacity as such CHEQ processes personal data it collects only as necessary to provide its services to the applicable CHEQ customer who authorized the collection of such data. CHEQ does not determine the purpose of processing, and does not receive any consideration or thing of value from its customers in exchange for the data.
Personal Data Usage
CHEQ uses the IP address, together with other data points (which are not considered personal data), to determine whether a session is fraudulent, and once such determination is made, to block the user from further access to the customer's website. If a customer opts to use the product in order to track fraudulent ad serves for the purpose of reconciling ad spend, the data collected will be used for such purpose as well.
Third-Party Services
CHEQ shares the data collected through its product with a limited number of third-party services providers as necessary for the operation of the product, namely our hosting provider. We also enable customers who wish to use the product in order to track fraudulent ad serves for the purpose of reconciling ad spend, to opt into sharing the data with applicable advertising partners for the purpose of such reconciliation.
Data Store and Transfer
Personal data collected by the product is stored in AWS, currently in its facilities in the US and EU, under AWS's Standard Contractual Clauses. Personal data may also be accessed by CHEQ's employees as necessary to provide the services. In such cases, the data will be accessed from CHEQ's offices either in the EEA, or in Israel. Israel is subject to an adequate decision by the European Commission.
Data Subjects Rights and Freedoms
CHEQ implements the minimization principle, both in the data points it collects, and in its retention policies. Moreover, CHEQ products enable customers to fully and independently administer data subject requests and inquiries. CHEQ employs best industry standard technical and organization measures to ensure the safety and integrity of the personal data in its processing activities.