Data Subject Rights at Telesign
Published on: April 23, 2024
Introduction
At Telesign, privacy and trust are at the heart of everything we do. Protecting individuals’ rights over their personal data is crucial in making the digital world a more trustworthy place for everyone, and here at Telesign we strive to do just that.
Depending on what data privacy laws are applicable, individuals have certain rights in relation to their personal data. These may include, for example, the right to access their data, the right to be forgotten (to have their personal data deleted), and the right to opt out of the sale of their personal information.
How do we deal with these rights at Telesign?
Telesign as data processor
At Telesign, in the majority of cases, we act as data processor, meaning we process individuals’ personal data based on the instructions of data controllers (Telesign’s Customers). When acting as data processor, our standard Data Processing Agreement (‘DPA’) includes obligations on Telesign that concern the Personal Data provided to us by our Customers (‘Customer Personal Data’) in relation to individual rights requests received directly by us. These include obligations for Telesign to:
- Cooperate with the data controller, as requested, to enable it to respond and comply with the exercise of (a) individual rights pursuant to applicable data privacy law; and (b) any other correspondence, enquiry or complaint received from a data subject, regulatory authority or any other third party.
- Promptly inform the data controller of any individual rights requests received directly by Telesign that are in relation to Customer Personal Data.
- Provide all Customer Personal Data requested by the data controller within a reasonable timescale and assist the data controller to comply with individual rights requests within the applicable timeframes.
Telesign as data controller
Where Telesign acts as data controller – that is, where Telesign is determining the ‘how’ and the ‘why’ of the personal data processing – for example if an individual signs up to our mailing list or provides us with personal data via our customer portal, then individuals have various rights in regards to their personal data that can be exercised by the individual contacting Telesign directly.
Such rights may include:
- The Right to Transparency: To be informed about our privacy and data protection practices via our Privacy Notice.
- The Right to Access/Disclosure: To know about the specific personal data and provide what we have upon request.
- The Right to Rectification: If personal data is incorrect or incomplete, to ask us to update it.
- The Right to Object: To object to or ask us to restrict the processing of personal data.
- The Right to Data Portability: The right to receive personal data in a structured, commonly used, portable format.
- The Right to Withdraw Consent/CCPA’s ”Do Not Sell My Personal Information”: At any time, you can opt-out of processing or of having your personal data sold.
- The Right to Delete (GDPR’s “RTBF”): The right to request to delete your personal data (in certain circumstances).
If you are an individual and wish to exercise any of these rights, this can be done by contacting us at https://www.telesign.com/privacy-requests.
We will respond to all individual rights requests within the legally required timeframe.