Introduction

Welcome to Roberts Spending Industries, where we treat your privacy like a treasure map—except we promise not to bury it in the sand and forget about it. This Privacy Policy outlines our (mostly) serious commitment to protecting your personal data, in compliance with GDPR, EU laws, ISO 27001, SOC 2, NIS2, PCI, and HIPAA. If you’re already yawning, trust us, we feel your pain.

Data Collection and Usage

We collect personal data like a squirrel hoarding nuts, but don’t worry, we’re not plotting world domination—yet. Here’s what we gather:

  • Contact Information: Name, email address, phone number (because how else would we send you those thrilling marketing emails?)
  • Financial Information: Payment details (your wallet’s secrets, basically)
  • Health Information: For services requiring HIPAA compliance (we promise not to judge your donut addiction)

Legal Basis for Processing

Our legal team insists we clarify that we process your data based on the following very official-sounding reasons:

  • Consent: You said “yes,” and we took that seriously.
  • Contract: Obligations and stuff. Yay, adulting!
  • Legal Obligations: Because breaking the law is frowned upon.

Data Protection and Security

Our data protection measures are tougher than a rhino’s skin, ensuring your information stays safe:

  • ISO 27001 Compliance: We follow these standards like a recipe for disaster prevention.
  • SOC 2 Compliance: Regular audits keep us on our toes and slightly paranoid.
  • NIS2 Compliance: Because protecting critical infrastructure makes us feel like superheroes.
  • PCI Compliance: Guarding cardholder data like it’s the Holy Grail.
  • HIPAA Compliance: Handling health information with the care it deserves, while silently nodding at your life choices.

Data Subject Rights

Because you’re the star of this show, here are your rights:

  • Access: Peek into your data anytime.
  • Rectification: Fix those typos.
  • Erasure: Vanish from our records like a magician’s trick.
  • Restriction of Processing: Pause us like you would a Netflix show.
  • Data Portability: Move your data like you would your furniture.
  • Objection: Say “no” to data processing when you’re not feeling it.

Data Retention

We hold onto your data only for as long as it’s useful—or legally required. Trust us, we’re not hoarders.

Third-Party Sharing

We don’t share your data unless absolutely necessary—like when we need to collaborate with other experts or comply with the law. Otherwise, your secrets are safe with us.

International Data Transfers

When your data takes a vacation outside the EU, we make sure it travels with the best safety precautions, including Standard Contractual Clauses. No passport required.

Contact Information

Got questions, concerns, or just want to chat about this riveting Privacy Policy? Contact us at:

Changes to This Policy

We might update this Privacy Policy from time to time. Don’t worry, we’ll let you know by posting the changes on our website. By continuing to use our services after updates, you’re basically saying, “Cool, I’m down with that.”

Introduction

Welcome to Roberts Spending Industries. We are committed to safeguarding the privacy and security of your personal information. This Privacy Policy outlines our practices concerning the collection, use, and protection of your personal data in compliance with the General Data Protection Regulation (GDPR), EU laws, ISO 27001, SOC 2, NIS2, PCI, and HIPAA.

Data Collection and Usage

We collect personal data to provide and improve our services. This data includes, but is not limited to:

  • Contact Information: Name, email address, phone number
  • Financial Information: Payment details
  • Health Information: For services requiring compliance with HIPAA

Legal Basis for Processing

We process personal data based on the following legal grounds:

  • Consent: When you have given clear consent for us to process your personal data for a specific purpose.
  • Contract: When processing is necessary for the performance of a contract with you.
  • Legal Obligations: When processing is necessary to comply with our legal obligations.

Data Protection and Security

We implement robust security measures to ensure the confidentiality, integrity, and availability of personal data, including:

  • ISO 27001 Compliance: We adhere to the standards set by ISO 27001 to manage information security risks.
  • SOC 2 Compliance: Our systems are regularly audited to meet the requirements of SOC 2.
  • NIS2 Compliance: We comply with NIS2 directives to protect critical infrastructure.
  • PCI Compliance: We meet the Payment Card Industry Data Security Standard (PCI DSS) to protect cardholder data.
  • HIPAA Compliance: We ensure that health information is handled in accordance with HIPAA regulations.

Data Subject Rights

As a data subject, you have the following rights:

  • Access: You have the right to access your personal data.
  • Rectification: You have the right to request corrections to your personal data.
  • Erasure: You have the right to request the deletion of your personal data under certain conditions.
  • Restriction of Processing: You have the right to request the restriction of processing your personal data.
  • Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Objection: You have the right to object to the processing of your personal data.

Data Retention

We retain personal data only as long as necessary for the purposes described in this Privacy Policy, or as required by law.

Third-Party Sharing

We do not share your personal data with third parties, except as necessary to provide our services, comply with legal obligations, or with your explicit consent.

International Data Transfers

When transferring personal data outside the EU, we ensure appropriate safeguards are in place to protect your data, including Standard Contractual Clauses.

Contact Information

If you have any questions or concerns regarding this Privacy Policy or our data practices, please contact us at:

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you as by written in law of any changes by posting the new Privacy Policy on our website. Your continued use of our services after such changes will constitute your acknowledgment and acceptance of the updated policy.