This Policy describes generally acceptable privacy principles (GAPP) for the protection and appropriate use of personal information at KARCO. These principles shall govern the use, collection, disposal, and transfer of personal information, except as specifically provided by this Policy.
KARCO shall provide data subjects with notice about how it collects, uses, retains, and discloses personal information about them.
KARCO shall give data subjects the choices and obtain their consent regarding how it collects, uses, and discloses their personal information.
KARCO shall provide individuals with the right to control their personal information, which includes the right to access, modify, erase, restrict, transmit, or object to certain uses of their information and for withdrawal of earlier given consent to the notice.
KARCO shall collect personal information from data subjects only for the purposes identified in the privacy notice, contract agreements and only to provide requested Services.
KARCO shall only use personal information that has been collected for the purposes identified in the privacy notice, contract agreements and in accordance with the consent that the data subject shall provide.
KARCO shall not retain personal information longer than is necessary to fulfill the purposes for which it was collected and to maintain reasonable business records.
KARCO shall dispose the personal information once it has served its intended purpose or as specified by the data subject.
KARCO shall allow data subjects to make inquiries regarding the personal information about them, that KARCO shall hold and, when appropriate, shall provide access to their personal information for review, and/or update.
KARCO shall disclose personal information to Third Parties / partner firms only for purposes identified in the privacy notice, contract agreements. KARCO shall disclose personal information in a secure manner, with assurances of protection by those parties, according to the contracts, laws, and other segments, and, where needed, with consent of the data subject.
Where a processor (vendor or 3rd party acting on behalf of KARCO’s data processor) engages another processor (Sub-processor) for carrying out specific processing activities on behalf of KARCO (controller), the same data protection obligations as set out in the contract.
Where the Sub-processor fails to fulfill its data protection obligations, the initial processor (relevant vendor or 3rd party acting on behalf of KARCO’s data processor) shall remain fully liable to KARCO for the performance of that Sub-processor's obligations.
KARCO shall protect personal information from unauthorized access, data leakage and misuse.
KARCO shall take steps to ensure that personal information in its records is accurate and relevant to the purposes for which it was collected.