GDPR notice

1. Who this notice is for

If you are in the European Union, the European Economic Area or the United Kingdom, this notice supplements our privacy policy with the information the EU General Data Protection Regulation ("GDPR") and the UK GDPR require. Where this notice and the privacy policy differ for individuals in these regions, this notice prevails.

2. Controller and contact

The controller of your personal data is Corpshore Dominicana S.R.L., registered office Santo Domingo 10405, Dominican Republic, contactable at info@corpshore.solutions. We do not currently have an establishment or a representative in the EU or UK; if that changes we will update this notice.

3. What we process and why

We process the personal data you provide through the site's enquiry, proposal, application, talent-community and booking forms, and technical data needed to run and secure the site, as described in the privacy policy. We use it to respond to you, prepare proposals, evaluate applications, operate the talent community, hold discovery calls, secure the site and, with your consent, measure and improve it.

4. Lawful bases

Under Article 6 of the GDPR, we rely on the following lawful bases:

• Steps prior to a contract (Article 6(1)(b)): to respond to your enquiry, proposal request or application at your request.
• Legitimate interests (Article 6(1)(f)): to operate, secure, improve and grow our business, balanced against your rights and freedoms. You may object to processing based on legitimate interests (see rights below).
• Consent (Article 6(1)(a)): for analytics cookies and any marketing communications; you may withdraw consent at any time without affecting prior processing.
• Legal obligation (Article 6(1)(c)): where the law requires us to retain or disclose data.

We do not process special-category data through this site and ask that you not provide it in free-text fields.

5. International transfers

Corpshore Dominicana is established in the Dominican Republic and works with providers that may process data outside the EEA or UK (see the privacy policy for the list). Where personal data is transferred outside the EEA or UK, we rely on appropriate safeguards under Chapter V of the GDPR, such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where relevant) offered by those providers, together with additional technical and organisational measures as needed. You can ask us for more information about the safeguards that apply.

6. Retention

We keep personal data only for as long as necessary for the purposes set out in the privacy policy, after which we delete or irreversibly anonymise it. Specific retention periods are stated in the privacy policy.

7. Your rights

Subject to the conditions in the GDPR and UK GDPR, you have the right to:

• Access the personal data we hold about you and receive a copy of it;
• Rectification of inaccurate or incomplete data;
• Erasure ("right to be forgotten") where there is no lawful basis to keep the data;
• Restriction of processing in certain circumstances;
• Object to processing based on legitimate interests, and to direct marketing at any time;
• Portability: receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, have it transmitted to another controller;
• Withdraw consent at any time where processing is based on consent;
• not be subject to a decision based solely on automated processing that produces legal or similarly significant effects (we do not carry out such processing).

8. How to exercise your rights, and complaints

Use the data subject request form below, or contact info@corpshore.solutions. We respond within one month, which may be extended by two further months for complex or numerous requests, in which case we will tell you. There is normally no fee. You also have the right to lodge a complaint with a supervisory authority, in the EU member state of your habitual residence, place of work or the place of the alleged infringement, or, in the United Kingdom, with the Information Commissioner's Office. We would welcome the chance to address your concern first.