Tukatuka Raraunga Tāpiritanga

Ko ngā kupu pūmatua kāore i whakamāramatia i konei ka whai i te tikanga i homai i roto i te GDPR (Regulation (EU) 2016/679), ā, ina hāngai, i te UK GDPR / Data Protection Act 2018, te California Consumer Privacy Act kua whakarerekētia e te CPRA (“CCPA”), me ngā ture ōrite o ētahi atu rohe-mana.

“Personal Data” ko ngā raraunga ka tukuna e te Kiritaki, ka waihangatia rānei e te Service, e tautuhi ana, e pā ana rānei ki tētahi tangata māori kua tautuhia, ka taea rānei te tautuhi. “Sub-processor” ko tētahi rōpū tuatoru ka whakaritea e FixVibe hei tukatuka Personal Data mō FixVibe — kua whakarārangitia ki /legal/privacy.

Kei ia rōpū tōna ake kawenga ki te whai i ngā Data Protection Laws e hāngai ana ki a ia. Ko te Kiritaki te Controller, ā, ko FixVibe te Processor o te Personal Data e tukatukatia ana i raro i tēnei Tāpiritanga. Ka tukatuka a FixVibe i te Personal Data anake i runga i ngā tohutohu kua tuhia e te Kiritaki (ko te whirihoranga o te Service ka noho hei tohutohu pēnei), engari mēnā ka tonoa e te ture kia rerekē.

Ka whakarite a FixVibe kia herea ngā kaimahi kua whakaaetia ki te tukatuka Personal Data e ngā kawenga noho muna. Ka herea te urunga ki ngā raraunga production ki tētahi rōpū iti o ngā kaimahi operations i runga i te least-privilege, ka tuhia mā audit_logs, ā, ka arotakengia i ia wā. Kāore ngā kaimahi o FixVibe e uru ki ngā raraunga Kiritaki, engari hei tirotiro i ngā support tickets, hei urupare ki ngā security incidents, hei whai rānei i ngā tukanga ture.

Ka whakatinana a FixVibe i ngā tikanga hangarau me ngā tikanga whakahaere e tika ana, e ū ana ki te GDPR Art. 32, tae atu ki:

• te whakamuna i te Personal Data i te whakawhitinga (TLS 1.2+) me te wā e noho ana (database disk-level + targeted column-level AES-256-GCM mō ngā authenticated-scan headers me ngā OAuth tokens);
• te akiaki i te row-level security ki ia database table — kāore te application code e āhei ki te pānui, ki te tuhi rānei whakawhiti i ngā rohe whakahaere ahakoa he hapa noa;
• te multi-factor authentication mō ia kaiwhakamahi mā te upstream OAuth provider (Google, GitHub rānei) ina kōwhiri te Kiritaki i te social sign-in;
• te static analysis haere tonu + dependency vulnerability scanning o te FixVibe codebase ake;
• ngā backups mā te database provider me te point-in-time recovery; ka whakamātauria ia tau;
• ngā wā pupuri kua tautuhia (tirohia te Kaupapa Here Tūmataitinga) ka whakatinanahia e tētahi cron aunoa ia rā, ehara i te kupu taurangi pepa noa.

Ka whakamana te Kiritaki i a FixVibe kia whakamahi i ngā Sub-processors kua whakarārangitia i te Kaupapa Here Tūmataitinga mō ngā kaupapa kua whakaahuatia i reira. Ka uru a FixVibe ki tētahi kirimana tuhituhi me ia Sub-processor e whakatakoto ana i ngā kawenga tiaki raraunga kāore e iti iho te tiaki i ērā o tēnei Tāpiritanga, ā, ka noho tonu a FixVibe hei kawenga ki te Kiritaki mō ngā mahi me ngā hapa a te Sub-processor e pā ana ki tana tukatuka Personal Data.

Ka whakamōhio a FixVibe i te Kiritaki (mā te pānui i roto i te app, mā te īmēra rānei) mō tētahi tāpiritanga, whakakapinga rānei o ngā Sub-processors e whakaarotia ana, i te iti rawa 30 rā i mua, kia āhei ai te Kiritaki ki te whakahē. Mēnā ka whakahē te Kiritaki i runga i ngā take tiaki raraunga whaitake, ka āhei te Kiritaki ki te whakamutu i te Service mō te processing kua pāngia.

Ka tukatuka a FixVibe i te Personal Data i te nuinga ki te United States. Ina whakawhitia te Personal Data mai i te EEA, UK, Switzerland rānei ki tētahi whenua tuatoru kāore anō kia whiwhi adequacy decision, ka whakawhirinaki a FixVibe ki:

• ngā Standard Contractual Clauses a te European Commission (Decision (EU) 2021/914), Module 2 (controller-to-processor), kua whakaurua ki tēnei Tāpiritanga mā te tohutoro;
• te UK International Data Transfer Addendum ki ngā EU SCCs (te IDTA motuhake rānei), e whakaputaina ana e te ICO;
• ngā tikanga hangarau me ngā tikanga whakahaere tāpiri kua whakaahuatia i Section 4.

Ka whakamana te Kiritaki i a FixVibe kia uru ki ngā SCCs / IDTA me ia Sub-processor ka whai ake mō te Kiritaki.

Ka āwhina a FixVibe i te Kiritaki (me te whai whakaaro ki te āhua o te processing me ngā mōhiohio e wātea ana) ki te whakautu i ngā tono data subject i raro i Articles 15–22 GDPR. Ko te nuinga o ngā motika he self-serve mai i Pūkete → Tūmataitinga; mō ngā tono e toe ana, ka taea e te Kiritaki te īmēra ki support@fixvibe.app me te kaupapa “Privacy request”. Ka whakautu mātou i roto i te 30 rā.

Ka whakamōhio a FixVibe i te Kiritaki me te kore whakaroa koretake (ā, ahakoa pēhea, i roto i te 72 haora i muri i te mōhiotanga) mō tētahi Personal Data breach e pā ana ki te Customer Personal Data, me te tuku i ngā mōhiohio e tika ana kia tonoa e te Kiritaki kia ū ai ia ki ōna ake kawenga Article 33 / 34, tae atu ki te āhua o te breach, ngā kāwai me te maha tata o ngā data subjects me ngā records e pāngia ana, ngā hua pea, me ngā tikanga kua mahia, kua whakaarotia rānei hei whakatika.

Ka tukuna e FixVibe ki te Kiritaki ngā mōhiohio e tika ana hei whakaatu i te ū ki tēnei Tāpiritanga, tae atu ki tēnei tuhinga, te Kaupapa Here Tūmataitinga, te Kaupapa Here Whakamahi Whakaaetia, ngā Terms, me ngā pūrongo haumaru rōpū tuatoru kei a mātou (ka tohaina ēnei i raro i te NDA ina tonoa). Ka whakaae, ka whai wāhi hoki a FixVibe ki ngā audits, tae atu ki ngā inspections, e whakahaeretia ana e te Kiritaki, e tētahi atu auditor rānei kua tohua e te Kiritaki, me te pānui whaitake i mua, i ngā haora pakihi hoki, kaua e neke atu i te kotahi wā i ia tau maramataka (hāunga mēnā ka tonoa e tētahi regulator kia rerekē, mēnā rānei he Personal Data breach).

I te whakamutunga o te Service, ā, i runga i te kōwhiringa a te Kiritaki, ka muku, ka whakahoki rānei a FixVibe i ngā Personal Data katoa i tukatukatia mō te Kiritaki i roto i te 30 rā, engari ki te whānuitanga e tonoa ana a FixVibe e te ture e hāngai ana kia pupuri tonu (hei tauira, ngā records tāke / billing). Ko te rere mukunga pūkete self-serve i Pūkete → Tūmataitinga ka whakaoho tonu i tēnei.

Mō ngā kaupapa o te CCPA, ko FixVibe he “Service Provider” ā, ko te Kiritaki he “Business” mō tētahi Personal Information ka tukatukatia i raro i tēnei Tāpiritanga. Kāore a FixVibe e:

• hoko, tohatoha rānei (e ai ki ngā whakamāramatanga o aua kupu i raro i te CCPA) i te Personal Information;
• pupuri, whakamahi, whakaatu rānei i te Personal Information mō tētahi kaupapa kē atu i te kaupapa pakihi motuhake o te tuku i te Service, tae atu ki waho o te hononga pakihi tika i waenga i a FixVibe me te Kiritaki;
• whakakotahi i te Personal Information i riro mai i te Kiritaki ki te Personal Information i riro mai i tētahi atu pūtake, hāunga te mea kua tino whakaaetia e te CCPA.

Ka whakaū a FixVibe kua mārama ia ki ēnei here, ā, ka ū ki aua here.

Mēnā he taupatupatu i waenga i tēnei Tāpiritanga me ngā Tikanga o te Ratonga, ka mana ake tēnei Tāpiritanga ki te whānuitanga o taua taupatupatu. Ka mana ake ngā SCCs / IDTA i runga i ēnei e rua ina hāngai.

Mō ngā take tiaki raraunga katoa, tae atu ki te whakamahi i ngā motika data subject me ngā pātai mō ngā Sub-processors, whakapā atu ki EGO HERO LLC:

• email: support@fixvibe.app (whakamahia te rārangi kaupapa “DPA” mō te routing)
• postal: ka wātea te wāhitau ina tonoa mā te īmēra i runga ake nei