# GDPR Compliance Statement

## _Our Commitment to Your Privacy_

### Yes! We are GDPR compliant.

We are committed to ensuring the security and protection of the personal information we process while maintaining a consistent and compliant approach to data protection.

#### To demonstrate our compliance, we:

- Comply with the security and privacy measures required under the [General Data Protection Regulation (GDPR)](https://gdpr.eu/).
- Self-certify under the [Data Privacy Framework](https://www.dataprivacyframework.gov/) to enable transfer of personal data to the United States.
- Include language in our [Privacy Notice](/content/Home/PrivacyNotice/index.html) supporting GDPR and Data Privacy Framework privacy protections.
- Have procedures and policies to restrict processing of personal information. Data Processing Agreements are signed with EU enterprise clients. A copy of our DPA can be requested by [contacting us](/content/Home/Contact/index.html).
- Maintain internal policies and procedures for data breach and incident response management.
- Collect only the minimal amount of personal data necessary and allow facilitators the option to collect no personal data from assessment participants.
- Process all personal data fairly and lawfully.

#### Your Rights under GDPR

We respect your data protection rights under the GDPR. To exercise your data subject rights, please [contact us](/content/Home/Contact/index.html).

- **Right to access** - You have the right to request copies of your personal data.
- **Right to rectification** - You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
- **Right to erasure** - You have the right to request that we erase your personal data, under certain conditions.
- **Right to restrict processing** - You have the right to request that we restrict the processing of your personal data, under certain conditions.
- **Right to object to processing** - You have the right to object to our processing of your personal data, under certain conditions.
- **Right to data portability** - You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

|     |     |     |
| --- | --- | --- |
|  |  |  |
|  |  |  |
|  |  |  |