Your Data Protection Rights

As a user of Boardfolio, you have specific rights regarding your personal data, as outlined in the Vistra Group Privacy Notice, which applies to Boardfolio services. These rights, aligned with GDPR and other data protection regulations, include:

• Right to Access: You can request access to the personal data we hold about you.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
• Right to Erasure: You may request the deletion of your personal data under certain conditions.
• Right to Restrict Processing: You can request limitations on how we process your data.
• Right to Object: You can object to certain types of data processing, such as for marketing purposes.
• Right to Data Portability: You can request a copy of your data in a structured, commonly used, and machine-readable format.

These rights ensure you have control over your personal information and how it is used.

Where to Find Information on Your Rights

To learn more about your user rights, refer to the following key resources:

1. Vistra Group Privacy Notice
   The Privacy Notice provides a comprehensive overview of how Vistra, including Boardfolio, collects, uses, protects, and discloses personal data. It details your rights and how we comply with data protection laws. You can access it at:
   www.vistra.com/en/privacy-notice.
   The latest version, effective June 30, 2024, is available for download on the Vistra website.

2. Boardfolio Data Processing Addendum (DPA)
   The DPA outlines how Boardfolio, as a data processor, handles personal data on behalf of clients (data controllers). It confirms our commitment to supporting data subject rights, such as access, rectification, or deletion, in compliance with GDPR. You can view the DPA at:
   Boardfolio DPA.
   
   

How to Exercise Your Rights

To exercise your data protection rights or request further details:

• Contact Our Support Team: Submit a ticket through Boardfolio’s support portal at boardfolio.vistra.com. Our team will assist with requests related to accessing, correcting, or deleting your data.
• Review the Privacy Notice: Visit the Vistra Privacy Notice for a detailed explanation of your rights and the process for submitting requests.
• Refer to the DPA: For specifics on how we handle data subject requests, consult the Boardfolio DPA linked above.
  
  

Our Commitment to You

Boardfolio adheres to robust security and compliance standards, including ISO/IEC 27001:2013 certification and GDPR compliance. We use secure SSL/TLS-protected channels for data in transit and Transparent Data Encryption (TDE) for data at rest to safeguard your information. Our data handling practices are designed to ensure transparency, security, and accountability.

If you have any questions about your user rights or need assistance, please raise a ticket via our support portal, and our team will respond promptly.