Data Processing & GDPR Notice

Last updated: May 24, 2024

This notice supplements our Privacy Policy and describes how Outbox Origin (Arknuo Ventures Private Limited) processes personal data of individuals located in the European Economic Area (EEA) and United Kingdom, in line with the General Data Protection Regulation (GDPR).

1. Controller and Processor Roles

Where we determine the purposes and means of processing personal data (for example, website visitor data), we act as a data controller. Where we process personal data on behalf of a client (for example, running campaigns using a client's customer data), we act as a data processor under the client's instructions.

2. International Data Transfers

As an India-based company, we may transfer personal data outside the EEA. Where we do, we rely on appropriate safeguards such as Standard Contractual Clauses, or your explicit consent where applicable.

3. Data Processing Agreements

Clients who require a Data Processing Agreement (DPA) to cover our processing of their customers' data may request one by contacting our Grievance Officer.

4. Your Rights Under GDPR

• Right of access to your personal data.
• Right to rectification of inaccurate data.
• Right to erasure (“right to be forgotten”).
• Right to restrict or object to processing.
• Right to data portability.
• Right to lodge a complaint with your local supervisory authority.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in our Privacy Policy, or as required by law.