Terms and Policies
Privacy PolicyTerms of ServiceGDPROur DataVulnerability DisclosureService Level Agreement

General Data Protection Regulation (GDPR)

About GDPR

Organizations established in the EU processing personal data of EU-based individuals are required to comply with the GDPR as of May 25, 2018. The regulation updates and harmonizes the framework for processing personal data in the European Union, introducing new obligations for organizations and rights for individuals.

Worldwide Product Compliance

Longlist has adopted GDPR principles across its entire platform worldwide. The company believes that “uniform rules and program logic will greatly enhance our customers’ ability to comply with the GDPR’s requirements.”

Your Rights Regarding Personal Information

Longlist respects privacy rights and allows users to exercise the following rights:

1. Right of Access

  • Request access to personal information processed by Longlist
  • Obtain free information about:
    • Processing purposes
    • Categories of personal information
    • Recipients of personal information
    • Storage duration
    • Privacy rights
    • Data transfer details

2. Right of Rectification

  • Request changes, updates, or completion of personal data
  • Longlist may rectify or remove incomplete or inaccurate information

3. Right of Erasure

  • Request deletion of personal information
  • Data will be erased if no overriding legitimate interest exists

4. Right of Restriction of Processing

  • Request limitation of personal information processing
  • Contact privacy@longlist.io with relevant information

5. Right to Data Portability

  • Receive personal information in structured, machine-readable format
  • Contact privacy@longlist.io

6. Right to Object to Data Processing

Note: These rights are not absolute and may be subject to legitimate interests and regulatory requirements.

Retention

Personal information will be retained:

  • As necessary to provide services
  • To comply with legal obligations
  • To resolve disputes
  • To enforce policies

Retention periods are determined based on:

  • Type of information collected
  • Purpose of collection
  • Applicable requirements
  • Need to destroy outdated information

Contrary to common belief, consent is not the only basis for lawful processing. Longlist’s lawful basis is its “legitimate interest in providing its services to its users.”