Controller / Processor roles
For personal data of your end customers that you upload or connect (reviewer contact lists, CRM connections, uploaded contacts), RHAWK acts as a Processor and you act as the Controller. For personal data we collect about you as our customer (account, billing, support), we act as the Controller.
Your rights
If you are an EEA, UK or Swiss resident you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your data ("right to be forgotten").
- Restrict or object to certain processing.
- Data portability - receive your data in a machine-readable format.
- Withdraw consent at any time.
- Complain to your local supervisory authority.
To exercise any of these rights, email privacy@ratehawk.app. We respond within 30 days.
Lawful bases
We rely on: performance of a contract (delivering the Services); legitimate interests (product security and improvement, direct marketing to existing customers); consent (marketing to prospects, non-essential cookies); and legal obligation (tax, accounting).
International data transfers
Our infrastructure is hosted in the United States. Transfers of personal data from the EEA / UK / Switzerland to the US are covered by the EU Standard Contractual Clauses (2021/914) and the UK IDTA. We can share the executed clauses on request.
Data Processing Agreement (DPA)
We offer a pre-signed DPA and a list of sub-processors. Email privacy@ratehawk.app to request them. The current sub-processor list is on the Security page.
Data Protection contact
RHAWK, Attn: Data Protection - privacy@ratehawk.app.