GDPR & Data Protection

Cited, Inc., operating under the AcuGIS name ("AcuGIS"), provides this notice as additional information for individuals whose personal data is protected by the European Union General Data Protection Regulation (GDPR), the UK GDPR, or similar data-protection laws.

This notice supplements our Privacy Policy.

Our Role

Depending on the circumstances, Cited, Inc. may act as either a data controller or a data processor.

When you purchase products from us, maintain an AcuGIS account, contact us, or otherwise interact directly with AcuGIS, we may act as the controller of personal data necessary to manage that relationship.

When a customer uses an AcuGIS hosted service to process personal data under the customer's direction, the customer will generally determine the purposes and means of that processing and AcuGIS may act as a processor.

Lawful Bases for Processing

Where the GDPR applies, we process personal data under one or more lawful bases, which may include:

• Performance of a contract
• Compliance with a legal obligation
• Our legitimate business interests
• Your consent, where consent is appropriate or required

The applicable basis depends upon the information and the purpose for which it is processed.

Data We Process

Personal data may include contact information, account information, transaction records, support communications, IP addresses, service activity, and other information necessary to provide our products and services.

More information about the information we collect and how we use it is provided in our Privacy Policy.

Your Rights

Subject to applicable law, you may have the right to:

• Access your personal data
• Correct inaccurate personal data
• Request deletion of personal data
• Restrict certain processing
• Object to certain processing
• Receive certain personal data in a portable format
• Withdraw consent where processing is based on consent

These rights may be subject to exceptions and limitations under applicable law.

Exercising Your Rights

Requests regarding your personal data may be submitted to:

hello@citedcorp.com

We may need to verify your identity before completing a request.

If AcuGIS processes personal data solely on behalf of one of our customers, we may direct your request to that customer because the customer controls the data and determines how it is processed.

Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining required business records, resolving disputes, and meeting legal obligations.

International Data Transfers

Because AcuGIS provides services internationally, personal data may be processed outside the European Economic Area or United Kingdom.

Where required, appropriate safeguards will be used for transfers of personal data between jurisdictions.

Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction.

Personal Data Breaches

Where applicable law requires notification of a personal data breach, we will provide the required notification to the appropriate supervisory authority and/or affected individuals within the time required by law.

When we act as a processor for a customer, we will notify the customer as required by our applicable agreement and law.

Data Processing Agreements

Customers that require a Data Processing Agreement (DPA) in connection with their use of an AcuGIS hosted service may contact us.

Complaints

Individuals covered by the GDPR or UK GDPR may have the right to lodge a complaint with the data-protection supervisory authority responsible for their jurisdiction.

We encourage you to contact us first if you have a question or concern so that we can attempt to resolve it.

Contact

Cited, Inc.
Wilmington, Delaware, USA

Email: hello@citedcorp.com