{"text_format":"2","workbook":"xlsx","n_sheets":1,"sheets":["Sheet1"],"not_rendered":{"charts":0,"images":0,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Sheet1","index":0,"n_rows":13,"n_cols":11,"rows_kept":13,"cut":false,"hidden":false,"merged":[]}
[]
["Country-Specific Table","Applicable Privacy Law","Legal Basis","Rights Regarding Your Data",null,"Column 5","Column 6","Column 7","Column 8","Column 9","Column 10"]
["Country"]
["Argentina","Personal Data Protection Act 25.326 (‘PDPA’)","Process sub a), b) consent , c) legal obligation, d) consent, e) legal obligation, f), g) Contract, , h) legal obligation, i), j) Contract k) legal obligation, l), m), n), o) contract, m) contract, n), o) and p) legal obligation","Right of access. Individuals have the right to access and receive a copy of their personal data, and other supplementary information; Right to restrict processing. In certain circumstances, individuals have the right to restrict the processing of their personal data, limiting the way that an organization uses their data; Right to Rectification, updating or suppression: The person responsible for or the user of the data bank, must proceed to rectify, suppress or update the personal data belonging to the affected party, by performing the operations necessary for such purpose within the maximum term of five business days of the complaint being received or the mistake or false information being noticed. Right to information: organizations are expected to respond to Data Subject's request without costs and in the terms as provided in regulation. Right to make a petition. without prejudice to any other administrative or judicial dispute, individuals have the right to raise a petition before the Argentinian data protection authority ('AAIP'), if they believe the data processing has been carried out illicitly or not compliant with PDPA.","Text 4","Text 5","Text 6","Text 7","Text 8","Text 9","Text 10"]
["Australia","Federal Privacy Act 1988 and its Australian Privacy Principles (“APPs”)","Process sub a) consent, b) legitimate interest, c) legal obligation, d), e), f), g) legitimate interest, h) contract, i), j), k), legitimate interest, l) contract, m) contract, n), o) and p) legitimate interest","Right of access. Individuals have the right to access to their personal data; Right to rectification. In certain circumstances, individuals have the right to have inaccurate personal data rectified.","Text 4","Text 5","Text 6","Text 7","Text 8","Text 9","Text 10"]
["Brazil","Brazilian Data Protection Law (“LGPD”)","Process sub a) consent, b) Contract, c) legal obligation, d), legitimate interest of the Data Controller, e)  regular exercise of rights, f), g), Contract, h) legal obligation, i), j) Contract k) regular exercise of rights, l), m), n), o)contract, and p) regular exercise of rights","Right of access or confirmation of existence of the Data. Individuals have the right to access and receive a copy of their personal data, and other supplementary information; Right to correction. In certain circumstances, individuals have the right to obtain from the Controller the correction of incomplete, inaccurate or out-of-date Data; Right to anonymization, blocking or deletion. In certain circumstances, individuals have the right to obtain from the Controller to anonymize, block or delete of unnecessary or excessive Data or Data processed in noncompliance with the provision of the LGPD. The Controller shall immediately inform the processing third parties with which she/he carried out the shared use of Data so that they can repeat an identical procedure; Right to data portability. In certain circumstances, individuals have the right to receive personal data they have provided to a Controller in a structured, commonly used and machine-readable format, or to request that a Controller transmits this data directly to another Controller, especially following these conditions: the processing is based on consent or on a contract and the processing is carried out by automated means; Right to make a petition. without prejudice to any other administrative or judicial dispute, individuals have the right to raise a petition before the Data Protection National Authority – ANPD, if they believe the data processing has been carried out illicitly or not compliant with LGPD; Right to Object to automated decision making: The controller must provide, whenever requested, clear and adequate information regarding the criteria and procedures used for the automated decision, observing commercial and industrial secrets. Right to Opt-out when the treatment of personal data is above the legal basis of consent: an organization must, upon request, interrupt the processing of personal data when it’s above the legal basis of consent; Right to information: organizations are expected to respond to Data Subject's request without costs and in the terms as provided in regulation.","Text 4","Text 5","Text 6","Text 7","Text 8","Text 9","Text 10"]
["Canada","Personal Information Protection and Electronic Documents Act 2000 (“PIPEDA”)","Contract","Right of access. Individuals have the right to access the personal data the Company holds about them; Right to challenge. In certain circumstances, individuals have the right to challenge the accuracy and completeness of the information, and have that information amended as appropriate; Right to deletion. In certain circumstances, individuals have the right to delete any of their personal data the Company collects from the individual  when the information is no longer necessary for the Company. Right to opt-out of processing. Individuals have the right to opt out or withdraw consent to our processing of the individua’s personal data. Right to lodge a complaint with a supervisory authority. Individuals have the right to lodge a complaint about an issue that they believe infringes their rights. In particular they can lodge a complaint with the Office of the Privacy Commissioner of Canada (‘OPC’) see as follows:  https://www.priv.gc.ca/en/report-a-concern/","Text 4","Text 5","Text 6","Text 7","Text 8","Text 9","Text 10"]
["European Economic Area","General Data Protection Regulation (“GDPR”)","Process sub a) consent, b) legitimate interest, c) legal obligation, d), e), f), g) legitimate interest, h) contract, i), j), k), legitimate interest, l) contract, m) contract, n), o) and p) legitimate interest","Right of access. Individuals have the right to access and receive a copy of their personal data, and other supplementary information; Right to rectification. In certain circumstances, individuals have the right to have inaccurate personal data rectified; Right to erasure. In certain circumstances, individuals have the right to have their personal data deleted; Right to restriction processing. In certain circumstances, individuals have the right to restrict the processing of their personal data, limiting the way that an organization uses their data; Right to data portability. In certain circumstances, individuals have the right to receive personal data they have provided to a controller in a structured, commonly used and machine-readable format, or to request that a controller transmits this data directly to another controller. The right to object. In certain circumstances, individuals have the right to object to the processing of their personal data for a particular purpose; Right to lodge a complaint with a supervisory authority. Individuals have the right to lodge a complaint about an issue that they believe infringes their rights. In particular they can lodge a complaint with the supervisory authority in the EEA member state of their habitual residence, place of work or place of the alleged infringement. For a list of supervisory authorities, and their respective contacts, see: https://edpb.europa.eu/about-edpb/aboutedpb/members_en#member-at","Text 4","Text 5","Text 6","Text 7","Text 8","Text 9","Text 10"]
["Japan","Act on the Protection of Personal Information (“APPI”)","Contract (the data subjects have been notified about the purposes of utilization prior to the collection of personal data through this notice)","Right to access. The Company will have to disclose to Individuals their personal data held by it; Right to revise, correct, amend, or delete Individuals’ personal data; Right to request the cessation of use of Individuals’ personal data if it is used for a purpose other than the one originally stated, or if it was acquired by fraudulent or other unlawful means; Right to require the Company to cease using personal data or to cease transferring personal data to third parties if the Individual no longer needs to use the data, a data breach has occurred, or there is a likelihood of infringement of the principal's rights or lawful interests due to the Company's handling of the personal data.","Text 4","Text 5","Text 6","Text 7","Text 8","Text 9","Text 10"]
["South Africa","Protection of Personal Information Act, ('POPIA')","Process sub a) consent, b) legitimate interest, c) legal obligation, d), e), f), g) legitimate interest, h) contract, i), j), k), legitimate interest, l) contract, m) contract, n), o) and p) legitimate interest","Right to access. Individuals have the right to request the Company to confirm whether or not it holds personal information about them. Right to request the Company to correct, delete, or destroy personal information about the Individuals in its possession or under its control.","Text 4","Text 5","Text 6","Text 7","Text 8","Text 9","Text 10"]
["United Kingdon","UK General Data Protection Regulation (“UK GDPR”)","Process sub a) consent, b) legitimate interest, c) legal obligation, d), e), f), g) legitimate interest, h) contract, i), j), k), legitimate interest, l) contract, m) contract, n), o) and p) legitimate interest","Right of access. Individuals have the right to access and receive a copy of their personal data, and other supplementary information; Right to rectification. In certain circumstances, individuals have the right to have inaccurate personal data rectified; Right to erasure. In certain circumstances, individuals have the right to have their personal data deleted; Right to restriction processing. In certain circumstances, individuals have the right to restrict the processing of their personal data, limiting the way that an organization uses their data; Right to data portability. In certain circumstances, individuals have the right to receive personal data they have provided to a controller in a structured, commonly used and machine-readable format, or to request that a controller transmits this data directly to another controller; Right to object. In certain circumstances, individuals have the right to object to the processing of their personal data for a particular purpose; Right to lodge a complaint with a supervisory authority. Individuals have the right to lodge a complaint about an issue that they believe infringes their rights. In particular they can lodge a complaint with the supervisory authority in UK: https://ico.org.uk/","Text 4","Text 5","Text 6","Text 7","Text 8","Text 9","Text 10"]
["United States (California)","California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”)","For business purposes as listed in the Section 2 of the Privacy Notice","Right to know. You have the right to request that Company disclose certain information to you about our collection and use of your Personal Information over the past 12 months, subject to certain exceptions. You may make a Right to Know a total of two (2) times within a 12-month period at no charge. Access to Specific Pieces of Information (Data Portability). You also have the right to request that we provide you with a copy of the specific pieces of Data that we have collected about you, including any Data that we have created or otherwise received from a third party about you, subject to certain exceptions. You may make a Right to Know a total of two (2) times within a 12-month period at no charge. Correction. You have the right to request that we correct any incorrect Data about you to ensure that it is complete, accurate, and as current as possible, subject to certain exceptions. Deletion. You have the right to request that we delete any of your Data that we collected from you and retained, subject to certain exceptions. Note on the right to opt-out of the “Sale” or Sharing” of Data. We do not disclose your Data to third parties for monetary consideration, and we do not disclose your Data to third parties for the purpose of cross-context behavioral advertising. In the preceding twelve (12) months, we have not “sold” your Data for either monetary or other valuable consideration, and we have not “sold” any Data about minors under the age of 16. In the preceding twelve (12) months, we have not “shared” your Data for the purpose of cross-context behavioral advertising, and we have not “shared” any Data about minors under the age of 16.","Text 4","Text 5","Text 6","Text 7","Text 8","Text 9","Text 10"]
["Uruguay","Law No. 20075 of 20 October 2022","Law No. 20075 of 20 October 2022","Right to access all the information that concerns the Individual. Right to rectify all inaccurate data, and the rights to update and include information to Individuals’ data. Right to have data deleted from a database in case it is being used by third parties illegitimately, or it is considered to be inadequate or excessive, with certain exceptions. Right to information: organizations are expected to respond to Data Subject's request without costs and in the terms as provided in regulation. Right to Opt-out when processing of personal data for advertising purposes. Right Not to be Subject to Automated Decision-Making: The controller must provide, whenever requested, clear and adequate information regarding the criteria and procedures used for the automated decision, observing commercial and industrial secrets. Right to make a petition. without prejudice to any other administrative or judicial dispute, individuals have the right to raise a petition before the Unidad Reguladora y de Control de Datos Personales - URCDP, If you believe that there has been a violation of the rights of data subject.","Text 4","Text 5","Text 6","Text 7","Text 8","Text 9","Text 10"]