1. Introduction
Tasca Therapeutics Corporation (referred to as “Tasca”, “the Company”, “We”, “Our” or “Us”) are committed to protecting the privacy and security of your Personal Data.
This Tasca Privacy Notice applies to you if you are:
A service user of this website (https://www.tascatx.com/);
A Tasca clinical trial participant;
A healthcare professional conducting a Tasca clinical trial;
An employee, contractor or other associated party of Tasca;
An employee, contractor or other associated party contracted by Tasca’s Service Providers; or,
Any other individual with whom Tasca may conduct commercial operations.
We have developed this Privacy Notice to inform you of the data we collect, what we do with your information, what we do to keep it secure as well as the rights and choices you have over your Personal Data. It is important that you read this notice so that you are aware of how and why we are using such information.
2. Definitions
For the purposes of this Tasca Privacy Notice:
Company (referred to as either “Tasca”, “the Company”, “We”, “Us” or “Our” in this Privacy Notice) refers to Tasca Therapeutics Corporation of 55 Spinelli Place, Cambridge, MA 02138, USA.
Cookies are small files that are placed on Your computer, mobile device, or any other device by a website, containing the details of Your browsing history on that website among its many uses.
Data Controller, for the purposes of Data Protection Legislation, refers to the Company as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.
Data Processor, for the purposes of Data Protection Legislation, refers to the Company’s Service Providers.
Data Protection Legislation, has the meaning given in the Data Protection Legislation section below.
Device means any device that can access the Service such as a computer, a mobile phone, or a digital tablet.
Personal Data is any information that relates to an identified or identifiable individual.
For the purposes of Data Protection Legislation, Personal Data means any information relating to You such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity.
Service refers to the Website, unless otherwise stated.
Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analysing how the Service is used. For the purpose of Data Protection Legislation, Service Providers are considered Data Processors.
Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
Website refers to the Tasca website, accessible from https://www.tascatx.com/
You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable. Under Data Protection Legislation, You can be referred to as the Data Subject or as the User as you are the individual using the Service.
3. Data Protection Legislation
Throughout this document we refer to Data Protection Legislation.
United States
In the context of the United States of America (“USA”), Data Protection Legislation refers to any federal, state, sectoral, or case laws and regulations which govern the privacy and security of Personal Data insofar as these laws apply to Tasca and the context of Tasca’s Processing of Personal Data. This definition also encompasses any legislation implemented under these laws and any replacement or additional legislation enacted from time to time.
European Union (EU) and European Economic Area (EEA)
In the context of the European Union (“EU”) and/or European Economic Area (“EEA”), Data Protection Legislation means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Text with EEA relevance) as amended from time to time, and inclusive of any applicable data protection laws, regulations, and secondary legislation of the EU and/or any Member State of the EEA, in each case as amended or updated from time to time (collectively, the “EU GDPR”).
United Kingdom
In the context of the United Kingdom (“UK”), Data Protection Legislation means the Data Protection Act 2018 and the UK GDPR as defined in section 3(10) (as supplemented by section 205(4)) of the Data Protection Act 2018 (collectively the “UK GDPR”; and collectively with the EU GDPR, the “GDPR”) as amended from time to time, and inclusive of any applicable data protection laws, regulations, and secondary legislation of the UK.
Republic of Serbia
In the context of the Republic of Serbia, Data Protection Legislation means the Law on Personal Data Protection of the Republic of Serbia (Official Gazette of the Republic of Serbia No. 87/2018), inclusive of any laws amending, supplementing, replacing or re-enacting it, as amended or replaced from time to time (the “Serbian Data Protection Law”).
Tasca is the Data Controller for the Personal Data we process, unless otherwise stated.
We have appointed a Data Protection Officer (DPO) to help us monitor internal compliance, inform and advise on data protection obligations, and act as a point of contact for data subjects and supervisory authorities. For further details on how you can contact our DPO, please see the Contact Us section below.
4. Your Personal Data
We only collect Personal Data that we know we will genuinely use and in accordance with the Data Protection Legislation and/or legislation related to clinical trials, such as the EU Clinical Trials Regulation (“EU CTR”) or equivalent legislation. Unless otherwise specified in a separate Notice we provide to you, we will collect your Personal Data directly from you. The type of Personal Data that we will collect about you will depend on whether you are a clinical trial participant, a healthcare professional, an employee, or a user of this website:
Clinical Trial participant
Your name*
Your date of birth*
Your year of birth / age
Your gender
Your contact information (telephone number or email address)*
Where applicable, the name of your legally authorised representative*
Where applicable, the name and contact details of your partner*
Your pseudonymised unique identification number(s)
Your health data
Your genetic data
Your ethnicity
Healthcare professional (HCP)
Your name
Your contact information (telephone number, email address, or mailing address)
Your employment details
Your professional experience
Your research information, including interactions with our research and clinical trials
Where relevant, your pseudonymised unique identification number(s) (e.g., license no.)
Where applicable, your financial information (e.g., bank information)
Where applicable, financial disclosure information regarding you, your spouse, and any adult children
Where relevant, your criminal convictions and offences data (e.g., for disbarment checks)
Employees and Contractors of Tasca or Tasca’s Service Providers
Your name
Where relevant, Your date of birth
Your contact information (telephone number, email address, or mailing address)
Your employment details
Your professional experience
Where relevant, your pseudonymised unique identification number(s) (e.g., payroll no.)
Where relevant, your financial information (e.g., bank information)
Where relevant, your health data (e.g., sick leave information)
Where relevant, your criminal convictions and offences data (e.g., for disbarment checks)
Website User†
Your name
Your contact information (email address)
Your Contact Us form responses
Your Usage Data (e.g., your IP address)
Cookies and Tracking Technologies
*This participant identifiable information is collected by Tasca’s Research Sites, acting on Tasca’s behalf. This data may be shared with clinicians, health authorities, ethics bodies and other personnel as authorised by Tasca, but only where Tasca is legally obligated to provide this data in accordance with Clinical Trial Regulations and other applicable laws. Tasca will not directly receive participant identifiable information and will not instruct Research Sites or other bodies to process or share this information other than where the law requires.
† You are under no statutory or contractual requirement or obligation to provide us with your Personal Data; however, we require at least the information identified above under Website User in order for us to deal with you as a Service User in an efficient and effective manner.
5. Cookies, Analytics and Tracking Technologies
We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyse Our Service.
You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service.
Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close your web browser. We use both session and persistent Cookies for the purposes set out below:
Necessary and Required Cookies
Type: Session Cookies
Administered by: Us / SquareSpace
Purpose: These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that You have asked for cannot be provided, and We only use these Cookies to provide You with those services.
Analytics and Performance Cookies
Type: Persistent Cookies
Administered by: Us / SquareSpace
Purpose: These Cookies are used to track information about traffic to the Website and how users use the Website. The information gathered via these Cookies may directly or indirectly identify you as an individual visitor. This is because the information collected is typically linked to a pseudonymous identifier associated with the device you use to access the Website. We may also use these Cookies to test new pages, features, or functionality of the Website to see how our users react to them.
Cookie Name, Description and Type:
crumb:
Description: Squarespace cookies used for security purposes
Type: necessary and required cookies
ss_cvr:
Description: Squarespace cookies used for analytics purposes
Type: analytics and performance cookies
ss_cvt:
Description: Squarespace cookies used for analytics purposes
Type: analytics and performance cookies
We and the third parties we work with use cookies and similar tracking technologies to collect information about your use of the Services, such as your IP address, browser type, browser version, pages viewed, time spent on pages, links clicked and conversion information. This information may be used by us and others to, among other things, analyse and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on the Services and other websites, provide customer support, troubleshoot issues with and improve the operation of our Website and Services, and better understand your online activity.
6. Our Purposes
We may use your information for the following purposes:
Your Consent: GDPR, Article 6(1)(a); GDPR, Article 9(2)(a)
Purpose:
Clinical Trial Operations (Your Consent): Where you are a clinical trial participant in a jurisdiction where clinical trials occur on the lawful basis of Consent, or where you have consented to future research, to collect information from you and process your health information in order to conduct a clinical trial.
Legal Obligation to comply with applicable Clinical Trial Law: GDPR, Article 6(1)(c); GDPR, Article 9(2)(j)
Purpose:
Clinical Trial Compliance: Where you are a clinical trial participant in a jurisdiction where clinical trial regulations require sponsors to conduct certain activities, such as safety reporting, to collect information from you and process your health information in order to safely conduct a clinical trial and meet our legal obligations regarding clinical trial regulations.
Our Legitimate Interest in conducting clinical activities: GDPR, Article 6(1)(f)
Purpose:
Research Operations (Healthcare Professional Administration): Where you are a healthcare professional involved in the planning, delivery, or oversight of Tasca clinical trials, to collect information from you and process your employment information in order to conduct a clinical trial.
Contractual Obligation: GDPR, Article 6(1)(b)
Purpose:
Employment: To the extent that you are located in the EU, EEA, UK, or Republic of Serbia, where you are an employee, contractor, or consultant of Tasca, to collect information from you for the purposes of fulfilling our contractual obligations with you.
Our Legitimate Interest in managing our affairs: GDPR, Article 6(1)(f)
Purpose:
Service Providers (Legitimate Interest): To the extent that you are located in the EU, EEA, UK, or Republic of Serbia, where you are an employee, contractor, or consultant of Tasca’s Service Providers, to collect information from you or your employer.
Our Legitimate Interest in managing our affairs: GDPR, Article 6(1)(f)
Purpose:
Service Providers (Performance): To the extent that you are located in the EU, EEA, UK, or Republic of Serbia, where you are an employee, contractor, or consultant of Tasca’s Service Providers, to collect information from you or your employer and liaise with your employer about your contact details and/or the nature and performance of your work, as required.
Our Legitimate Interest in providing Services to you: GDPR, Article 6(1)(f)
Purpose:
Service Provision: To collect the information as identified above from you and monitor, provide and maintain our Services.
Our Legitimate Interest in responding to your inquiries: GDPR, Article 6(1)(f)
Purpose:
Inquiries: To contact you following your inquiry where you have provided your contact information and to reply to any questions, suggestions, issues, or complaints, including any Data Subject Requests, about which you have contacted us.
Our Legitimate Interest in providing a secure platform: GDPR, Article 6(1)(f)
Purpose:
Security: To collect your Usage Data in order to power our security measures and Services so you can safely access our website and other Services.
Our Legitimate Interest in contacting you about our Services: GDPR, Article 6(1)(f)
Purpose:
Service Messages: To contact you, where you have provided your contact information, about news and information relating to our Services through service messages.
Our Legitimate Interest in undertaking direct marketing: GDPR, Article 6(1)(f)
Purpose:
Direct Marketing (Legitimate Interest): B2B direct marketing to you, where you have provided your contact information, where you are classified as a corporate subscriber, the ‘soft opt-in’ applies under the UK PECR and/or EU ePrivacy legislation, and/or you have not opted out of such communications under any applicable US Data Protection Legislation.
Vital Interest: GDPR, Article 6(1)(d); GDPR, Article 9(2)(c)
Purpose:
Vital Interest: Monitor your health in order to safeguard and protect you, or to act in your vital interest, or the vital interest of a third party.
Legal Obligation, including, but not limited to, our Legal Obligation to comply with Employment Law: GDPR, Article 6(1)(c); GDPR, Article 9(2)(b)
Purpose:
Legal Obligation: To comply with our legal obligations, such as retaining any accounting information generated during the course of our interaction for statutory accountancy retention periods.
Our Legitimate Interest in managing any legal claims: GDPR, Article 6(1)(f); GDPR, Article 9(2)(f)
Purpose:
Legal Claims: To respond to and defend against legal claims, where you have provided us with information which may give rise to legal claims.
7. Criminal Convictions and Offences
Where you are an employee, contractor, or consultant for Tasca, or a healthcare professional working on one of Tasca’s clinical trials – or you are a candidate for such a role – and depending on the jurisdiction in which you operate and on the specific role in question, we may collect information about your criminal convictions and offences to the extent permitted by applicable law. In some jurisdictions, we may request your consent to process this information. We do this to check that you have not been disbarred from research activity in certain jurisdictions and to satisfy ourselves that there is nothing in your criminal convictions and offences history which makes you unsuitable for the role. Our roles require a high degree of trust and integrity, and it is therefore best practice to undertake such checks and a prerequisite in some instances.
We will only collect and use information relating to criminal convictions where the law allows us to do so. This will usually be where such processing is necessary to carry out our obligations, or where we have an overriding legitimate interest to do so and provided we do so in line with our Data Protection Policy. We have in place appropriate policies and safeguards which we are required by law to maintain when processing such data.
8. Artificial Intelligence
As part of our ongoing efforts to improve our efficiency, we may use artificial intelligence (“AI”) tools to support data analysis, communication, and system functionality.
Where AI tools are used, we take steps to ensure that personal data is minimised, protected, and processed in accordance with applicable data protection law, and we do not intentionally submit personal data to publicly available AI models without appropriate safeguards.
Our use of AI tools for processing your personal data is carried out on the basis of our Legitimate Interests to conduct clinical research. We balance our interests against your data protection rights and apply appropriate safeguards to protect your personal data.
If you have any questions or concerns about this processing, please contact our Data Protection Officer on the contact email address set out in the Contact Us section.
9. Third Parties
We may share your personal data with other organisations in the following circumstances:
From time to time, we may need to share your Personal Data with our strategic clinical trial partners;
If the law or a public authority says we must share the Personal Data;
If we need to share Personal Data in order to establish, exercise or defend our legal rights – this includes providing Personal Data to others for the purposes of detecting and preventing fraud; or
From time to time, we may employ the services of other parties for dealing with certain processes necessary for the operation of our services.
We use Service Providers who are third parties who provide elements of services for us. Examples of these Data Processors include, but are not limited to:
Our Contract Research Organisations (CRO);
Our Clinical Trial Data Processors,
Our IT Service Providers, such as Microsoft Corporation.
We have data processor agreements in place with our data processors. This means that they cannot do anything with your Personal Data unless we have instructed them to do it. They will not share your Personal Data with any organisation apart from us or further sub-processors who must comply with our Data Processor Agreement. They will hold your Personal Data securely and retain it for the period we instruct.
We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of our business. Any personal data that you have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Notice, be permitted to use that data only for the purposes for which it was originally collected by us.
10. Retention
We retain a record of your Personal Data in order to provide you with a high-quality and consistent service. We will retain your Personal Data in accordance with the Data Protection Legislation and will not retain your information for longer than is necessary. Where relevant Data Protection Legislation applies, Tasca follows a Retention Schedule which outlines how long Tasca will retain your Personal Data. Tasca considers the retention period to begin from the point at which Tasca last contacted you or otherwise reviewed your record to determine whether it was still active, or from the end of the applicable study, contract, or legal obligation, whichever is later, unless otherwise required by law. As such, where relevant Data Protection Legislation applies, and unless otherwise required by law, your data will be retained for the period specified in the summarised table below and then securely deleted in accordance with our internal policies and procedures.
Purpose:
Processing data in relation to You as an EU/EEA Tasca clinical trial participant
Retention period:
At least 25 years following the conclusion of the clinical trial, as determined by the EU CTR.
Processing data in relation to You as a Tasca clinical trial participant in the Republic of Serbia
Retention period:
At least 2 years, or longer as may be required for scientific research purposes or where required by applicable laws.
Processing data in relation to You as an EU/EEA healthcare professional involved in the planning, delivery, or oversight of a Tasca clinical trial
Retention period:
At least 25 years following the conclusion of the clinical trial, as determined by the EU CTR.
Processing data in relation to You as a healthcare professional in the Republic of Serbia involved in the planning, delivery, or oversight of a Tasca clinical trial
Retention period:
At least 6 years following the termination of any relevant contract with you, or longer where required by applicable laws.
Processing data in relation to You as an employee, contractor or other associated party contracted by Tasca
Retention period:
At least 6 years following the termination of your employment or any relevant contract with you, or longer where required by applicable laws.
Processing data in relation to You as an employee, contractor or other associated party contracted by Tasca’s Service Providers
Retention period:
At least 6 years following the termination of your employment or any relevant contract with your employer, or longer where required by applicable laws.
Processing data in relation to You as a service user of this website
Retention period:
No longer than 12 months
Processing data in relation to You as any other individual with whom Tasca may conduct commercial operations
Retention period:
At least 6 years
11. Communication
Where you are a clinical trial participant or a healthcare professional involved in the planning, delivery, or oversight of a Tasca clinical trial, we will contact you through our Contract Research Organisation (CRO) where it is necessary to do so.
Where you are an employee of Tasca, we will contact you through existing Tasca communication channels, including email, where it is appropriate to do so.
Where you are an employee of Tasca’s Service Providers, a user of this website who has provided us with your contact information, or any other business contact, we will send you relevant news about our services in a number of ways including by email, but only if we have a Legitimate Interest to do so. Where we do not have a Legitimate Interest, we will not send you marketing communications unless we have asked for, and gained, your consent.
We make every effort to ensure that we only send such communications to those acting in a business capacity and do not send such materials to consumers via personal email addresses if it is clear they are not acting in such a capacity or have not otherwise provided their consent.
All email communications will have an option to unsubscribe and so if you wish to amend your marketing preferences, you can do so by following the link in the email and updating your preferences. Alternatively, you can contact our DPO using the contact details provided in the Contact Us section below.
12. Security
We have put in place appropriate technical and organisational measures designed to prevent your Personal Data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed.
We take security measures to protect your information including:
Limiting access to our buildings and resources to only those that we have determined are entitled to be there (by use of passes, key card access and other related technologies);
Managing a data security breach reporting and notification system which allows us to monitor and communicate information on data breaches with you or with the applicable regulator when required to do so by law;
Implementing access controls to our information technology; and,
Deploying appropriate procedures and technical security measures (including encryption, pseudonymisation, anonymisation and archiving techniques) designed to safeguard your information across all our computer systems, networks, and websites.
13. International Transfers
Your Personal Data is processed at Tasca’s operating offices in the USA, and in any other places where the parties involved in the processing are located. This means that this information may be transferred outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in Your jurisdiction. In particular, when Tasca shares clinical trials data with trusted Data Processors, your Personal Data may be stored and processed within third countries.
Where GDPR or the Serbian Data Protection Law applies and we transfer your Personal Data outside of the EEA, the UK, or the Republic of Serbia, as applicable, to countries not deemed by the European Commission, UK government, or the government of the Republic of Serbia, as relevant, to provide an adequate level of Personal Data protection, the transfer will be based on safeguards that allow us to conduct the transfer in accordance with the Data Protection Legislation, such as the specific contracts containing standard data protection clauses approved by the European Commission, the UK government, and the government of the Republic of Serbia, as relevant, providing adequate protection of Personal Data. You can obtain a copy of this documentation by contacting our DPO identified in the Contact Us section below.
In other cases, we may seek your explicit consent to internationally transfer your Personal Data. If we do so, we will provide you with more information relating to the transfer at the time.
14. Children
Notwithstanding where we may process the Personal Data of the children of clinical trial participants in order to meet our obligations under clinical trial legislation, such as in the event that a participant or their partner becomes pregnant during the course of a clinical trial, we do not seek or knowingly collect any personal information about children under 18 years of age. If we become aware that we have unknowingly collected personal information from a child under the age of 13, we will make commercially reasonable efforts to delete such information from our database.
If you are the parent or guardian of a minor child who has provided us with personal information, you may contact us using the information below to request it be deleted.
15. Your Rights
15.1 EU, EEA, UK, and the Republic Of Serbia
Where GDPR and/or the Serbian Data Protection Law applies, you have certain rights over your Personal Data. For your protection, and to protect the privacy of others, we may need to verify your identity before completing what you have asked us to do. If you would like to exercise these rights, or if you would like more information about your rights or have any concerns about how we process your personal information, please Contact Us as set out below.
15.1.1 The Right to be Informed;
You have the right to be informed about the collection and use of your personal data. We ensure we do this with our internal and external Privacy Notices (including this document). These are regularly reviewed and updated to ensure these are accurate and reflect our data processing activities.
15.1.2 Right to Access Your Personal Data
You have the right to access the Personal Data that we hold about you in many circumstances, by making a request. This is sometimes termed ‘Data Subject Access Request’. If we agree that we are obliged to provide Personal Data to you (or someone else on your behalf), we will provide it to you or them free of charge and aim to do so within 1 month from when your identity has been confirmed.
If your request is particularly complex, we may extend this response window to a total of 3 months. We would ask for proof of identity and sufficient information about your interactions with us that we can locate your Personal Data.
15.1.3 Right to Rectify Your Personal Data
If any of the Personal Data we hold about you is inaccurate, incomplete, or out of date, you may ask us to correct it. If we shared your Personal Data with others, we will tell them about the correction where possible.
15.1.4 Right to Erasure
You have the right to have personal data erased. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances. For instance, the right to erasure does not apply where we have a legal obligation to retain your Personal Data. If we shared your data with others, we will alert them to the need for erasure where possible.
15.1.5 Right to Restrict Processing
You have the right to ask us to restrict the processing of your personal data. For example, this may be because you have issues with the accuracy of the data we hold or the way we have processed your data. The right is not absolute and only applies in certain circumstances. We will tell you before we lift any restriction on processing. If we shared your Personal Data with others, we will tell them about the restriction where possible.
15.1.6 Right to Portability
The right to portability gives you the right to receive personal data you have provided to a controller in a structured, commonly used, and machine-readable format, where the lawful basis for processing relies upon consent or a contract entered into with you. It also gives you the right to request that a controller transmits this data directly to another controller.
15.1.7 Right to Object
You have the right to object to our processing of some or all of the personal data that we hold about you. This is an absolute right when we use your data for direct marketing but may not apply in other circumstances where we have a compelling reason to do so, e.g., a legal obligation.
15.1.8 Rights Related to Automated Decision-Making
You have the right to object to our processing where a decision is made about you solely based upon automated processing and which has significant or legal effects. Tasca does not intend to conduct any automated decision-making for your Personal Data. You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have otherwise notified you.
15.1.9Right to Withdraw Consent
Where the lawful basis for processing is your consent, you have the right to withdraw your consent at any time.
15.1.10 Right to Lodge a Complaint
Where you are in the EU or EEA, you can lodge a complaint with your country’s regulatory body here: https://edpb.europa.eu/about-edpb/about-edpb/members_en. If you have any questions about which supervisory authority applies in your jurisdiction, please Contact Us as set out below.
In the UK, the Information Commissioner's Office (ICO) regulates data protection and privacy matters. They make a lot of information accessible to consumers on their website, which you can access here: https://ico.org.uk/for-the-public. Where you are in the UK, you have the right to lodge a complaint with us at any time. If you choose to do so, Contact Us as set out below. We will acknowledge your complaint, investigate and respond in line with our legal obligations. If you are not satisfied with our response or the outcome, you may also complain to the ICO about the way we use your information. However, we hope that you would consider raising any issue or complaint you have with us first. Your satisfaction is extremely important to us, and we will always do our very best to solve any problems you may have.
Where you are in the Republic of Serbia, you have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection by emailing оffice@poverenik.rs.
15.2 USA
If you are a US resident, we process your personal data in accordance with applicable US Data Protection Legislation. Several US states have enacted comprehensive privacy statutes, including but not limited to Alabama, California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Louisiana, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, Vermont, and Virginia. These laws include provisions aimed at safeguarding consumer rights and outlining business obligations. If you have relevant rights under these laws, and to the extent that Tasca is subject to these laws dependent on the context of the Processing of your Personal Data, you can exercise them by contacting us using the details provided in the Contact Us section as set out below.
Due to varying practices among browser providers and the lack of a market standard, we do not respond to Do Not Track signals at this time. Where required to do so by applicable laws, we will respond to Global Privacy Control (GPC) requests.
15.3 Other Data Protection Legislation
If you are located in another jurisdiction outside of the EU, EEA, UK, US, and the Republic of Serbia, you may have data protection rights available to you under the applicable Data Protection Legislation of your jurisdiction, such as the right of access, rectification, and/or erasure. If you have relevant rights under these laws, you can exercise them by contacting us using the details provided in the Contact Us section as set out below.
16. Contact Us
If you would like to exercise one of your rights as set out above, or you have a question or a complaint about this Privacy Notice or the way your Personal Data is processed, please contact our Data Protection Officer (DPO) by emailing dpo@tascatx.com
Our EU GDPR Representative is The DPO Centre Europe Limited, who can be contacted by writing to Marszalkowska Centre, 126/134 Marszalkowska street, Warsaw, 00-008, Poland, calling +48222782784, or emailing eurep@tascatx.com.
Our Data Protection Representative for the purposes of the Serbia Data Protection Law is Jevtić Legal, who can be contacted by writing to Kapetan Mišina 2a, Belgrade 11000, Serbia, calling +381638057804, or emailing serbiarep@tascatx.com.
17. Changes to Our Privacy Notice
Thank you for taking the time to read our Privacy Notice.
We may change this Privacy Notice from time to time (for example, if the law changes). We recommend that you check this Privacy Notice regularly to keep up-to-date.