1. WHO WE ARE
Remapped Ltd, company number 499330, registered at 38 Fitzwilliam Street Upper, Dublin, Ireland, DO2 KV05, operates the Remapped assessment platform. You can contact us about privacy at privacy@remapped.ai.
2. TWO DIFFERENT ROLES
For the environment data uploaded for an assessment, your organization is the controller, and we act as its processor. Our Data Processing Terms govern that processing.
For the details of the person who uploads, and for our records of who accepted which terms, we are the controller. This notice explains that processing.
3. WHAT WE COLLECT AND WHY
Uploader details: name, email address, organization, the capacity in which they acted, the time of acceptance and the source IP address. We collect this to record who authorized the assessment and the sharing of the report, to confirm the upload by email, and to meet our obligations to AWS under our agreement with them.
Environment data: technical, system and infrastructure data uploaded or collected for the assessment, including outputs generated by Remapped's Rapid Discovery and other Discovery Tools. This may include names, usernames, user IDs, business contact and professional information, system and application usage data, device, infrastructure and configuration data, licensing and deployment-related data, log data, access records and other system-generated identifiers. The assessment is not intended to require sensitive or special category Personal Data.
Correspondence: messages you send us about an assessment.
4. OUR LAWFUL BASIS
For uploader details and authorization records, we rely on our legitimate interests in establishing and demonstrating who authorized an assessment and the provision of its Report to AWS, administering the assessment, preventing misuse, meeting contractual and compliance obligations, and establishing, exercising or defending legal claims.
For environment data, we act on your organization's instructions as its processor. Your organization determines the lawful basis.
5. WHO RECEIVES IT
Amazon Web Services receives the assessment report. Reports do not contain personal information.
Our group companies and suppliers listed in Annex 3 of the Data Processing Terms process data on our behalf.
Professional advisers, auditors and authorities where we are required or permitted to share.
6. WHERE IT IS HELD
The platform and stored data are hosted in the United States. Our personnel and suppliers may access data from the United Kingdom, the European Economic Area, Brazil, India and the country in which the customer is located.
Transfers out of the United Kingdom or the European Economic Area are made under the European Commission's standard contractual clauses and the UK International Data Transfer Addendum, or another approved mechanism.
7. HOW LONG WE KEEP IT
Environment data: for the assessment and related support and thereafter until returned or deleted in accordance with the customer's documented instructions and the Data Processing Terms.
Authorization records: six years from the date of the upload, so that we can demonstrate who authorized the assessment, the applicable terms and the provision of the Report to AWS. Source IP addresses: retained in accordance with Remapped's applicable security and logging retention policy.
8. YOUR RIGHTS
You have the right to access your personal information, to have it corrected or erased, to restrict or object to its processing, and to data portability, in each case where the law provides.
Where we rely on legitimate interests, you may object and we will stop unless we have compelling grounds to continue.
To exercise a right, contact privacy@remapped.ai. If you are not satisfied, you may complain to the Information Commissioner's Office at ico.org.uk, or to your local supervisory authority.
9. CHANGES
We may update this notice. The version in force at the time of an upload applies to that upload, and previous versions are available on request.