1. Controller and Scope
This Privacy Policy explains how RSM Software processes personal data through this website and related commercial communications, in line with EU Regulation (EU) 2016/679 (GDPR) and applicable Cyprus data protection law.
- Controller: RSM Software Ltd (Under Registration in Cyprus)
- Registered office: Pavlou Aggelinide 21, 3110, Limassol, Cyprus
- Contact: info@rsm-software.com
- DPO contact: dpo@rsm-software.com
2. Categories of Personal Data
- Identity and contact details (for example name, work email, role, company).
- Communication records (inquiry content, follow-up notes, support/legal correspondence).
- Technical and security data (IP, device/browser events, log data, abuse prevention signals).
- Preference and consent records (cookie and communication preferences where applicable).
3. Purposes and Legal Bases (GDPR Article 6)
- Responding to inquiries and pre-contract engagement: Article 6(1)(b) and/or 6(1)(f).
- Website operation, security, fraud prevention, and incident management: Article 6(1)(f).
- Compliance with legal, regulatory, tax, and audit obligations: Article 6(1)(c).
- Optional analytics/marketing cookies or direct marketing where required: Article 6(1)(a) consent.
4. Data Sources
We collect personal data directly from you (forms, emails, business interactions), and indirectly from technical events generated by browser and security infrastructure.
5. Recipients and Processors
Personal data may be processed by authorized staff and trusted processors acting under written agreements, including hosting, security, analytics, communication, and legal/compliance providers. Data is shared only on a need-to-know basis and with contractual safeguards.
6. International Transfers
Where data is transferred outside the EEA, we use recognized safeguards such as adequacy decisions, Standard Contractual Clauses (SCCs), and supplementary technical and organizational controls.
7. Retention Periods
Data is retained for no longer than necessary for the stated purposes and legal obligations. Retention schedules consider statutory periods for corporate, tax, compliance, and dispute-resolution requirements.
8. Data Subject Rights
Subject to legal conditions, you may request access, rectification, erasure, restriction, portability, and objection to processing. Where processing relies on consent, you may withdraw consent at any time.
9. Complaints
You may contact us first at dpo@rsm-software.com. You also have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection or your local EU supervisory authority.
10. Security Measures
We apply proportionate technical and organizational measures, including access controls, least-privilege practices, secure configuration baselines, and monitoring to protect confidentiality, integrity, and availability of personal data.
11. Policy Updates
We may update this policy to reflect legal, operational, or technical changes. Material updates will be posted with a revised effective date.
12. Contact
For privacy requests and data rights: dpo@rsm-software.com
For general corporate matters: legal@rsm-software.com