How is my data protected under GDPR?

Go Challenges stores and processes personal data inside the United States of America (USA) and operates a member service center in Bosnia and Herzegovina.  The level of data protection legally required in the USA and Bosnia and Herzegovina is lower than that required in the European Union.  However, we have designed and implemented a data protection program aligned with the data protection requirements set forth in the GDPR.  This includes implementing appropriate security safeguards to protect your personal data and respecting the data subject rights established by the GDPR.

Nothing in this Notice limits or attempts to limit your rights under applicable laws, including your ability, depending on your country of residence, to file a complaint with your local Data Protection Authority. 

Go Challenges participates in and has certified its compliance with the EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield Framework, as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of Personal Information from the European Economic Area, the United Kingdom, and Switzerland. While Privacy Shield is no longer a valid mechanism to export EU data to the US, the Privacy Shield program still involves demonstrating appropriate data protection controls. To enforce data protection requirements under the GDPR, we use approved standard contractual clauses to protect data exported outside of the EU.

To learn more about the privacy program please review our privacy notice available here: https://www.personifyhealth.com/privacy-notice/

To view and learn more about our certification please visit https://www.privacyshield.gov/participant?id=a2zt0000000TOtTAAW&status=Active.