European Union - Privacy Notice

Last Modified Date: Aug. 1, 2022

MetaSource collects data to operate effectively and provide better quality experiences. Below, you will find a list of our products, services, and processes that gather personal data, our purpose and legal basis for processing that information, who we share the information with, and how long we hold that information.

How MetaSource Uses Personal Data

MetaSource provides services to customers and employees in the following ways, and will provide a separate response for each, as numbered below:

  1. MetaSource’s Products and Services (except BPO Services)
  2. BPO Services
  3. Sales and Marketing
  4. Human Resources – Employees
  5. Human Relations – Job Applicants
  6. Financial Functions
1. How MetaSource uses Personal Data for MetaSource’s Products and Services (except BPO Services)
Description of Product, Service, or Process MetaSource provides its customers with various contracted business services.
Categories of Personal Data Personal Identifiers, Professional Employment Information, Commercial Information, Education Information, and Protected Class Information.
Categories of Data Subjects Customers
Purpose of Processing MetaSource is using the personal information to provide a contracted service to customers.
Legal Basis for Processing MetaSource is using the personal information in the performance of a contract.
Automated Processing or Profiling No automated processing takes place.
If Automated Processing is Used, Methods and Logic N/A
Decisions with a Legal Effect that Use Automated Processing N/A
Categories of Recipients who Receive this Personal Data Affiliates, IaaS providers, digital image storage providers, credit reporting agencies, appraisal verification services, insurance companies of borrower designation, and asset verification services.
Whether the Personal Data is Transferred Outside of the European Economic Area Yes, all personal data collected is processed and stored in the United States.
Retention Period Per contract terms, information is stored for up to 36 months after termination of the contractual relationship.
2. How MetaSource Uses Personal Data for MetaSource’s BPO Services
Description of Product, Service, or Process MetaSource provides its customers with various Business Process Outsourcing (BPO) services.
Categories of Personal Data Personal Identifiers, Professional Employment Information, Commercial Information, Education Information, Protected Class Information, and Audio or Visual Data.
Categories of Data Subjects Customers
Purpose of Processing MetaSource is using the personal information in the performance of a contract.
Legal Basis for Processing MetaSource is under contract to handle the personal information.
Automated Processing or Profiling No automated processing takes place.
If Automated Processing is Used, Methods and Logic N/A
Decisions with a Legal Effect that Use Automated Processing N/A
Categories of Recipients who Receive this Personal Data Service providers or approved third-party vendors including IaaS providers, and data and address verification service providers.
Whether the Personal Data is Transferred Outside of the European Economic Area Yes, all personal data collected is processed and stored in the United States.
Retention Period Information is stored for up to seven years.
3. How MetaSource Uses Personal Data for Sales & Marketing
Description of Product, Service, or Process MetaSource sells and markets various business and business process outsourcing services.
Categories of Personal Data Personal Identifiers, Professional Employment Information, Commercial Information, Internet Data, Inferences Data, Geolocation Data, and Audio or Visual Data.
Categories of Data Subjects Potential Customers
Purpose of Processing MetaSource is using the personal information to sell and market its services.
Legal Basis for Processing MetaSource has a legitimate business interest to handle this information.
Automated Processing or Profiling No automated processing or profiling.
If Automated Processing is Used, Methods and Logic N/A
Decisions with a Legal Effect that Use Automated Processing N/A
Categories of Recipients who Receive this Personal Data CRM and ERP SaaS Service Providers.
Whether the Personal Data is Transferred Outside of the European Economic Area Yes, all personal data collected is processed and stored in the United States.
Retention Period Personal Information is maintained or held without limitation as long as individuals remain at organizations whose services could be benefitted by MetaSource’s services. If a person leaves an organization, their information is deleted.
4. How MetaSource Uses Personal Data for Human Resources – Employees
Description of Product, Service, or Process Human Resources – Employee records, management, benefits, payroll, and reporting.
Categories of Personal Data Personal Identifiers, Professional Employment Information, Commercial Information, Internet Data, Education Information, Inferences Data, Protected Class Information, Geolocation Data, Audio or Visual Data.
Categories of Data Subjects Employees
Purpose of Processing MetaSource uses this information to manage employees’ information, employee benefits, payroll services, and for reporting to government agencies as required by law.
Legal Basis for Processing MetaSource has a legal requirement and a legitimate business interest to handle the personal information.
Automated Processing or Profiling No automated processing or profiling.
If Automated Processing is Used, Methods and Logic N/A
Decisions with a Legal Effect that Use Automated Processing N/A
Categories of Recipients who Receive this Personal Data Employee Management Service Providers, Benefits Providers, Benefits Management Service Providers, and Government Agencies.
Whether the Personal Data is Transferred Outside of the European Economic Area Yes, all personal data collected is processed and stored in the United States.
Retention Period There is no retention standard for employee data. A hold must be put on records as is required.
5. How MetaSource Uses Personal Data for Human Resources – Job Applicants
Description of Product, Service, or Process Human Resources – Job applications, recruiting, and hiring processes.
Categories of Personal Data Personal Identifiers, Professional Employment Information, Commercial Information, Internet Data, and Education Information.
Categories of Data Subjects Job Applicants
Purpose of Processing MetaSource uses this information for the recruiting and hiring processes of the company.
Legal Basis for Processing MetaSource has a legitimate business interest to handle the personal information.
Automated Processing or Profiling No automated processing or profiling.
If Automated Processing is Used, Methods and Logic N/A
Decisions with a Legal Effect that Use Automated Processing N/A
Categories of Recipients who Receive this Personal Data Employee Management Service Providers.
Whether the Personal Data is Transferred Outside of the European Economic Area Yes, all personal data collected is processed and stored in the United States.
Retention Period There is no retention standard for job applicant data.
6. How MetaSource Uses Personal Data for Human Resources – Job Applicants
Description of Product, Service, or Process Financial Functions of the company.
Categories of Personal Data Personal Identifiers.
Categories of Data Subjects Customers, Third-Party Vendors, Service Providers, Contractors.
Purpose of Processing MetaSource uses this information to provide invoicing to and processing of payments from its customers and vendors.
Legal Basis for Processing MetaSource is using the personal information in the performance of a contract.
Automated Processing or Profiling No automated processing or profiling.
If Automated Processing is Used, Methods and Logic N/A
Decisions with a Legal Effect that Use Automated Processing N/A
Categories of Recipients who Receive this Personal Data Contracted CRM, accounting, billing, payments, and budgeting service providers.
Whether the Personal Data is Transferred Outside of the European Economic Area Yes, all personal data collected is processed and stored in the United States.
Retention Period Finance records are preserved for at least seven years for reporting purposes, though there is no data retention policy for data used for MetaSource financial functions.

Your Rights with Regard to the Data We Collect

As a Data Subject in the European Economic Area, you have the right to request, access, rectify, erase, and restrict how we process your Personal Data. These rights include the ability to review the Personal Data we have in our Information and Communications systems concerning you, the ability to make any corrections to that Personal Data, the ability to be informed of who that data may have been shared with, the ability to request that we erase all of your Personal Data, and the ability to restrict how we Process your Personal Data.

We are required to respond to any of your requests to exercise these above Data Subject rights within 30 days. Should we be unable to comply within 30 days, we will contact you anyway and let you know of any delay.

Exercising Your Rights

If you want to exercise your rights under the GDPR, you may contact us or our privacy point of contact at:

Organization

MetaSource, LLC
67 West 13490 South, Suite 300
Draper, UT 84020
(888) 634-7684

Privacy Point of Contact

General Counsel
67 West 13490 South, Suite 300
Draper, UT 84020
(888) 634-7684
Email: privacy@metasource.com

Withdraw Consent

If our legal basis for processing information your information is based on your consent, you may withdraw your consent at any time by contacting the Privacy Point of Contact listed above and informing us that you withdraw your consent.

Contacting Supervisory Authorities

If you would like to lodge a complaint against us, you may contact your local supervisory authority. If you have trouble locating a supervisory authority, please contact the Privacy Point of Contact above for help with contacting a supervisory authority.

Changes to Our Privacy Statement

We keep this privacy statement under regular review and will place any updates on our website. Paper copies of the privacy statement may also be obtained by contacting General Counsel at the information above and requesting a paper copy.