DATA PRIVACY FRAMEWORK PRIVACY POLICY
Meraki Group Consulting Corp.
Data Privacy Framework Notice
Meraki Group Consulting Corp. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union to the United States.
Meraki Group Consulting Corp. adheres to the EU-U.S. Data Privacy Framework Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability. More information about the Data Privacy Framework program is available at:
Purposes of Processing and Types of Personal Data
Meraki Group Consulting Corp. processes personal data solely in the context of providing actuarial, analytical, and advisory consulting services to insurance and nancial services clients.
The types of personal data processed may include identifiers and demographic information such as names, dates of birth, gender, place of residence, professional status (e.g., executive or non-executive), education level, and other socio-professional characteristics strictly necessary to perform actuarial modeling, risk assessment, pricing, reserving, life expectancy projections, and claims estimation.
Personal data is accessed remotely on client-controlled systems and is not stored locally by Meraki Group Consulting Corp. Personal data is not used for marketing purposes.
Disclosure of Personal Data to Third Parties
Meraki Group Consulting Corp. discloses personal data only to its clients acting as independent data controllers, and, where strictly necessary, to trusted third-party service providers acting as agents on its behalf, such as IT service providers or professional advisors, solely for purposes consistent with the provision of actuarial, analytical, and advisory consulting services.
All such third parties are contractually required to process personal data in accordance with applicable data protection laws and to provide at least the same level of protection as required by the EU-U.S. Data Privacy Framework Principles.
Liability for Onward Transfers
In accordance with the Accountability for Onward Transfer Principle, Meraki Group Consulting Corp. is responsible for the processing of personal data it receives under the EU-U.S. Data Privacy Framework and subsequently transfers to a third party acting as an agent on its behalf.
Meraki Group Consulting Corp. shall remain liable under the EU-U.S. Data Privacy Framework Principles if such third party processes personal data in a manner inconsistent with the Principles, unless Meraki Group Consulting Corp. proves that it is not responsible for the event giving rise to the damage.
Choice
Individuals may opt out of the disclosure of their personal data to third parties or of the use of their personal data for a purpose that is materially different from the purpose for which it was originally collected or subsequently authorized by contacting Meraki Group Consulting Corp. using the contact details below.
Access and Rights of Individuals
Individuals have the right to access personal data about them that Meraki Group Consulting Corp. holds and, where that data is inaccurate or processed in violation of the EU-U.S. DPF Principles, to request that it be corrected, amended, or deleted, where appropriate.
Requests may be submitted by contacting:
Email: adam_smiarowski@merakiconsultores.us
Independent Recourse Mechanism
In compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), Meraki Group Consulting Corp. commits to refer unresolved complaints concerning its handling of personal data received in reliance on the EU-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States.
If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your complaint to your satisfaction, please visit:
https://www.jamsadr.com/DPF-Dispute-Resolution
for more information or to file a complaint.
The services of JAMS are provided at no cost to the individual.
Disclosure for Legal Purposes
Meraki Group Consulting Corp. may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Enforcement Authority
Meraki Group Consulting Corp. is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).
Binding Arbitration
Under certain conditions, individuals may invoke binding arbitration for complaints regarding EU-U.S. DPF compliance not resolved by any of the other EU-U.S. DPF mechanisms, as described in Annex I of the EU-U.S. Data Privacy Framework Principles.
