GDPR Notice

Controller

CMDBx acts as the data controller for personal data collected on cmdbx.com and in connection with demo requests, marketing, and account administration. For platform data processed on behalf of customers, CMDBx acts as a data processor.

Lawful Bases

• Performance of a contract when delivering the Services.
• Legitimate interests, such as improving security and product performance.
• Consent where required for optional cookies or marketing communications.
• Compliance with legal obligations.

Your Rights

• Access, correct, or delete your personal data.
• Restrict or object to processing in certain circumstances.
• Data portability where applicable.
• Withdraw consent at any time when processing is based on consent.
• Lodge a complaint with your local supervisory authority.

International Transfers

When we transfer personal data outside the EEA or UK, we use appropriate safeguards such as standard contractual clauses or other lawful transfer mechanisms.

Data Processing Addendum

Customers can request our Data Processing Addendum (DPA) for GDPR-compliant processing terms. Contact support to receive the latest version.

Contact

To exercise GDPR rights or ask questions, email [email protected].