Policy Commitment

Our Principles

Lawful Processing

Ascendus processes personal information only where there is a valid legal basis, including contractual necessity, legal obligation, legitimate business interests, or consent, where required.

Purpose Limitation and Data Minimization

Personal information is collected and processed only for specified, legitimate purposes and is limited to what is necessary to deliver our services and support our business operations.

Transparency

Ascendus is committed to providing clear information about how personal information is collected, used, and protected, and the available channels for privacy-related enquiries.

Accuracy

Reasonable steps are taken to ensure that personal information remains accurate, complete, and up to date, and to correct or remove inaccurate information where appropriate.

Security and Confidentiality

Appropriate administrative, technical, and organizational safeguards are implemented to protect personal information from unauthorized access, disclosure, alteration, or loss. Employees, contractors, and authorized third parties are required to maintain the confidentiality of information entrusted to them.

Privacy by Design

Privacy and data protection considerations are integrated into business processes, service delivery, and technology solutions throughout the lifecycle of our engagements.

Disclosure of Personal Information

Personal information is disclosed only where required to deliver services, comply with legal or regulatory obligations, fulfill contractual commitments, or with the consent of the individual, where applicable.

Data Subject Rights

Ascendus supports individuals in exercising their rights under applicable data protection laws, including the right to access, correct, delete, restrict, object to the processing of, or request the portability of their personal information, where applicable.

International Data Transfers

Where personal information is transferred across borders as part of our global operations or service delivery, Ascendus implements appropriate safeguards in accordance with applicable data protection laws.

Data Retention

Personal information is retained only for as long as necessary to fulfil the purposes for which it was collected, meet legal and contractual obligations, and support legitimate business requirements. Information is securely deleted or anonymized when it is no longer required.

Data Breach Management

Ascendus maintains incident response procedures to identify, investigate, manage, and remediate actual or suspected personal data breaches. Where required by applicable law, affected individuals and relevant regulatory authorities will be notified in a timely manner.

Governance and Implementation

Ascendus maintains policies, procedures, employee training, and periodic reviews to support compliance with this Policy Commitment and applicable data protection laws, while promoting a culture of privacy, security, and accountability across the organization.