EU and UK Supplement

nice elevateai eu and uk supplement last updated august 12, 2022 this nice elevateai eu and uk supplement explains how nice collects, uses, processes, and discloses data from you through our interactions with you and through your use of, and interactions with, elevateai and its associated web properties, specifically to the extent your data includes personal data from individuals subject to eu general data protection regulation 2016/679 (“eu gdpr”) and the united kingdom data protection act 2018 (“uk gdpr”) this nice elevateai eu and uk supplement is referenced in and made part of the nice elevateai privacy notice elevateai privacy notice capitalized terms used but not defined herein shall have the meaning ascribed to them in the nice elevateai privacy notice nice elevateai privacy notice or the nice elevateai terms of use nice elevateai terms of use , including the other documents incorporated therein by reference this eu and uk supplement does not apply to other types of data or nice online services, products, and applications operated by nice or its affiliates for purposes of this nice elevateai eu and uk supplement only, the term “you”, “you”, “your”, or “your”, with regard to personal data, refers to and includes personal data related to you, individually, and to the extent data you upload to elevateai includes personal data related to other individuals governed by eu gdpr or uk gdpr data transfers the safeguards we deploy for performing such transfers across boundaries adequacy any transfers to nice affiliates in israel may be made on the basis of an adequacy decision made by the european commission or, as applicable, the united kingdom model clauses and the data processing addendum with some of our processors, we use standard contractual clauses approved by the european commission (the “eu sccs”) or the united kingdom (the “uk sccs), as applicable, that are binding standards of processing of personal data committed to contractually by third parties processing information for nice and on nice’s behalf for you, we use the nice elevateai data processing addendum consent in the absence of an adequacy decision, model clauses, or the nice elevateai data processing addendum or other data processing agreement, and in the absence of any other right to transfer your data, your consent shall serve as the basis for such transfer by accessing and using elevateai, you agree and understand that your data may be transferred from the european economic area (“eea”), or as applicable the united kingdom, or other countries in which you may be using or accessing elevateai, to other jurisdictions outside your own location (including outside the eea or uk, as applicable), as described in the nice elevateai data processing addendum eu gdpr and uk gdpr disclosure you may have the rights prescribed below in relation to personal data processed by nice if you are a data subject in the eea or the uk or your personal data is otherwise governed by the eu gdpr or uk gdpr the right to be informed about how your personal data is being used; the right of access to your personal data processed by nice, which includes the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and the purposes of the processing; categories of personal data concerned; recipients or categories of recipient to whom the personal data have been or will be disclosed; where possible, the envisaged period for which the personal data will be stored; the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data or to object to such processing; the right to lodge a complaint with a supervisory authority; where the personal data are not collected from the data subject, any available information as to their source; the existence of automated decision making, including profiling; the appropriate safeguards relating to the transfer of your personal data outside the eea or uk the right to request the correction of inaccurate personal data we hold about you; under some circumstances, the right to request that we delete your personal data; the right to restrict processing of your personal data; the right to object to processing activities, if the processing is based on our legitimate interest; the right to withdraw consent for processing at any time, if the processing is based on consent; the right to object to processing of personal data for direct marketing purposes at any time; in some circumstances, the right to request that we transfer or port elements of your data either to you or another service provider – if the processing is based on your consent, and is made by automated means the right to file a complaint with your supervisory authority (in the eea, as prescribed by eu gdpr, or the united kingdom, as applicable) you may exercise these rights to the extent these rights apply to you by contacting nice via the account administrator we will undertake to respond to your request within the applicable time frame prescribed by applicable law, and in any event we will make efforts to respond within 30 days of receipt of your request although nice will make reasonable efforts to accommodate your requests, in some circumstances we may deem your request unfounded or not eligible under applicable law if that should happen, nice expressly reserves the right to refuse your request personal data before nice is able to accommodate any request, provide you with any information or correct any inaccuracies we may verify your identity by requesting certain information or identification