DATA SUBJECT RIGHTS REQUEST FORM

Pen to Paper Co., and its affiliated companies (“Company”) value privacy rights. As required under applicable laws, and specifically the EU General Data Protection Regulations (“GDPR”), the California Consumer Privacy Act of 2018 ("CCPA"), the California Privacy Rights Act of 2020 effective January 1, 2023 (“CPRA”), the Virginia Consumer Data Protection Act of 2021 (“CDPA”), the Colorado Consumer Protection Act (“CPA”) and other federal, state laws, the Israeli Protection of Privacy Law (“IPPL”), etc. (all collectively shall be defined as “Data Protection Laws”), individuals are permitted to make certain requests and exercise certain rights regarding their Personal Data or Personal Information (as such term is defined under Data Protection Regulations) and depending on their jurisdiction.

In order to submit a request to exercise individual rights pursuant to the Data Protection Laws, please complete this form and send it to our privacy team at: privacy@getfondue.com

Upon receipt of your completed request, we will process it and respond within the timelines required under applicable Data Protection Laws. If additional information is necessary, we will contact you using the contact information you provided in this form. Information provided in connection with this request will be processed only for the purpose of processing and responding to your request and will be deleted immediately thereafter. For more information, please review our Privacy Policy.

1) CONTACT INFORMATION: 
‍Full Name: 
Email Address: 
If applicable, US State:

2) WHAT IS YOUR RELATIONSHIP WITH US? 
â–˘ End User
â–˘ Merchant
▢ Employee 
▢ Vendor 
â–˘ Other: _______

3) YOUR REQUEST: 
‍Detailed below are various rights and requests you may submit depending on your residence. Please check the applicable right you are requesting to execute. 

You may submit a request by your authorized agent as detailed under the CCPA Notice. 

Note, certain deletion, correction and opt-out rights can be done without filling the form. You can opt-out from receiving emails from us by clicking the “unsubscribe” link within the email, you can delete and correct any information available in your account, etc. However, please note that by exercising your right to delete the applicable information regarding your account, you will lose all such account information.

A) CALIFORNIA:
Note: Under the CCPA your rights apply to the Personal Information collected 12 months prior to the request, although in certain circumstances it may apply to Personal Information beyond such 12 months. Please however note that you are not entitled to submit more than 2 requests in a 12 months period. 

Please check the applicable right you are requesting to execute:
â–˘ Right to Know or Access;
â–˘ Right to Deletion;
â–˘ Right to Data Portability;
â–˘ Right to Non-Discrimination;
â–˘ Right to Rectification;
▢ Right to Limit the Use and Disclosure of Sensitive Personal Information; 
▢ Right to Opt-out of Sale; 
â–˘ Opt-Out of Sharing for Cross-Contextual Behavioral Advertising
â–˘ Opt-Out of the Use of Automated Decision Making; or
â–˘ Other.

CCPA Opt-Out Rights: 
Opt-out rights can be executed by using the cookie setting option through the device level, most browsers and mobile device enable opt-out from cookies and tracking technology. 

B) VIRGINIA:
â–˘ Right to Confirm if the Data is Being Processed and to Access That Personal Data;
▢ Right to Deletion; 
â–˘ Right to Data Portability;
▢ Right to Correct Inaccuracies; 
▢ The right to Opt-Out of “The Processing of the Personal Data for Purposes of Targeted Advertising, the Sale of Personal Data, or Profiling in Furtherance of Decisions that Produce Legal or Similarly Significant Effects Concerning the Consumer”;
â–˘ or Other.

The right to Opt-Out of “The Processing of the Personal Data for Purposes of Targeted Advertising, the Sale of Personal Data, or Profiling in Furtherance of Decisions that Produce Legal or Similarly Significant Effects Concerning the Consumer” can be done without filling this form - simply click “Cookie Settings”.

COLORADO: 
â–˘ Right of Access;
â–˘ Right to Correction;
â–˘ Right to Deletion of Personal Data;
▢ Right to Data Portability – to obtain a portable copy of the data; 
â–˘ Right to Opt-out of the Processing of Personal Data for the Purposes of: Targeted advertising; Sale for personal data; or Profiling used for decisions that produce legal or similarly significant effects on a consumer;
▢ or Other.

The right to Opt-Out of “The Processing of the Personal Data for Purposes of Targeted Advertising, the Sale of Personal Data, or Profiling in Furtherance of Decisions that Produce Legal or Similarly Significant Effects Concerning the Consumer” can be done without filling this form - simply click “Cookie Settings.

If you are a Colorado, Virginia, or Connecticut consumer, and we refuse to take action on your request, you may appeal our refusal within a reasonable period after you have received notice of the refusal.

C) EU, UK, EEA AND OTHER JURISDICTIONS:
▢ Right to be Informed to the Processing of Personal Data; 
â–˘ Right to Access to Your Personal Data;
â–˘ Right to Rectification and Amendment;
▢ Right to Deletion / Erasure; 
â–˘ Right to Restrict Processing;
â–˘ Right to Data Portability;
▢ Right to Object to the Processing of Personal Data; 
â–˘ Rights Related to Automated Decision-Making and Profiling;
â–˘ orOther.

4) VALIDATION
The verifiable request must provide enough information that allows us to reasonably verify you as the person about whom we collected Personal Information or an authorized representative of such person.

We cannot respond to your request if we cannot verify your identity or authority to make the request and confirm the Personal Information or Personal Data is relates to you. Please describe your request with sufficient details that will allow us to properly understand, evaluate, and respond to it.

Substantiate the request - please provide additional information about your request:









Thank you for filling in the form, please send it to: privacy@getfondue.com. We will process the request within the time frame under the applicable Data Protection Law. We reserve the right to extend the aforementioned period by the time specified in the Data Protection Laws if the request is complex or numerous or we require additional information. 

‍‍The processing of the request is free of charge; however, we may want to reserve the right to charge a reasonable fee to cover certain administrative costs (such as providing additional copies of the data) or for handling manifestly unfounded or excessive requests.‍

‍Note that, you might not be eligible to exercise all or part of the rights detailed above – this depends on your jurisdiction and the applicable Data Protection Law, our relationship, and our rights to refuse or retain data under the applicable Data Protection Law. Where we are not able to provide you with the information for which you have asked or otherwise fulfill your request, we will endeavor to explain the reasoning for this and inform you of your rights.