Last Modified Date: Aug. 1, 2022
MetaSource collects data to operate effectively and provide better quality experiences. Below, you will find a list of our products, services, and processes that gather personal data, our purpose and legal basis for processing that information, who we share the information with, and how long we hold that information.
How MetaSource Uses Personal Data
MetaSource provides services to customers and employees in the following ways, and will provide a separate response for each, as numbered below:
- MetaSource’s Products and Services (except BPO Services)
- BPO Services
- Sales and Marketing
- Human Resources – Employees
- Human Relations – Job Applicants
- Financial Functions
| Description of Product, Service, or Process | MetaSource provides its customers with various contracted business services. |
|---|---|
| Categories of Personal Data | Personal Identifiers, Professional Employment Information, Commercial Information, Education Information, and Protected Class Information. |
| Categories of Data Subjects | Customers |
| Purpose of Processing | MetaSource is using the personal information to provide a contracted service to customers. |
| Legal Basis for Processing | MetaSource is using the personal information in the performance of a contract. |
| Automated Processing or Profiling | No automated processing takes place. |
| If Automated Processing is Used, Methods and Logic | N/A |
| Decisions with a Legal Effect that Use Automated Processing | N/A |
| Categories of Recipients who Receive this Personal Data | Affiliates, IaaS providers, digital image storage providers, credit reporting agencies, appraisal verification services, insurance companies of borrower designation, and asset verification services. |
| Whether the Personal Data is Transferred Outside of the European Economic Area | Yes, all personal data collected is processed and stored in the United States. |
| Retention Period | Per contract terms, information is stored for up to 36 months after termination of the contractual relationship. |
| Description of Product, Service, or Process | MetaSource provides its customers with various Business Process Outsourcing (BPO) services. |
|---|---|
| Categories of Personal Data | Personal Identifiers, Professional Employment Information, Commercial Information, Education Information, Protected Class Information, and Audio or Visual Data. |
| Categories of Data Subjects | Customers |
| Purpose of Processing | MetaSource is using the personal information in the performance of a contract. |
| Legal Basis for Processing | MetaSource is under contract to handle the personal information. |
| Automated Processing or Profiling | No automated processing takes place. |
| If Automated Processing is Used, Methods and Logic | N/A |
| Decisions with a Legal Effect that Use Automated Processing | N/A |
| Categories of Recipients who Receive this Personal Data | Service providers or approved third-party vendors including IaaS providers, and data and address verification service providers. |
| Whether the Personal Data is Transferred Outside of the European Economic Area | Yes, all personal data collected is processed and stored in the United States. |
| Retention Period | Information is stored for up to seven years. |
| Description of Product, Service, or Process | MetaSource sells and markets various business and business process outsourcing services. |
|---|---|
| Categories of Personal Data | Personal Identifiers, Professional Employment Information, Commercial Information, Internet Data, Inferences Data, Geolocation Data, and Audio or Visual Data. |
| Categories of Data Subjects | Potential Customers |
| Purpose of Processing | MetaSource is using the personal information to sell and market its services. |
| Legal Basis for Processing | MetaSource has a legitimate business interest to handle this information. |
| Automated Processing or Profiling | No automated processing or profiling. |
| If Automated Processing is Used, Methods and Logic | N/A |
| Decisions with a Legal Effect that Use Automated Processing | N/A |
| Categories of Recipients who Receive this Personal Data | CRM and ERP SaaS Service Providers. |
| Whether the Personal Data is Transferred Outside of the European Economic Area | Yes, all personal data collected is processed and stored in the United States. |
| Retention Period | Personal Information is maintained or held without limitation as long as individuals remain at organizations whose services could be benefitted by MetaSource’s services. If a person leaves an organization, their information is deleted. |
| Description of Product, Service, or Process | Human Resources – Employee records, management, benefits, payroll, and reporting. |
|---|---|
| Categories of Personal Data | Personal Identifiers, Professional Employment Information, Commercial Information, Internet Data, Education Information, Inferences Data, Protected Class Information, Geolocation Data, Audio or Visual Data. |
| Categories of Data Subjects | Employees |
| Purpose of Processing | MetaSource uses this information to manage employees’ information, employee benefits, payroll services, and for reporting to government agencies as required by law. |
| Legal Basis for Processing | MetaSource has a legal requirement and a legitimate business interest to handle the personal information. |
| Automated Processing or Profiling | No automated processing or profiling. |
| If Automated Processing is Used, Methods and Logic | N/A |
| Decisions with a Legal Effect that Use Automated Processing | N/A |
| Categories of Recipients who Receive this Personal Data | Employee Management Service Providers, Benefits Providers, Benefits Management Service Providers, and Government Agencies. |
| Whether the Personal Data is Transferred Outside of the European Economic Area | Yes, all personal data collected is processed and stored in the United States. |
| Retention Period | There is no retention standard for employee data. A hold must be put on records as is required. |
| Description of Product, Service, or Process | Human Resources – Job applications, recruiting, and hiring processes. |
|---|---|
| Categories of Personal Data | Personal Identifiers, Professional Employment Information, Commercial Information, Internet Data, and Education Information. |
| Categories of Data Subjects | Job Applicants |
| Purpose of Processing | MetaSource uses this information for the recruiting and hiring processes of the company. |
| Legal Basis for Processing | MetaSource has a legitimate business interest to handle the personal information. |
| Automated Processing or Profiling | No automated processing or profiling. |
| If Automated Processing is Used, Methods and Logic | N/A |
| Decisions with a Legal Effect that Use Automated Processing | N/A |
| Categories of Recipients who Receive this Personal Data | Employee Management Service Providers. |
| Whether the Personal Data is Transferred Outside of the European Economic Area | Yes, all personal data collected is processed and stored in the United States. |
| Retention Period | There is no retention standard for job applicant data. |
| Description of Product, Service, or Process | Financial Functions of the company. |
|---|---|
| Categories of Personal Data | Personal Identifiers. |
| Categories of Data Subjects | Customers, Third-Party Vendors, Service Providers, Contractors. |
| Purpose of Processing | MetaSource uses this information to provide invoicing to and processing of payments from its customers and vendors. |
| Legal Basis for Processing | MetaSource is using the personal information in the performance of a contract. |
| Automated Processing or Profiling | No automated processing or profiling. |
| If Automated Processing is Used, Methods and Logic | N/A |
| Decisions with a Legal Effect that Use Automated Processing | N/A |
| Categories of Recipients who Receive this Personal Data | Contracted CRM, accounting, billing, payments, and budgeting service providers. |
| Whether the Personal Data is Transferred Outside of the European Economic Area | Yes, all personal data collected is processed and stored in the United States. |
| Retention Period | Finance records are preserved for at least seven years for reporting purposes, though there is no data retention policy for data used for MetaSource financial functions. |
Your Rights with Regard to the Data We Collect
As a Data Subject in the European Economic Area, you have the right to request, access, rectify, erase, and restrict how we process your Personal Data. These rights include the ability to review the Personal Data we have in our Information and Communications systems concerning you, the ability to make any corrections to that Personal Data, the ability to be informed of who that data may have been shared with, the ability to request that we erase all of your Personal Data, and the ability to restrict how we Process your Personal Data.
We are required to respond to any of your requests to exercise these above Data Subject rights within 30 days. Should we be unable to comply within 30 days, we will contact you anyway and let you know of any delay.
Exercising Your Rights
If you want to exercise your rights under the GDPR, you may contact us or our privacy point of contact at:
Organization
MetaSource, LLC
67 West 13490 South, Suite 300
Draper, UT 84020
(888) 634-7684
Privacy Point of Contact
General Counsel
67 West 13490 South, Suite 300
Draper, UT 84020
(888) 634-7684
Email: privacy@metasource.com
Withdraw Consent
If our legal basis for processing information your information is based on your consent, you may withdraw your consent at any time by contacting the Privacy Point of Contact listed above and informing us that you withdraw your consent.
Contacting Supervisory Authorities
If you would like to lodge a complaint against us, you may contact your local supervisory authority. If you have trouble locating a supervisory authority, please contact the Privacy Point of Contact above for help with contacting a supervisory authority.
Changes to Our Privacy Statement
We keep this privacy statement under regular review and will place any updates on our website. Paper copies of the privacy statement may also be obtained by contacting General Counsel at the information above and requesting a paper copy.