Responsible processing
Kosmos Development aims to process personal information lawfully, minimally and for a specific purpose. The client remains responsible for ensuring that the website or AI journey has an appropriate lawful basis, privacy wording and customer consent for the information the client chooses to collect.
Operator relationship
Where Kosmos processes personal information on behalf of a client, Kosmos generally acts as an operator and follows the approved project instructions, subject to applicable law and system requirements.
Access and permissions
Access to client systems should be limited to what is necessary. Clients should use unique credentials, apply appropriate permissions and remove access when it is no longer required.
Incidents and requests
Suspected data incidents or data-subject requests related to a Kosmos-managed system should be reported promptly to kosmos.development1@gmail.com so the responsibilities and next steps can be assessed.