1. Purpose and Scope
This GDPR and Data Protection Notice explains how NewzBari approaches personal data where the General Data Protection Regulation (GDPR) or similar data protection requirements apply to a particular processing activity.
NewzBari is an initiative of RyteByte Labs and provides a multi-tenant, white-label News SaaS platform for independent publishers and media organizations. The GDPR applies only where its territorial and material scope is met.
2. NewzBari and Publisher Roles
A Publisher generally determines the purposes and essential means of processing reader information collected through its own Publisher Portal and may therefore act as the Data Controller or equivalent legal entity.
NewzBari may act as a Data Processor when it hosts, stores, organizes, retrieves, transmits, backs up, or otherwise processes personal data on the Publisher's documented and lawful instructions to provide the contracted platform services.
NewzBari may independently act as a Controller for its own publisher account registration, subscription administration, billing, platform security, fraud prevention, customer support, and legal compliance activities.
The actual roles depend on the specific processing activity and applicable law.
3. Categories and Purposes of Processing
Depending on the service and configuration, information may include names, email addresses, telephone numbers, account identifiers, IP addresses, device and browser information, login records, reader comments, contact form submissions, newsletter subscription information, author and contributor information, and other information submitted through Publisher Portals.
Information may be processed to create and maintain accounts, provide subscription services, operate publisher dashboards, host websites, manage authentication, process payments, maintain security, detect fraud, provide support, send service notifications, maintain backups, improve platform functionality, comply with legal obligations, and establish or defend legal claims.
4. Legal Bases
Where GDPR applies, NewzBari will rely on an appropriate legal basis for each processing activity. Depending on the circumstances, these may include:
- Consent of the relevant individual.
- Performance of a contract or steps requested before entering into a contract.
- Compliance with a legal obligation.
- Protection of vital interests.
- Legitimate interests, where recognized and balanced against the individual's rights and freedoms.
- Establishment, exercise, or defence of legal claims.
Where consent is the applicable basis, it may be withdrawn without affecting the lawfulness of processing carried out before withdrawal.
5. Data Subject Rights
Depending on the circumstances and applicable law, individuals may have the right to:
- Request access to their personal data.
- Request correction of inaccurate or incomplete data.
- Request erasure of eligible personal data.
- Request restriction of processing.
- Object to certain processing activities.
- Request data portability where applicable.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with a competent supervisory authority.
Requests about information collected directly by an independent Publisher Portal should generally be directed to the relevant Publisher. Where NewzBari acts as a Processor, it will provide reasonable assistance to the Publisher as required by applicable law and the Data Processing Agreement.
6. Processors, Subprocessors and International Transfers
NewzBari may use cloud hosting, data storage, content delivery, DNS, security, email delivery, technical monitoring, and customer support providers to deliver its services.
Where these providers process personal data on behalf of a Publisher, NewzBari will impose appropriate data protection obligations through contractual arrangements. Current subprocessor information may be requested at [email protected].
Infrastructure or subprocessors may be located outside Bangladesh. Where international transfers are subject to legal restrictions, NewzBari will apply appropriate safeguards and transfer mechanisms required by applicable law, which may include adequacy decisions, standard contractual clauses, or other legally recognized safeguards.
7. Security, Breaches and Retention
NewzBari uses reasonable technical and organizational measures appropriate to the nature, scope, and risks of processing. Depending on the service, these may include access restrictions, authentication and authorization controls, secure communication protocols, infrastructure protection, monitoring, backup and recovery mechanisms, and incident response procedures.
Where required by applicable law, NewzBari will notify an affected Publisher without undue delay after becoming aware of a personal data breach involving data processed on that Publisher's behalf. The Publisher remains responsible for determining and fulfilling its own controller notification obligations, including the GDPR supervisory authority notification deadline where triggered.
Personal data is retained for the period reasonably necessary to provide the services and meet applicable legal obligations. Subscription expiry may lead to restriction of platform and backup access, followed by deletion or disposal under applicable retention practices and legal requirements.
8. Publisher Responsibilities
Publishers are responsible for determining lawful purposes, providing privacy notices, obtaining required consent, responding to data subject requests, maintaining appropriate records, and ensuring that their instructions to NewzBari are lawful.
Publishers should not submit special categories of personal data unless they have a lawful basis and the processing is specifically necessary and legally permitted.
9. Contact
For privacy or data protection requests concerning NewzBari's own processing, contact:
NewzBari An initiative of RyteByte Labs
Email: [email protected] Phone: +880 18 13 48 53 48 Website: https://www.newzbari.com
This Notice does not replace the full Privacy Policy, Cookie Policy, or Data Processing Agreement.