How Severus may act
For customer workspace content, the customer generally determines why the information is processed and Severus provides the service under its instructions. Severus may separately determine the purpose of account, security, commercial and support processing. The applicable agreement identifies the contracting operator and the parties' roles for the intended deployment.
Lawful processing
Processing must rely on an applicable lawful basis, such as performance of a contract, compliance with a legal obligation, legitimate interests assessed against individual rights, or consent where consent is the appropriate basis. The basis depends on the processing purpose and the relationship between the individual, customer and Severus.
Your rights
The Nigeria Data Protection Commission identifies rights including being informed, access, rectification, objection, restriction, portability, erasure, complaint to the supervisory authority and protections relating to automated decision-making. Rights can be subject to lawful exceptions and identity verification.
Requests
Email privacy@severus.ng with the workspace name and the right you want to exercise. If another organisation controls the workspace, we may route the request to that organisation. Do not email sensitive identity documents until a private verification channel is provided.
International transfers and incidents
Where a deployment involves international transfers, the relevant transfer mechanism and recipient safeguards should be documented for that deployment. Personal-data incidents are assessed under the NDP Act; notification to the Commission is required within the statutory period where the applicable risk threshold is met, with affected individuals informed where required.
Supervisory authority
The official authority is the Nigeria Data Protection Commission. Its website provides rights information and a privacy-breach reporting channel. You may raise a complaint there if an issue is not resolved.