GDPR Compliance

1. What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It strengthens and unifies data protection for individuals within the European Union (EU) and addresses the export of personal data outside the EU.

GDPR applies to any organization that processes personal data of EU residents, regardless of where the organization is located.

2. Data We Collect

Under GDPR, we collect and process the following categories of personal data:

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract: To provide our services and fulfill our contractual obligations
• Legitimate Interest: To improve our services, prevent fraud, and ensure security
• Consent: For marketing communications and optional features
• Legal Obligation: To comply with applicable laws and regulations

4. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

5. Data Retention

We retain your personal data only for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Prevent fraud and ensure security

Specific retention periods vary depending on the type of data and the purpose for which it was collected. You can request information about retention periods for specific data categories.

6. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules
• Certification schemes

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection
• Incident response procedures

8. Data Breach Notification

In the event of a data breach that poses a high risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach, as required by GDPR.

9. Children's Data

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

10. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our data protection activities. You can contact our DPO at:

Email: [email protected]
Subject: GDPR Inquiry - [Your Request Type]

11. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe we have not handled your personal data in accordance with GDPR. You can contact your local data protection authority or the authority in the country where the alleged infringement occurred.

12. Updates to This Policy

We may update this GDPR compliance page from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this page periodically.