Legal
GDPR Compliance
Our commitment to protecting your privacy under the General Data Protection Regulation.
Welcome to Our GDPR Policy
This GDPR Policy outlines how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).
We've made every effort to explain our practices clearly. If you have questions about your privacy rights or how we handle your data, please contact our Data Protection Officer.
Definitions
Personal Data
Any information relating to an identified or identifiable natural person
Data Subject
The individual whose personal data is being processed
Processing
Any operation performed on personal data
Controller
The entity determining the purposes and means of processing
Processor
The entity processing data on behalf of the controller
Consent
Freely given, specific, informed, and unambiguous indication of wishes
1. Data Collection
1.1 Types of Data Collected
We collect the following categories of personal data:
- Identity information (name, username, email)
- Contact information (address, phone number)
- Technical data (IP address, browser type, device info)
- Usage data (service interactions, preferences)
1.2 Legal Basis
We process your data under the following legal bases:
- Contract performance
- Legal obligations
- Legitimate interests
- Your consent
2. Data Processing
2.1 Processing Purposes
- Providing and managing our services
- Communication and support
- Service improvement and development
- Legal compliance and security
2.2 Retention Period
- Data kept only as long as necessary
- Regular review of retention periods
- Secure deletion when no longer needed
3. Your Rights
3.1 GDPR Rights
- Right to access your data
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to object
3.2 Response Timeline
- We'll respond within 30 days
- Complex requests may take up to 90 days
- We'll keep you informed of any delays
4. Data Security
4.1 Security Measures
- Encryption in transit and at rest
- Access controls and authentication
- Regular security assessments
- Staff training and awareness
4.2 Breach Notification
- 72-hour notification to authorities
- Prompt notification to affected users
- Full cooperation with investigations
5. International Transfers
5.1 Transfer Mechanisms
- Standard Contractual Clauses
- Adequacy decisions
- Appropriate safeguards
5.2 Third-Party Verification
- Regular audits of data importers
- Contractual data protection obligations
- Monitoring of compliance
Changes to This Policy
We may update this GDPR Policy to reflect changes in our practices or legal requirements. We'll notify you of any material changes through our website or email.
Thank you for trusting us with your personal data. We're committed to protecting your privacy rights under the GDPR.
Questions about this policy?
Reach out and a real person will get back to you.