GDPR Compliance

1. Your Rights Under GDPR

As a data subject under the General Data Protection Regulation (GDPR), you have the following rights:

• Right to Access: Request access to your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we process your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing of your personal data

2. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific purposes
• Contract: To fulfill our contractual obligations to you
• Legitimate Interest: For our legitimate business interests
• Legal Obligation: To comply with legal requirements

3. Data Protection Measures

We implement appropriate technical and organizational measures to ensure data security:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication
• Staff training on data protection
• Incident response procedures

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

5. International Data Transfers

When we transfer your data outside the EU, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses.

6. Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

7. Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority.