GDPR Compliance

GDPR Principles We Follow

• Lawfulness, fairness, and transparency: We process data legally, fairly, and transparently
• Purpose limitation: Data is collected for specified, explicit purposes only
• Data minimization: We collect only necessary data
• Accuracy: Personal data is kept accurate and up to date
• Storage limitation: Data is retained only as long as necessary
• Integrity and confidentiality: Appropriate security measures protect your data
• Accountability: We demonstrate compliance with GDPR principles

Data Processing Activities

Your GDPR Rights

To exercise any of these rights, please contact us:

Data Security Measures

• End-to-end encryption for data in transit and at rest
• Multi-factor authentication for system access
• Regular security audits and penetration testing
• Employee training on data protection
• Incident response plan for data breaches
• Secure backup and disaster recovery systems

International Data Transfers

When transferring data outside the EU/EEA, we ensure adequate safeguards through Standard Contractual Clauses (SCCs) approved by the European Commission. All service providers are contractually bound to GDPR-equivalent standards.

Data Breach Notification

In the unlikely event of a data breach affecting your personal data, we will notify you and relevant supervisory authorities within 72 hours as required by GDPR Article 33 and 34.

Questions or Concerns?

If you have questions about our GDPR compliance or wish to exercise your rights, please contact our Data Protection Officer. You also have the right to lodge a complaint with your local supervisory authority.