GDPR Compliance

1. Data Protection Principles

We adhere to the following principles regarding your data:

• Lawfulness, fairness, and transparency: We process data only with a valid legal basis.
• Purpose limitation: We collect data only for specified, explicit, and legitimate purposes.
• Data minimization: We only collect the data strictly necessary for our service.
• Accuracy: We take every reasonable step to ensure data is accurate and up to date.
• Storage limitation: We keep data only as long as necessary.

2. Rights of Data Subjects

Under GDPR, you have the following rights which we fully honor:

• Right to be informed: You have the right to know how your data is being used.
• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate or incomplete data.
• Right to erasure: Also known as the "right to be forgotten," you can request that we delete your data.
• Right to data portability: You can request to receive your data in a structured, commonly used, and machine-readable format.

3. Data Transfers

We predominantly host our data within the European Union. In cases where data is processed by service providers outside the EEA, we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place to maintain GDPR-level protection.

4. Contact

If you have any questions about our GDPR compliance or wish to exercise your rights, please contact our Data Protection Officer at [email protected].