GDPR Policy

Introduction

This GDPR (General Data Protection Regulation) policy outlines the measures taken to ensure compliance with the GDPR regulations when collecting, processing, and storing personal data. The policy applies to all organizations, regardless of their location, that collect, process, and store personal data of EU citizens.

 

What is GDPR?

The GDPR is a regulation that came into effect on May 25, 2018, aimed at protecting the personal data of EU citizens. It sets out the rules for how personal data should be collected, processed, and stored.

 

What Personal Data is Collected?

Personal data that may be collected includes but does not limit to:

 

Name

Email address

Phone number

Address

IP address

Browser information

Location data

Other personal data as necessary

 

How is Personal Data Collected?

Personal data may be collected through website forms, email communication, and website analytics. Website forms may include contact forms, registration forms, and surveys. Personal data is only collected when necessary.

 

How is Personal Data Used?

Personal data collected is used for the following purposes:

 

To communicate with individuals regarding products or services.

To provide customer support.

To analyze website traffic and user behaviour.

To comply with legal obligations.

Is Personal Data Shared with Third Parties?

 

Personal data may be shared with third parties to facilitate the provision of products or services. This may include web hosting providers, payment processors, and marketing services. Appropriate measures are taken to ensure that any third parties with access to personal data comply with GDPR regulations.

 

How is Personal Data Stored?

Personal data is stored securely on servers or third-party servers. Appropriate measures are taken to ensure that personal data is protected from unauthorized access, disclosure, or use.

​

How Long is Personal Data Stored?

Personal data is stored for as long as necessary or as required by law. After that, personal data is deleted securely.

 

What are the Data Subject Rights?

Data subjects have the following rights under GDPR:

 

The right to access personal data.

The right to rectify personal data.

The right to erase personal data.

The right to restrict processing.

The right to data portability.

The right to object to processing.

The right to withdraw consent.

How to Exercise Data Subject Rights?

 

Data subjects can exercise their rights by contacting the organization through email or postal mail. The organization will respond to the request within one month.

 

Conclusion

This GDPR policy outlines the measures taken to ensure compliance with GDPR regulations when collecting, processing, and storing personal data. If you have any questions or concerns about this policy, please contact the organization.