GDPR Compliance

Principles of Data Protection

We follow the core GDPR principles in all data processing activities:

• Lawfulness, fairness and transparency
• Purpose limitation
• Data minimization
• Accuracy
• Storage limitation
• Integrity and confidentiality
• Accountability

Data Processing

Personal data is processed only when there is a valid legal basis such as:

• User consent — freely given, specific, informed and unambiguous
• Legitimate business interest
• Contractual obligations — necessary for the performance of a contract
• Compliance with legal requirements

User Rights Under GDPR

Users located in the European Economic Area (EEA) have the following rights:

• Right of access — obtain a copy of the personal data we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your personal data ("right to be forgotten")
• Right to restrict processing — limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw previously given consent at any time

To exercise any of these rights, please contact us at:

International Data Transfers

Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place in accordance with GDPR requirements, including standard contractual clauses or adequacy decisions.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the competent supervisory authority within 72 hours and, where required, affected individuals without undue delay.

Data Protection Contact

For GDPR-related questions, requests, or complaints, please contact:

You also have the right to lodge a complaint with your local data protection supervisory authority.