GDPR Compliance

Last Updated: September 10, 2026

Overview

This document outlines our compliance with the General Data Protection Regulation and how we handle personal data of individuals within the European Economic Area and beyond.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: You have given explicit consent for processing your personal data for specific purposes
• Legitimate interests: Processing is necessary for our legitimate business interests, provided these do not override your fundamental rights
• Contractual necessity: Processing is required to fulfill a contract with you or take steps before entering into a contract

Data Subject Rights

Under GDPR, you have the following rights:

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies beyond the first request.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data under certain conditions, including when the data is no longer necessary for the purposes it was collected.

Right to Restrict Processing

You have the right to request restriction of processing your personal data under specific circumstances.

Right to Data Portability

You have the right to request transfer of your personal data to another organization or directly to you in a structured, commonly used format.

Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] with your request. We will respond within one month of receiving your request.

Data Protection Officer

For questions specifically related to data protection and GDPR compliance, you may contact our data protection contact at [email protected]

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

International Data Transfers

When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.