GDPR Privacy

Legal Basis for Processing Personal Data under GDPR

Under the General Data Protection Regulation (GDPR), we are committed to ensuring that your personal data is processed lawfully, fairly, and transparently. The GDPR outlines several legal bases under which personal data may be processed, and we adhere to these guidelines to protect your rights and privacy. Below, we detail the legal bases we rely on when processing your personal data:

  1. Consent: We may process your personal data if you have provided explicit consent for specific purposes. This means that you have agreed to allow us to use your data for certain activities, such as sending you newsletters, marketing materials, or personalized content. Consent must be freely given, specific, informed, and unambiguous. You have the right to withdraw your consent at any time, and if you choose to do so, we will cease processing your data for the purposes you originally agreed to.
  2. Performance of a Contract: The processing of your personal data may be necessary to fulfill the terms of a contract to which you are a party. For example, if you purchase a product or service from us, we may need to process your personal data to complete the transaction, deliver the product, or provide the service. This also includes any pre-contractual obligations, such as responding to your inquiries or preparing a quote.
  3. Legal Obligations: In some cases, we are required by law to process your personal data. This may involve complying with legal requirements, such as tax obligations, employment laws, or regulatory requirements. When processing your data under this basis, we do so to ensure compliance with our legal obligations and responsibilities.
  4. Vital Interests: Processing your personal data may be necessary to protect your vital interests or those of another natural person. This legal basis applies in situations where the processing is essential to save someone’s life or to protect their physical or mental well-being. For example, in a medical emergency, we may need to share your health information with healthcare providers.
  5. Public Interests: We may process your personal data when it is related to a task carried out in the public interest or in the exercise of official authority vested in us. This basis typically applies to activities that benefit society as a whole, such as research, public health initiatives, or law enforcement activities. In these cases, processing is conducted to serve the greater good and to fulfill our public duties.
  6. Legitimate Interests: We may process your personal data when it is necessary for the purposes of our legitimate interests, provided that these interests are not overridden by your rights and freedoms. Legitimate interests might include improving our services, protecting our business from fraud, ensuring network security, or conducting marketing activities. However, we always carefully consider the impact on your privacy and take steps to safeguard your rights.

In all instances, we are committed to providing clarity about the specific legal basis that applies to the processing of your personal data. If you have any questions or concerns, or if you would like to know whether the provision of your data is a statutory or contractual requirement, please do not hesitate to contact us. We are here to help you understand your rights and to ensure that your data is processed lawfully and transparently.

Your Rights under the GDPR

We respect your privacy and are dedicated to safeguarding your personal data. As part of our commitment, we ensure that you can exercise your rights under the GDPR. If you are within the European Union (EU), you have the following rights regarding your personal data:

  1. Right to Access: You have the right to request access to the personal data we hold about you. This includes the ability to obtain a copy of your data, understand how it is being used, and verify the lawfulness of the processing. If possible, you can access your data directly through your account settings. If you encounter difficulties, please contact us, and we will assist you in accessing, updating, or deleting your personal data.
  2. Right to Rectification: If any of the personal data we hold about you is incorrect, incomplete, or outdated, you have the right to request that it be corrected. We encourage you to keep your information up to date to ensure that we provide you with the best possible service.
  3. Right to Object: You have the right to object to the processing of your personal data when we rely on legitimate interests as the legal basis. If you believe that your rights and freedoms outweigh our legitimate interests, you may request that we cease processing your data. Additionally, you have the right to object to the use of your data for direct marketing purposes.
  4. Right to Erasure: Also known as the “right to be forgotten,” you have the right to request the deletion of your personal data when there is no longer a valid reason for us to retain it. This may include situations where your data is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where the processing is unlawful.
  5. Right to Data Portability: You have the right to request that your personal data be transferred to you or to a third party of your choice in a structured, commonly used, machine-readable format. This right applies to data that you have provided to us and that we process based on your consent or a contract.
  6. Right to Withdraw Consent: If you have given consent for the processing of your personal data, you have the right to withdraw that consent at any time. Upon withdrawal, we will cease processing your data for the purposes you initially consented to. Please note that the withdrawal of consent may affect the availability of certain services or features.

Exercising Your GDPR Data Protection Rights

To exercise any of your GDPR data protection rights, please contact us directly. We may require verification of your identity to ensure the security of your data. Once your request is received, we will make every effort to respond promptly and address your concerns.

If you believe that your rights have been violated or that your personal data has been mishandled, you have the right to file a complaint with a Data Protection Authority. For those within the European Economic Area (EEA), please reach out to your local data protection authority for further assistance.

Your privacy and data security are our top priorities, and we are committed to upholding your rights under the GDPR.