GDPR Compliance

Your Data Rights

Under GDPR, you have the following rights:

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing

Data Processing Basis

We process your data under these legal bases:

Consent: When you explicitly agree to data processing
Contract: To fulfill our service obligations
Legal Obligation: To comply with laws
Legitimate Interests: For business operations

Data Protection Measures

We implement comprehensive security measures:

Encryption of personal data
Regular security assessments
Staff data protection training
Access control protocols
Data breach response procedures

International Data Transfers

For data transfers outside the EEA, we ensure:

Standard contractual clauses
Adequate level of data protection
Regular compliance audits
Transparency in transfer mechanisms

Data Retention

We retain personal data only as long as necessary:

Account data: While account is active
Transaction data: As required by law
Communication records: For service improvement
Marketing preferences: Until consent withdrawal

Your Choices

You can exercise your rights by:

Using our privacy dashboard
Contacting our Data Protection Officer
Submitting a rights request form
Updating communication preferences