Data Protection Notice

1. Data Protection Principles

We adhere to the following principles when processing your personal data:

• Lawfulness, fairness, and transparency
• Purpose limitation - data is collected for specified, explicit purposes
• Data minimization - only what is necessary is collected
• Accuracy - data is kept up to date
• Storage limitation - data is not kept longer than needed
• Integrity and confidentiality - appropriate security measures
• Accountability - we take responsibility for compliance

2. Types of Data We Process

We may process the following categories of personal data:

• Identity Data: Name, username, title
• Contact Data: Email address, telephone numbers, postal address
• Technical Data: IP address, browser type, device information
• Usage Data: Information about how you use our platform
• Marketing Data: Preferences for receiving marketing communications

3. Legal Basis for Processing

We process personal data on the following legal grounds:

• Consent: Where you have explicitly agreed to the processing
• Contract: Where processing is necessary for performing our contract with you
• Legal Obligation: Where processing is necessary for compliance with laws
• Legitimate Interests: Where processing is necessary for our legitimate interests

4. Your Data Protection Rights

Under data protection laws, you have the following rights:

• Right to Access: Obtain confirmation if we process your data and request a copy
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of personal data in certain circumstances
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Rights Related to Automated Decision Making: Not be subject to decisions based solely on automated processing

5. Data Security Measures

We implement appropriate technical and organizational measures including:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication requirements
• Staff training on data protection
• Incident response procedures
• Regular backups and disaster recovery planning

6. International Data Transfers

When we transfer data outside your region, we ensure appropriate safeguards are in place:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions by relevant authorities
• Privacy Shield certification where applicable
• Data processing agreements with third-party providers

7. Data Retention

We retain personal data only for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

8. Data Protection Officer

For data protection inquiries or to exercise your rights, contact our Data Protection Officer:

9. Complaints

If you are unsatisfied with our response to any data protection request, you have the right to lodge a complaint with your local data protection authority. We would, however, appreciate the chance to address your concerns before you approach the authority, so please contact us in the first instance.