GDPRCompliance

What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive privacy law that came into effect on May 25, 2018. It applies to all companies that process personal data of EU residents, regardless of where the company is located.

How VakyaLab Complies with GDPR

We have implemented comprehensive measures to ensure full GDPR compliance:

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract: To provide our services and fulfill our contractual obligations
• Legitimate Interest: To improve our services and prevent fraud
• Consent: For marketing communications and optional features
• Legal Obligation: To comply with applicable laws and regulations

Data Protection by Design

• Privacy considerations are built into all our systems and processes
• We collect only the minimum data necessary for our services
• Personal data is encrypted both in transit and at rest
• Regular security audits and assessments are conducted

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

Data Processing Activities

Personal Data We Collect

• Identity Data: Name, username, email address
• Contact Data: Billing address, phone number
• Technical Data: IP address, browser type, device information
• Usage Data: How you use our website and services
• Marketing Data: Your preferences for receiving marketing communications

How We Use Your Data

• To provide and maintain our services
• To process payments and prevent fraud
• To communicate with you about our services
• To improve our services and develop new features
• To comply with legal obligations

Data Transfers

We primarily store and process data within the European Economic Area (EEA). When we transfer data outside the EEA, we ensure adequate protection through:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other appropriate safeguards as required by GDPR

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Account Data: Retained while your account is active plus 30 days
• Transaction Data: Retained for 7 years for tax and accounting purposes
• Marketing Data: Retained until you withdraw consent
• Usage Data: Anonymized after 2 years

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours
• Inform affected individuals without undue delay
• Provide clear information about the breach and our response
• Take immediate action to contain and remedy the breach

Contact Our Data Protection Officer

If you have any questions about our GDPR compliance or wish to exercise your rights, please contact our Data Protection Officer:

Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your personal data in accordance with GDPR.