GDPR – Your data, your rights
Information for EU residents about how we process personal data under the General Data Protection Regulation.
Your rights
- Right of access: request a copy of your personal data.
- Right to rectification: correct inaccurate or incomplete data.
- Right to erasure: request deletion where no longer needed or consent withdrawn.
- Right to restrict processing: limit how we use your data in certain cases.
- Right to data portability: receive data in a structured, machine-readable format.
- Right to object: object to processing based on legitimate interests or direct marketing.
- Rights related to automated decisions: we do not use automated decision-making for client evaluations.
Lawful bases and processing
- Contract: to respond to inquiries and deliver services you request.
- Legitimate interests: to improve services, maintain security, and manage operations.
- Consent: for optional communications where applicable.
- Legal obligation: to comply with laws and regulations.
Processors may include fabricators, couriers, IT and analytics providers under data processing agreements.
International transfers
When transferring data outside the EEA, we use safeguards such as Standard Contractual Clauses and vetted processors with appropriate security measures.
Making a data request (DSAR)
- Email [email protected] with subject “GDPR Request”.
- We may ask for information to verify your identity.
- Response timeframe: typically within one month, extendable by two months for complex cases.
- If you are dissatisfied, you may contact your local supervisory authority.