GDPR

GDPR Compliance Policy

Effective Date: [March 11th, 2025]

At [Mart Bergsma] (“Company,” “we,” “our,” or “us”), we are committed to protecting the privacy and personal data of our users in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679. This GDPR Compliance Policy outlines how we collect, process, and protect personal data of individuals in the European Economic Area (EEA).

1. What is GDPR?

The General Data Protection Regulation (GDPR) is a European Union regulation that enhances the privacy rights of individuals and places stricter requirements on organizations processing personal data.

2. Personal Data We Collect

We may collect and process the following types of personal data:

Name, email address, phone number, and billing information.
IP address, device information, and browsing activity.
Any other information voluntarily provided by users.

3. Legal Basis for Processing

Under GDPR, we process personal data based on the following legal grounds:

Consent: When you provide explicit consent to process your data.
Contractual Necessity: When processing is necessary to fulfill a contract.
Legal Obligation: When we are required to comply with legal regulations.
Legitimate Interests: When processing is necessary for our business interests without overriding users’ rights.

4. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access: Request a copy of your personal data.
Right to Rectification: Request correction of inaccurate data.
Right to Erasure (“Right to be Forgotten”): Request deletion of your data.
Right to Restrict Processing: Request limitation of data processing.
Right to Data Portability: Request transfer of your data to another service.
Right to Object: Object to data processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Withdraw consent at any time.

To exercise your rights, contact us at [Your Contact Email].

5. Data Security & Retention

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. We retain personal data only for as long as necessary for the purposes stated in this policy or as required by law.

6. Data Transfers Outside the EEA

If we transfer personal data outside the EEA, we ensure adequate safeguards, such as Standard Contractual Clauses (SCCs) or other approved mechanisms, to protect your data.

7. Data Breach Notification

In the event of a data breach that affects your rights and freedoms, we will notify the appropriate data protection authorities and affected individuals in accordance with GDPR requirements.

8. Third-Party Processors

We may use third-party service providers to process personal data on our behalf. All third parties are required to comply with GDPR and implement appropriate security measures.