GDPR Compliance

Your data protection rights under the General Data Protection Regulation

Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have several rights regarding your personal data:

  • Right to Access: You can request copies of your personal data
  • Right to Rectification: You can request correction of inaccurate personal data
  • Right to Erasure: You can request deletion of your personal data
  • Right to Restrict Processing: You can request limitation of processing your data
  • Right to Data Portability: You can request transfer of your data to another service
  • Right to Object: You can object to processing of your personal data

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract: Processing necessary for the performance of a contract
  • Legitimate Interest: Processing necessary for our legitimate business interests
  • Consent: Where you have given clear consent for specific processing
  • Legal Obligation: Processing necessary to comply with legal obligations

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Account data: Retained while your account is active
  • Transaction data: Retained for 7 years for accounting purposes
  • Marketing data: Retained until you withdraw consent
  • Support data: Retained for 3 years after case closure

International Transfers

When we transfer your personal data outside the European Economic Area, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions by the European Commission
  • Certification schemes and codes of conduct

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at:

Data Protection Officer

Email: dpo@papier.com

Address: 123 Design Street, San Francisco, CA 94102

We will respond to your request within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.