GDPR Compliance | CatchIQ
🇪🇺

GDPR Compliance

General Data Protection Regulation

CatchIQ is fully compliant with the EU General Data Protection Regulation (GDPR). Learn how we protect your rights and handle your personal data.

🛡️ Our GDPR Commitment

CatchIQ is committed to protecting the privacy and personal data of all EU citizens. We have implemented comprehensive measures to ensure full compliance with GDPR requirements.

Key Compliance Areas

  • Lawful basis for data processing
  • Data subject rights and procedures
  • Data protection by design and default
  • Privacy impact assessments
  • Data breach notification procedures
  • Data Protection Officer (DPO) appointment

⚖️ Legal Basis for Processing

We process personal data under the following lawful bases:

🤝 Contractual Necessity

Processing necessary for the performance of our service contract with you, including account management and service delivery.

✅ Consent

Where you have given clear consent for specific processing activities, such as marketing communications or optional features.

🎯 Legitimate Interest

For service improvement, security monitoring, and fraud prevention, where our interests don't override your rights.

⚖️ Legal Obligation

When required by law, such as tax reporting, regulatory compliance, or responding to legal requests.

👤 Your Rights Under GDPR

As an EU citizen, you have the following rights regarding your personal data:

📋 Right to Information

Be informed about how your data is collected, used, and shared.

👁️ Right of Access

Request copies of your personal data we hold about you.

✏️ Right to Rectification

Correct inaccurate or incomplete personal data.

🗑️ Right to Erasure

Request deletion of your personal data ("right to be forgotten").

⏸️ Right to Restrict

Limit how we process your personal data in certain circumstances.

📦 Right to Portability

Receive your data in a machine-readable format.

🚫 Right to Object

Object to processing based on legitimate interests or direct marketing.

🤖 Automated Decision Rights

Rights regarding automated decision-making and profiling.

📝 How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us:

📧 Contact Our DPO

Email: dpo@catchiq.com

Subject: GDPR Rights Request

Response Time: Within 30 days

Address: [Your EU Representative Address]

Phone: [EU Contact Number]

Office Hours: Monday-Friday, 9 AM - 5 PM CET

🔒 Data Protection Measures

We implement comprehensive technical and organizational measures:

🛡️ Technical Safeguards

  • End-to-end encryption (TLS 1.3, AES-256)
  • Access controls and authentication
  • Regular security audits and penetration testing
  • Secure data centers with physical protection
  • Automated backup and disaster recovery

📋 Organizational Measures

  • Data protection policies and procedures
  • Staff training on GDPR compliance
  • Privacy impact assessments
  • Data breach response procedures
  • Regular compliance reviews and audits

🌍 International Data Transfers

When transferring personal data outside the EU, we ensure adequate protection through:

  • Standard Contractual Clauses (SCCs): EU-approved data transfer agreements
  • Adequacy Decisions: Transfers to countries with adequate protection
  • Binding Corporate Rules: Internal data protection standards
  • Certification Schemes: Industry-recognized privacy certifications

🚨 Data Breach Procedures

In case of a personal data breach, we will:

  1. Detect and Contain: Identify and stop the breach immediately
  2. Assess Impact: Evaluate the risk to affected individuals
  3. Notify Authorities: Report to supervisory authority within 72 hours
  4. Inform Individuals: Notify affected persons if high risk to rights
  5. Document and Learn: Record the breach and improve procedures

⚖️ Supervisory Authority

If you're not satisfied with our response to your GDPR request, you have the right to lodge a complaint with your local supervisory authority:

Find your local authority:European Data Protection Board

Our Lead Authority: [Your lead supervisory authority based on main establishment]

📄 Data Processing Records

We maintain detailed records of our data processing activities, including:

  • Purposes of processing and legal basis
  • Categories of personal data and data subjects
  • Recipients of personal data
  • Data retention periods
  • Technical and organizational security measures

📞 Contact Information

🇪🇺 Data Protection Officer

Email: dpo@catchiq.com

Phone: [EU Contact Number]

Response Time: Within 30 days

Address:

[Your EU Representative Address]

[City, Country, Postal Code]

For urgent privacy matters or security concerns, please use our priority contact: privacy-urgent@catchiq.com