GDPR Compliance

1. Our Commitment to GDPR

WebTrackly is committed to compliance with the General Data Protection Regulation (GDPR). This page outlines how we protect your rights as a data subject and ensure the lawful processing of personal data.

2. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Contract: Processing necessary for the performance of our services
• Legitimate Interests: Processing for business operations and service improvements
• Consent: Where you have given explicit consent for specific processing
• Legal Obligation: Where processing is required by law

3. Your Rights Under GDPR

As a data subject, you have the following rights:

4. Data Protection Measures

We implement appropriate technical and organizational measures:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication
• Staff training on data protection
• Data minimization principles
• Privacy by design and by default

5. Data Transfers

When we transfer personal data outside the EU/EEA, we ensure appropriate safeguards:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• Other approved transfer mechanisms

6. Data Retention

We retain personal data only as long as necessary:

• Account data: Duration of account activity plus legal retention period
• Transaction data: As required by tax and accounting regulations
• Marketing data: Until consent is withdrawn
• Log data: Maximum 90 days for security purposes

7. Data Breach Procedures

In case of a data breach:

• We will notify supervisory authorities within 72 hours
• Affected individuals will be informed without undue delay
• We maintain breach records and documentation
• We implement measures to prevent future breaches

8. Exercising Your Rights

To exercise any of your GDPR rights:

1. Contact our Data Protection Officer
2. Provide proof of identity
3. Specify which right you wish to exercise
4. We will respond within one month

9. Contact Our DPO

For any GDPR-related queries or to exercise your rights:

10. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe your rights have been violated. Contact details for EU data protection authorities can be found on the European Data Protection Board website.