Back to Home

GDPR Compliance

Your data rights under the General Data Protection Regulation

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR). This page explains your rights and how we help you exercise them.

Your GDPR Rights

Right to Access

Request a copy of the personal data we hold about you

Right to Rectification

Request correction of inaccurate or incomplete data

Right to Erasure

Request deletion of your personal data ('right to be forgotten')

Right to Restrict Processing

Request limitation of how we process your data

Right to Data Portability

Receive your data in a structured, machine-readable format

Right to Object

Object to processing of your personal data

How to Exercise Your Rights

To exercise any of your GDPR rights, you can:

1. Contact Our Data Protection Officer

Email: dpo@swifty168.com
Phone: +1 (800) 123-4567

2. Submit a Request Online

3. Access Your Account Settings

Many data management options are available directly in your account settings.

Our Response Time

We will respond to your GDPR request within one month of receiving it. In complex cases, we may extend this by an additional two months and will inform you of the extension and the reasons for the delay.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to fulfill our contractual obligations to you
  • Legitimate Interests: Processing necessary for our legitimate business interests
  • Legal Obligations: Processing required by law
  • Consent: Processing based on your explicit consent (which you can withdraw at any time)

Data Protection Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) for processing activities that are likely to result in high risks to your rights and freedoms. This helps us identify and minimize data protection risks.

Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach, as required by GDPR.

International Data Transfers

When we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions recognizing equivalent data protection in the recipient country
  • Binding Corporate Rules for transfers within our corporate group

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority. You can find your local authority at:

European Data Protection Board - Member Authorities

Additional Information

For more detailed information about how we collect, use, and protect your personal data, please review our: