General Data Protection Regulation (GDPR) Compliance
Effective Date: January 1, 2024
Your Rights Under GDPR
If you are a resident of the European Union, you have the following rights regarding your personal data:
Right of Access (Article 15)
You have the right to obtain confirmation of whether we process your personal data and receive information about such processing.
Right to Rectification (Article 16)
You have the right to have inaccurate personal data corrected and incomplete personal data completed.
Right to Erasure (Article 17)
You have the right to have your personal data deleted in certain circumstances, including when the data is no longer necessary for the original purpose.
Right to Restrict Processing (Article 18)
You have the right to restrict the processing of your personal data in specific situations.
Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object (Article 21)
You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
Legal Basis for Processing
We process your personal data based on:
- Consent: When you voluntarily provide information or agree to marketing communications
- Contract: When necessary to fulfill our contractual obligations to you
- Legal Obligation: When required by applicable law
- Legitimate Interest: When necessary for our business operations and your interests are not overridden
Data Transfers
When transferring personal data outside the EU/EEA, we ensure adequate protection through:
- European Commission adequacy decisions
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules where applicable
Data Retention
We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy or as required by law. Specific retention periods include:
- Customer account data: Until account deletion or 7 years after last activity
- Purchase records: 7 years for tax and legal compliance
- Marketing communications: Until you withdraw consent
Data Protection Officer
For GDPR-related inquiries, contact our Data Protection Officer:
Email: [email protected]
Phone: +1 (312) 555-0187
Address: DIY Innovators Shop LLC, 2847 West Madison Street, Chicago, IL 60612, USA
Supervisory Authority
You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not complied with GDPR requirements.
Automated Decision-Making
We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.
Children's Data
We do not knowingly process personal data of children under 16 years of age without parental consent, in compliance with GDPR Article 8.
Breach Notification
In the event of a personal data breach likely to result in high risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach.
Contact Us: For any GDPR-related questions or to exercise your rights, contact us at [email protected] or +1 (312) 555-0187.
