GDPR Compliance
Your privacy is important to us. This page explains how we comply with the General Data Protection Regulation (GDPR).
Last Updated: September 22, 2025
What is GDPR
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It strengthens and unifies data protection for all individuals within the European Union (EU) and the European Economic Area (EEA). The GDPR also addresses the export of personal data outside the EU and EEA areas.
Your Rights Under GDPR
Under GDPR, you have several important rights regarding your personal data:
Right of Access
You have the right to request copies of your personal data that we hold.
Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure (Right to be Forgotten)
You have the right to request deletion of your personal data under certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
Right to Object
You have the right to object to our processing of your personal data under certain circumstances.
Right to Restriction of Processing
You have the right to request that we limit the processing of your personal data under certain circumstances.
Legal Basis for Data Processing
We process your personal data based on the following legal grounds in accordance with Article 6 of the GDPR:
Contractual Necessity
Processing necessary for the performance of a contract with you:
- Account creation and management
- Service delivery and support
- Customer support and communication
Legitimate Interest
Processing necessary for our legitimate business interests:
- Service improvement and development
- Security monitoring and fraud prevention
- Business analytics and performance measurement
Consent
For marketing communications and optional features where you have given explicit consent.
Data Processing and Collection
Data We Collect
- Personal identifiers (name, email, user ID)
- Contact information
- Usage Information
- Technical data (IP address, browser type)
Processing Purposes
- Provision of our services
- Account management and authentication
- Communication and support
- Legal compliance and obligations
International Data Transfers
If we transfer your personal data outside the EU/EEA, we ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
Adequacy Decisions
Transfers to countries with European Commission adequacy decisions.
Standard Contractual Clauses
Use of Standard Contractual Clauses approved by the European Commission.
Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- Data encryption in transit and at rest
- Strict access controls and authentication
- Regular security audits and assessments
- Incident response procedures and breach notification
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us using the details provided below. We will respond to your request within one month, and may extend this period by two further months in complex cases.
How to Contact Us
Send your request to our Data Protection Officer at DPO@EZScite.com with your full name and specific request.
We will respond to your inquiry within 72 hours
We will respond to your request within 30 days of receipt.
Proof of identity (for security purposes)
We may require identity verification before processing your request to protect your personal data.
Supervisory Authority
You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR. You can contact your local data protection authority or the authority in the country where you believe the violation occurred.
Relevant Data Protection Authority
Contact your local data protection authority or the authority in the country where you believe the violation occurred.
Data Protection Officer
Our Data Protection Officer is responsible for ensuring GDPR compliance and handling your data protection inquiries:
Email: DPO@EZScite.com
We aim to respond to all GDPR-related inquiries within 72 hours.