GDPR Compliance

Last Updated: October 15, 2024

At Violin Plot, we are committed to safeguarding your personal data in accordance with the General Data Protection Regulation (GDPR). This GDPR Compliance Notice outlines how we collect, process, and protect your personal data, as well as your rights under GDPR.

The General Data Protection Regulation (GDPR) is an EU regulation that governs the processing of personal data. It gives individuals greater control over how their personal data is collected, used, and stored. GDPR applies to any organization processing the personal data of EU residents, regardless of the organization’s location.

2. Data We Collect

We may collect and process the following types of personal data in the course of providing services:

Contact Information: Name, email address, phone number, and address.
Account Information: Username, password, and preferences when you create an account.
Usage Data: Information such as your IP address, browser type, and usage patterns, including time spent on our website.
Transaction Data: Payment details and other information related to purchases of our services.
Communication Data: Data provided when communicating with us via email, forms, or other channels.

3. How We Use Your Data

We use your personal data to provide, improve, and personalize our services. Specific uses include:

Service Delivery: To fulfill our contractual obligations, such as providing services or responding to requests.
Customer Support: To assist with inquiries or technical issues.
Marketing: To send you promotional materials, with your explicit consent.
Analytics: To analyze website usage and enhance user experience.

4. Legal Basis for Processing

We rely on the following legal grounds for processing your personal data under GDPR:

Contractual Necessity: To perform our obligations under a contract with you (e.g., service delivery).
Legitimate Interests: To improve our services and protect against fraud, provided this does not override your rights.
Consent: Where required, we seek your explicit consent for specific uses (e.g., marketing).
Legal Obligation: Where processing is necessary to comply with a legal requirement.

We do not sell your personal data. However, we may share your data with:

Service Providers: Trusted third parties that assist in delivering services, such as payment processors or IT support.
Legal Compliance: If necessary to comply with legal obligations or regulatory requirements.

All third parties that process personal data on our behalf are required to adhere to GDPR and maintain strict confidentiality and security of your data.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for legal or compliance reasons. Upon your request, we will delete your data unless legally obligated to retain it.

As an EU resident, you have the following rights regarding your personal data:

Right to Access: Request a copy of your personal data.
Right to Rectification: Request corrections to inaccurate or incomplete data.
Right to Erasure: Request deletion of your data under certain conditions.
Right to Restrict Processing: Request limitation of data processing under certain circumstances.
Right to Data Portability: Request that your data be provided in a structured, machine-readable format.
Right to Object: Object to the processing of your data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Withdraw consent for processing where it is the legal basis.

8. How We Protect Your Data

We implement appropriate security measures, including encryption and secure access controls, to protect your personal data against unauthorized access, alteration, or disclosure. We regularly review our data security practices to ensure continued compliance with GDPR.

9. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or reliance on adequacy decisions.

10. Cookies and Tracking Technologies

We use cookies and other tracking technologies to improve your browsing experience. For more information on how we use cookies and how you can manage them, please refer to our [Cookie Policy].

We may update this GDPR Compliance Notice from time to time to reflect changes in our data processing practices or legal requirements. Any changes will be posted on this page, with the updated “Effective Date.” We encourage you to review this notice regularly.