GDPR - Pacifis AI

Introduction

At Pacifis AI, we are deeply committed to safeguarding the privacy and security of personal data in compliance with the EU General Data Protection Regulation (GDPR). This policy outlines the measures we take to ensure data protection and uphold the rights of our users.

1. Consent and Data Management

We ensure that all personal data is collected and processed based on explicit, informed, and unambiguous consent from individuals.

Consent is voluntary and can be withdrawn at any time.
Special care is taken when processing data for children under 16, requiring parental or guardian consent.

2. Data Subject Rights

In compliance with GDPR, we uphold and respect the following rights of our users:

Right of Access: Users can request access to their personal data.
Right of Rectification: Users can correct inaccurate or incomplete data.
Right to Erasure: Users can request the deletion of their data (“Right to be Forgotten”).
Right to Restriction of Processing: Users can request a limitation on data processing activities.
Right to Data Portability: Users can transfer their data to another service provider.
Right to Object: Users can object to data processing for specific purposes, including marketing.

3. Data Minimization and Privacy by Design

We strictly adhere to the principles of data minimization by collecting only what is necessary for the intended purpose.

Regular reviews ensure unnecessary data is erased.
Privacy by design is integrated into our processes and systems to ensure user data is handled responsibly and securely.

4. Data Protection Impact Assessments (DPIAs)

For activities involving sensitive data or posing risks to individual rights, we conduct Data Protection Impact Assessments (DPIAs) to identify and mitigate potential risks.

5. Security Measures

To protect personal data, we employ advanced security measures, including:

Data encryption for sensitive information.
Firewalls and access controls to prevent unauthorized access.
Regular security audits and vulnerability assessments.

6. Data Breach Notification

In the unlikely event of a data breach, we will:

Notify the relevant supervisory authority within 72 hours.
Inform affected individuals about the breach, its nature, and any measures taken to mitigate its impact.

7. Employee Training

All employees at Pacifis AI receive regular training on:

GDPR principles and data subject rights.
Proper data handling and breach response procedures.
Internal compliance processes to ensure adherence to GDPR.

8. Documentation and Accountability

We maintain comprehensive and up-to-date documentation of:

Our data processing activities.
Policies, including our Personal Data Protection Policy, Data Retention Policy, and Privacy Notice.
This ensures accountability and transparency in all aspects of GDPR compliance.

9. Appointment of a Data Protection Officer (DPO)

We have appointed a Data Protection Officer (DPO) to oversee GDPR compliance. The DPO serves as the primary point of contact for any inquiries or concerns regarding data protection.

10. Review and Updates

This policy is reviewed regularly and updated as needed to maintain compliance with GDPR and other relevant data protection laws.

Contact Us

For questions or concerns related to GDPR or data privacy, please contact our Data Protection Officer (DPO) at:

Email: [email protected]

We are committed to protecting your data and addressing any concerns transparently and promptly.