Introduction At PacifiSai, we are dedicated to safeguarding the privacy and security of personal data, in alignment with the EU General Data Protection Regulation (GDPR). Our policy details the measures we undertake to protect data and respect the rights of our users.

1. Consent and Data Management We secure explicit, informed, and clear consent from individuals before collecting and processing their personal data. This consent is given freely and may be revoked at any moment. Special care is taken in the processing of data for children under 16, ensuring parental consent is obtained.
2. Data Subject Rights Under GDPR, we champion the following rights for our users:

• Right of Access: Users can request to see their personal data.
• Right of Rectification: Users have the ability to correct inaccurate or incomplete data.
• Right to Erasure: Users can ask for their data to be deleted.
• Right to Restriction of Processing: Users may request that their data processing be limited.
• Right to Data Portability: Users have the option to move their data to another service.
• Right to Object: Users can oppose the processing of their data for particular reasons.

3. Data Minimization and Privacy by Design We collect only what is necessary for our intended purposes and continually assess our data inventory to discard unnecessary data. We adopt privacy by design principles to ensure the minimization of data collection.
4. Data Protection Impact Assessments (DPIAs) We carry out DPIAs for processing activities that could impact individuals’ rights and freedoms, especially concerning sensitive data.
5. Security Measures We enforce stringent security protocols including data encryption, firewalls, access controls, and routine security reviews to guard against unauthorized access and data breaches.
6. Data Breach Notification Should a data breach occur, we will inform the relevant authorities and impacted individuals within 72 hours, providing details of the breach and our response.
7. Employee Training Our team is regularly trained on GDPR guidelines, the rights of data subjects, how to handle data breaches, and our internal GDPR compliance procedures.
8. Documentation and Accountability We keep comprehensive records of our data processing activities and policies, including our Personal Data Protection Policy, Data Retention Policy, and Privacy Notice.
9. Appointment of a Data Protection Officer (DPO) A Data Protection Officer has been appointed to oversee GDPR compliance and serve as a contact point for GDPR-related questions.
10. Review and Update We routinely review and update this policy to ensure ongoing adherence to GDPR and other pertinent data protection legislation.

Contact Us For any inquiries or concerns regarding GDPR or data privacy, please reach out to our Data Protection Officer at support@pacifisai.com.