GDPR Compliance

Effective Date: November 11, 2024

At Ravologics, we take your privacy and data security seriously. To uphold our commitment to protecting your information, we adhere strictly to the European Union’s General Data Protection Regulation (GDPR). This regulation mandates how organizations handle and protect personal data of EU citizens, ensuring that your data is secure and that you have clear, transparent control over it. Here, we outline how we implement GDPR compliance to protect you and provide you with peace of mind when using our services.

What is GDPR?

The General Data Protection Regulation (GDPR) is a regulation enacted by the European Union to protect the data rights of its citizens. The law came into effect on May 25, 2018, and sets guidelines for how companies collect, process, store, and delete personal data. GDPR’s core principles ensure that individuals’ personal information is handled responsibly and ethically by any company offering goods or services to EU citizens, even if that company is based outside the EU.

GDPR includes rules for obtaining consent, granting data access rights, reporting data breaches, and allowing data deletion upon request, among other requirements. For you as a user, this regulation means greater control over your personal information and greater security of your data.

How Ravologics Complies with GDPR

Data Transparency

Ravologics believes in transparency regarding how we collect, use, and protect your data. When you interact with our website or services, we will always inform you about the type of data we collect, how it is used, and the lawful reasons for collecting it. Our Privacy Policy provides clear details on our data-handling practices and your rights as a user.

Consent Management

Under GDPR, your consent is required before collecting or processing your data for non-essential purposes. At Ravologics, we only collect data that’s necessary for providing our services to you. We use straightforward language to request your consent for data collection, so you know exactly what you’re agreeing to. You have the right to withdraw your consent at any time, and we make it easy to do so through your account settings or by contacting us.

Data Access and Portability

GDPR gives you the right to request access to your personal data and to receive a copy of it in a readable, commonly used format. This enables you to understand what information we hold and allows you to transfer your data to other services if you wish. At Ravologics, you can request access to your data at any time by contacting our support team. We will promptly provide you with your data, in line with GDPR requirements.

Data Minimization

We prioritize data minimization, which means we only collect and store the minimum amount of personal data necessary for specific purposes. By limiting the data we collect, we reduce potential exposure in the unlikely event of a data breach. This practice also aligns with GDPR’s focus on protecting your personal information.

Data Security Measures

The security of your data is a top priority for Ravologics. We implement robust security measures, including encryption, secure storage, and regular audits of our systems to safeguard your information. Our team is dedicated to staying updated on the latest security practices and complying with GDPR’s standards for protecting personal data.

Data Retention and Erasure

Under GDPR, you have the right to request that we delete your personal data. At Ravologics, we retain your data only as long as necessary to fulfill our service obligations or as required by law. If you decide to discontinue using our services, we will remove your data upon request. This ensures your information is not stored indefinitely and is removed responsibly when it is no longer needed.

Breach Notification

In the unlikely event of a data breach, GDPR requires companies to notify users if their personal data is at risk. At Ravologics, we have systems in place to detect and respond to data breaches. Should a breach occur, we will notify affected users as soon as possible and provide guidance on how to protect your information.

Your Rights Under GDPR

GDPR grants individuals several key rights over their personal data. Ravologics fully supports these rights and is committed to enabling you to exercise them:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: If your data is inaccurate, you have the right to request corrections.
• Right to Erasure: You can ask us to delete your personal data if it’s no longer necessary or if you withdraw consent.
• Right to Restrict Processing: You may request that we limit the processing of your data under certain circumstances.
• Right to Data Portability: You can obtain a copy of your data in a structured, machine-readable format.
• Right to Object: You can object to data processing based on legitimate interests or direct marketing.
• Rights in Relation to Automated Decision-Making: If any of our processes involve automated decision-making, you have the right to request human intervention.

How to Exercise Your GDPR Rights

At Ravologics, we’re here to assist you with any data-related requests. If you want to access, correct, or delete your data, or if you have any questions regarding our data practices, you can reach out to our data protection team by emailing [your contact email]. We will respond promptly, respecting the GDPR guidelines for timely responses.

Ongoing Commitment to Data Protection

GDPR compliance is an ongoing responsibility. Ravologics is committed to regularly reviewing and updating our data protection practices, ensuring that we meet GDPR standards and protect your privacy. Our team is trained in data protection and stays informed on any regulatory changes to maintain a high level of compliance and security.

Contact Us

If you have any questions about our GDPR compliance or want to know more about how we protect your data, please don’t hesitate to reach out. Our data protection officer is available to help with any concerns or requests.