GDPR Compliance

1. Our Commitment to GDPR

Financial Suite is fully committed to complying with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), which governs the processing of personal data of individuals within the European Economic Area (EEA). Although headquartered in the United States (Wilmington, Delaware), Financial Suite is subject to GDPR under Article 3(2) when offering services to individuals in the EEA. GDPR compliance is foundational to how we design, build, and operate our products and services.

We believe that robust data protection is not merely a legal obligation but a fundamental responsibility to our customers, partners, and users. Financial Suite processes sensitive financial data on behalf of businesses worldwide, and we recognize the trust that our clients place in us when they share this information. We have embedded data protection principles into every aspect of our operations, from product development to customer support.

Our approach to GDPR compliance is guided by the following principles, as set forth in Article 5 of the GDPR:

• Lawfulness, fairness, and transparency: We process personal data lawfully, fairly, and in a transparent manner. We clearly inform data subjects about how their data is used.
• Purpose limitation: We collect personal data only for specified, explicit, and legitimate purposes and do not further process it in a manner incompatible with those purposes.
• Data minimization: We ensure that personal data we process is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.
• Accuracy: We take reasonable steps to ensure that personal data is accurate and, where necessary, kept up to date. Inaccurate data is erased or rectified without delay.
• Storage limitation: We retain personal data in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the data is processed.
• Integrity and confidentiality: We process personal data in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical and organizational measures.
• Accountability: We are responsible for, and are able to demonstrate compliance with, all of the above principles.

This document outlines our GDPR compliance framework and provides detailed information about how we handle personal data. It should be read in conjunction with our Privacy Policy, Terms of Service, and Cookie Policy.

2. Data Controller Information

Under the GDPR, the data controller is the entity that determines the purposes and means of processing personal data. For the purposes of our platform and services, Financial Suite acts as the data controller for the personal data we collect directly from users of our website and services (such as account registration data, contact form submissions, and payment information).

When our clients use Financial Suite products to process their own customers' or employees' financial data, Financial Suite acts as a data processor on behalf of the client, who remains the data controller for that data. This distinction is governed by our Data Processing Agreements (see Section 9).

3. Data Protection Officer

In accordance with Articles 37-39 of the GDPR, Financial Suite has appointed a Data Protection Officer (DPO) to oversee our data protection strategy and ensure compliance with GDPR requirements. Our DPO operates independently and reports directly to the highest level of management.

The DPO is responsible for:

• Informing and advising Financial Suite and its employees about their obligations under the GDPR and other applicable data protection laws.
• Monitoring compliance with the GDPR, including managing internal data protection activities, advising on data protection impact assessments, training staff, and conducting internal audits.
• Acting as the primary point of contact for data subjects and supervisory authorities on all matters relating to the processing of personal data.
• Cooperating with the supervisory authority and acting as the contact point for issues relating to processing, including prior consultation under Article 36.

You may contact our Data Protection Officer directly at any time regarding any questions or concerns about our data protection practices:

4. Legal Basis for Processing

Under Article 6(1) of the GDPR, the processing of personal data is lawful only if, and to the extent that, at least one of the following legal bases applies. Financial Suite relies on the following legal bases depending on the specific processing activity:

4.1 Performance of a Contract (Article 6(1)(b))

We process personal data where it is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract. This includes:

• Processing account registration information (name, email address, company name) to create and maintain your Financial Suite account.
• Processing payment and billing information to fulfill our subscription obligations and provide you with access to our products.
• Processing usage data and configuration preferences to deliver, maintain, and improve the services you have subscribed to.
• Processing communication data to provide customer support and respond to service-related inquiries.
• Processing financial data that you upload or input into our platform as part of the analytical services we provide under our service agreement.

4.2 Consent (Article 6(1)(a))

Where we rely on consent as the legal basis for processing, we ensure that consent is freely given, specific, informed, and unambiguous, in accordance with Article 7 of the GDPR. You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. We rely on consent for:

• Sending marketing communications, newsletters, and promotional materials about Financial Suite products, features, and industry insights.
• Placing non-essential cookies and similar tracking technologies on your device, as detailed in our Cookie Policy.
• Processing demo request form submissions and following up with personalized product information.
• Conducting surveys and gathering feedback to improve our products and services.

4.3 Legitimate Interests (Article 6(1)(f))

We may process personal data where it is necessary for the purposes of the legitimate interests pursued by Financial Suite or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. We conduct a legitimate interest assessment (LIA) for each processing activity that relies on this basis. Our legitimate interests include:

• Ensuring the security and integrity of our platform, including fraud detection, prevention of unauthorized access, and monitoring for suspicious activity.
• Analyzing aggregated and anonymized usage patterns to improve our products, develop new features, and enhance user experience.
• Conducting internal research and development to advance our AI-powered financial analysis capabilities.
• Administering our business operations, including maintaining internal records, financial reporting, and corporate governance activities.
• Communicating with existing customers about service updates, security notices, and changes to our terms or policies that may affect their use of our products.

4.4 Legal Obligations (Article 6(1)(c))

We process personal data where it is necessary for compliance with a legal obligation to which Financial Suite is subject. This includes:

• Maintaining financial and tax records as required by U.S. federal and state tax legislation, including invoicing records and transaction histories.
• Responding to lawful requests from regulatory authorities, law enforcement agencies, and courts, in accordance with applicable legal procedures.
• Complying with anti-money laundering (AML) and know-your-customer (KYC) obligations as required by applicable financial regulations.
• Maintaining records of data processing activities as required by Article 30 of the GDPR.
• Fulfilling obligations under employment law for processing employee personal data.

5. Data Subject Rights

The GDPR grants individuals (data subjects) a comprehensive set of rights regarding their personal data. Financial Suite is committed to respecting and facilitating the exercise of these rights. Below is a detailed description of each right, along with the relevant GDPR article reference.

5.1 Right of Access (Article 15)

You have the right to obtain from Financial Suite confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and the following information:

• The purposes of the processing.
• The categories of personal data concerned.
• The recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organizations.
• Where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period.
• The existence of the right to request rectification or erasure of personal data, or restriction of processing, or to object to such processing.
• The right to lodge a complaint with a supervisory authority.
• Where the personal data is not collected from the data subject, any available information as to its source.
• The existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing.

We will provide a copy of the personal data undergoing processing free of charge. For any further copies requested, we may charge a reasonable fee based on administrative costs.

5.2 Right to Rectification (Article 16)

You have the right to obtain from Financial Suite without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement. You can update most of your account information directly through your Financial Suite account settings, or you may contact us to request rectification.

5.3 Right to Erasure / Right to be Forgotten (Article 17)

You have the right to obtain from Financial Suite the erasure of personal data concerning you without undue delay where one of the following grounds applies:

• The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
• You withdraw consent on which the processing is based (under Article 6(1)(a) or Article 9(2)(a)), and where there is no other legal ground for the processing.
• You object to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or you object to processing pursuant to Article 21(2).
• The personal data has been unlawfully processed.
• The personal data has to be erased for compliance with a legal obligation in EU or Member State law to which Financial Suite is subject.

Please note that the right to erasure is not absolute. Financial Suite may retain personal data where processing is necessary for compliance with a legal obligation, for the establishment, exercise, or defense of legal claims, or for archiving purposes in the public interest.

5.4 Right to Restriction of Processing (Article 18)

You have the right to obtain from Financial Suite restriction of processing where one of the following applies:

• The accuracy of the personal data is contested by you, for a period enabling Financial Suite to verify the accuracy of the personal data.
• The processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead.
• Financial Suite no longer needs the personal data for the purposes of the processing, but it is required by you for the establishment, exercise, or defense of legal claims.
• You have objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of Financial Suite override yours.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.

5.5 Right to Data Portability (Article 20)

You have the right to receive the personal data concerning you, which you have provided to Financial Suite, in a structured, commonly used, and machine-readable format (such as CSV or JSON). You also have the right to transmit that data to another controller without hindrance from Financial Suite, where:

• The processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a), or on a contract pursuant to Article 6(1)(b).
• The processing is carried out by automated means.

Where technically feasible, you have the right to have the personal data transmitted directly from Financial Suite to another controller. Financial Suite provides data export functionality within our platform to facilitate this right.

5.6 Right to Object (Article 21)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) (public interest) or Article 6(1)(f) (legitimate interests). Financial Suite shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

Where personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing. Where you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes. We will promptly honor all opt-out requests for marketing communications.

5.7 Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This right does not apply if the decision:

• Is necessary for entering into, or performance of, a contract between you and Financial Suite.
• Is authorized by EU or Member State law to which Financial Suite is subject and which also lays down suitable measures to safeguard your rights, freedoms, and legitimate interests.
• Is based on your explicit consent.

Financial Suite utilizes AI and machine learning technologies in our financial analysis products. Where any automated decision-making may significantly affect you, we ensure that you have the right to obtain human intervention, to express your point of view, and to contest the decision. We provide clear information about any automated processing logic and its potential impact.

6. How to Exercise Your Rights

Financial Suite has established a straightforward process for data subjects to exercise any of the rights described in Section 5. We are committed to making this process as accessible and efficient as possible.

6.1 Submitting a Request

To exercise any of your data subject rights, you may contact us through any of the following channels:

• Email: Send your request to dpo@financial-suite.ai with the subject line "Data Subject Rights Request."
• Postal Mail: Write to Data Protection Officer, Financial Suite, Inc., Wilmington, Delaware, United States.
• In-Platform: For certain rights (such as data access, rectification, and portability), you may use the data management tools available within your Financial Suite account settings.

6.2 Response Timeline

We will acknowledge receipt of your request within 5 business days. In accordance with Article 12(3) of the GDPR, we will respond to your request without undue delay and in any event within 30 days of receipt. If the request is complex or we receive a large number of requests, we may extend this period by a further two months, in which case we will inform you of the extension and the reasons for the delay within the initial 30-day period.

6.3 Identity Verification

To protect your personal data and prevent unauthorized access, we may need to verify your identity before processing your request, in accordance with Article 12(6) of the GDPR. We may ask you to provide:

• Confirmation of your name and email address associated with your Financial Suite account.
• Additional identifying information if we cannot reasonably verify your identity from the initial request.

We will only use information provided for identity verification purposes and will not retain it beyond the verification process.

6.4 Free of Charge

In accordance with Article 12(5) of the GDPR, the exercise of your data subject rights is provided free of charge. However, where requests are manifestly unfounded or excessive, in particular because of their repetitive character, Financial Suite may either charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested, or refuse to act on the request. In such cases, we will inform you of the reasons and of your right to lodge a complaint with the supervisory authority.

7. Data Protection Measures

Financial Suite implements comprehensive technical and organizational measures to ensure a level of security appropriate to the risk of processing, in accordance with Article 32 of the GDPR. Given the sensitive nature of financial data that our platform handles, we maintain rigorous security standards that meet or exceed industry best practices.

7.1 Technical Measures

• Encryption at Rest: All personal data and financial data stored in our systems is encrypted at rest using AES-256 encryption. Database volumes, backups, and file storage systems are fully encrypted, ensuring that data remains protected even in the event of unauthorized physical access to storage media.
• Encryption in Transit: All data transmitted between our clients and our servers is protected using TLS 1.2 or higher. We enforce HTTPS across all endpoints and implement HTTP Strict Transport Security (HSTS) to prevent downgrade attacks. Internal service-to-service communications are also encrypted.
• Access Controls: We implement the principle of least privilege across all systems. Role-based access control (RBAC) ensures that employees and systems have access only to the data necessary for their specific function. Access permissions are reviewed quarterly and revoked promptly upon role change or departure.
• Multi-Factor Authentication (MFA): MFA is mandatory for all employees accessing internal systems, production environments, and administrative tools. We also offer and encourage MFA for all Financial Suite customer accounts to provide an additional layer of protection.
• Network Security: Our infrastructure employs firewalls, intrusion detection and prevention systems (IDS/IPS), and network segmentation to isolate sensitive environments. We conduct regular vulnerability scans and penetration testing.
• Logging and Monitoring: All access to personal data is logged and monitored. We maintain comprehensive audit trails that record who accessed what data, when, and for what purpose. Anomalous activity triggers automated alerts for immediate investigation.
• Secure Development Practices: Our software development lifecycle incorporates security-by-design and privacy-by-design principles, in accordance with Article 25 of the GDPR. Code reviews, static and dynamic analysis, and security testing are integral parts of our development process.

7.2 Organizational Measures

• Employee Training: All Financial Suite employees receive mandatory data protection training upon onboarding and at least annually thereafter. Training covers GDPR principles, data handling procedures, security awareness, and incident reporting protocols. Specialized training is provided to employees whose roles involve regular processing of personal data.
• Confidentiality Agreements (NDAs): All employees, contractors, and third-party service providers with access to personal data are required to sign confidentiality agreements that impose strict obligations regarding the handling and non-disclosure of personal information.
• Regular Audits: We conduct internal data protection audits at least annually to assess compliance with our policies and the GDPR. These audits cover data processing activities, security controls, access management, and third-party compliance. Findings are reported to senior management and the DPO, and remedial actions are tracked to completion.
• Data Protection Impact Assessments (DPIAs): We conduct DPIAs for processing activities that are likely to result in a high risk to the rights and freedoms of data subjects, as required by Article 35 of the GDPR (see Section 11 for details).
• Data Protection Policies: We maintain comprehensive internal policies governing data protection, data retention, data breach response, acceptable use, and information security. These policies are reviewed and updated at least annually.
• Vendor Management: We conduct thorough due diligence on all third-party service providers who process personal data on our behalf, ensuring they provide sufficient guarantees of GDPR compliance before engagement.

8. Data Breach Notification

Financial Suite has established a comprehensive data breach response plan in accordance with Articles 33 and 34 of the GDPR. We take all potential data breaches extremely seriously and have procedures in place to detect, investigate, and respond to incidents promptly.

8.1 Notification to the Supervisory Authority

In the event of a personal data breach, Financial Suite will notify the competent supervisory authority within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons, in accordance with Article 33 of the GDPR.

Where the notification to the supervisory authority is not made within 72 hours, it shall be accompanied by reasons for the delay. The notification shall include, at a minimum:

• A description of the nature of the personal data breach, including the categories and approximate number of data subjects concerned and the categories and approximate number of personal data records concerned.
• The name and contact details of the Data Protection Officer.
• A description of the likely consequences of the personal data breach.
• A description of the measures taken or proposed to be taken to address the breach, including, where appropriate, measures to mitigate its possible adverse effects.

8.2 Notification to Affected Individuals

Where a personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, Financial Suite will communicate the breach to the affected data subjects without undue delay, in accordance with Article 34 of the GDPR. This communication will:

• Describe, in clear and plain language, the nature of the personal data breach.
• Provide the name and contact details of the Data Protection Officer or other contact point where more information can be obtained.
• Describe the likely consequences of the breach.
• Describe the measures taken or proposed to address the breach and mitigate its effects, including advice on steps individuals can take to protect themselves.

8.3 Notification to Clients (Processor Obligations)

Where Financial Suite acts as a data processor and becomes aware of a personal data breach affecting data for which a client is the data controller, we will notify the affected client without undue delay, enabling them to fulfill their own notification obligations under the GDPR. The specifics of breach notification timelines and procedures are outlined in our Data Processing Agreements.

8.4 Breach Documentation

In accordance with Article 33(5) of the GDPR, Financial Suite maintains a comprehensive record of all personal data breaches, regardless of whether they trigger notification obligations. This record includes the facts relating to the breach, its effects, and the remedial actions taken, and serves as evidence of our compliance.

9. Data Processing Agreements

In accordance with Article 28 of the GDPR, Financial Suite enters into Data Processing Agreements (DPAs) with all organizations that process personal data on our behalf (sub-processors), as well as with our clients where we act as a data processor.

9.1 Our Sub-Processors

Financial Suite engages a limited number of carefully selected third-party sub-processors to support the delivery of our services. Each sub-processor has been vetted for GDPR compliance and is bound by a Data Processing Agreement that includes all requirements set forth in Article 28(3) of the GDPR. Our key sub-processors include:

• Amazon Web Services (AWS): Cloud infrastructure and hosting services. AWS provides the underlying compute, storage, and networking infrastructure for the Financial Suite platform. AWS is certified under ISO 27001, SOC 2, and maintains compliance with the GDPR through their Data Processing Addendum.
• Stripe: Payment processing services. Stripe handles all payment card data and subscription billing on behalf of Financial Suite. Stripe is PCI DSS Level 1 certified and processes data in compliance with the GDPR.

We maintain an up-to-date list of all sub-processors and their processing activities. Clients under a DPA are notified of any changes to our sub-processor list and have the right to object to new sub-processors in accordance with the terms of their agreement.

9.2 DPA for Our Clients

Financial Suite provides a comprehensive Data Processing Agreement to all clients who use our platform to process personal data. Our DPA addresses all requirements of Article 28 of the GDPR, including:

• The subject matter, duration, nature, and purpose of processing.
• The types of personal data and categories of data subjects.
• The obligations and rights of the data controller (client).
• Our obligations as a data processor, including instructions from the controller, confidentiality, security measures, sub-processing, data subject rights assistance, breach notification, and audit rights.
• Requirements for data deletion or return upon termination of the agreement.

To request a copy of our Data Processing Agreement, please contact us at dpo@financial-suite.ai.

10. International Data Transfers

Financial Suite is headquartered in the United States (Wilmington, Delaware). We primarily store and process personal data within the United States. For EU/EEA individuals whose data we process, we ensure that appropriate safeguards are in place for international data transfers in accordance with Chapter V of the GDPR (Articles 44-49).

10.1 Standard Contractual Clauses (SCCs)

Where personal data is transferred to a country outside the EEA that has not received an adequacy decision from the European Commission, Financial Suite relies on the European Commission's Standard Contractual Clauses (SCCs) as adopted by Commission Implementing Decision (EU) 2021/914. These clauses are incorporated into our Data Processing Agreements with relevant sub-processors and provide contractual guarantees that personal data will be protected to the same standard as within the EEA.

10.2 Adequacy Decisions

Where the European Commission has issued an adequacy decision for a third country pursuant to Article 45 of the GDPR, we rely on that decision as the legal basis for the transfer. We monitor any changes to adequacy decisions and adjust our transfer mechanisms accordingly.

10.3 Additional Safeguards

In addition to the legal mechanisms described above, Financial Suite implements supplementary technical, contractual, and organizational measures to protect personal data transferred internationally, in line with the guidance from the European Data Protection Board (EDPB). These include:

• Encryption of personal data in transit and at rest during any international transfer.
• Contractual obligations prohibiting sub-processors from accessing personal data except as necessary to provide the contracted service.
• Regular assessments of the legal framework in destination countries, particularly regarding government surveillance and access to data.
• Data minimization practices to ensure that only necessary data is transferred internationally.
• Technical measures to pseudonymize or anonymize data where feasible prior to transfer.

11. Data Protection Impact Assessments

In accordance with Article 35 of the GDPR, Financial Suite conducts Data Protection Impact Assessments (DPIAs) where a type of processing, in particular using new technologies, is likely to result in a high risk to the rights and freedoms of natural persons.

11.1 When DPIAs Are Conducted

Financial Suite conducts a DPIA before initiating any processing activity that meets one or more of the following criteria:

• Systematic and extensive evaluation of personal aspects relating to natural persons, based on automated processing including profiling, on which decisions that produce legal effects or similarly significantly affect individuals are based.
• Processing on a large scale of special categories of data referred to in Article 9(1) or of personal data relating to criminal convictions and offences referred to in Article 10.
• Systematic monitoring of a publicly accessible area on a large scale.
• Introduction of new AI or machine learning features that process personal data in ways that could significantly affect data subjects.
• Significant changes to existing processing activities that alter the scope, purpose, or nature of the processing in ways that may increase risk.
• Processing activities identified as requiring a DPIA by the EDPB guidelines or relevant supervisory authorities.

11.2 DPIA Methodology

Our DPIA process follows a structured methodology that includes:

1. Description of Processing: A systematic description of the envisaged processing operations and their purposes, including, where applicable, the legitimate interest pursued by Financial Suite.
2. Necessity and Proportionality Assessment: An assessment of the necessity and proportionality of the processing operations in relation to their purposes.
3. Risk Assessment: An assessment of the risks to the rights and freedoms of data subjects, considering both the likelihood and severity of potential harms, including discrimination, identity theft, financial loss, damage to reputation, loss of confidentiality, and any other significant economic or social disadvantage.
4. Mitigation Measures: Identification of measures to address and mitigate identified risks, including safeguards, security measures, and mechanisms to ensure the protection of personal data and demonstrate GDPR compliance.
5. DPO Consultation: Our Data Protection Officer is consulted throughout the DPIA process and provides an independent opinion on the assessment.
6. Review and Approval: The DPIA is reviewed and approved by senior management before the processing activity commences.
7. Ongoing Monitoring: DPIAs are reviewed and updated regularly, particularly when there are changes to the processing activity or the risk environment.

Where a DPIA indicates that the processing would result in a high risk in the absence of measures taken by Financial Suite to mitigate the risk, we will consult the relevant supervisory authority prior to processing, in accordance with Article 36 of the GDPR.

12. Supervisory Authority

As a company established outside the European Union, Financial Suite does not have a single lead supervisory authority under the GDPR. Instead, each EEA Member State's data protection authority has jurisdiction over the processing of personal data of individuals within its territory. In accordance with Article 27 of the GDPR, Financial Suite has designated an EU Representative to serve as a point of contact for supervisory authorities and data subjects in the EEA.

You have the right to lodge a complaint with the supervisory authority of the EU Member State in which you reside or work, or in which the alleged infringement occurred, if you believe that the processing of your personal data infringes the GDPR (Article 77). A list of EEA data protection authorities can be found on the European Data Protection Board (EDPB) website. We encourage you to contact us first at dpo@financial-suite.ai so that we may address your concerns directly, but exercising your right to lodge a complaint with a supervisory authority is not contingent on first contacting us.

13. Changes to This Document

Financial Suite reserves the right to update this GDPR Compliance document from time to time to reflect changes in our data processing practices, applicable laws, or regulatory guidance. When we make material changes to this document, we will:

• Update the "Last Updated" date at the top of this page.
• Provide notice of significant changes through our website, by email to registered users, or through our platform's notification system, as appropriate.
• Where required by law or where changes materially affect the processing of your personal data, seek your consent to the updated terms before continuing to process your data under the new framework.

We encourage you to review this document periodically to stay informed about how we protect your personal data and comply with the GDPR. Previous versions of this document are available upon request by contacting our DPO.

14. Contact Us

If you have any questions, concerns, or requests regarding this GDPR Compliance document, our data protection practices, or the processing of your personal data, please do not hesitate to contact us.

For general information about our data handling practices, please also refer to our Privacy Policy, Terms of Service, and Cookie Policy.