GDPR Compliance

Your data protection rights under the General Data Protection Regulation

Our Commitment to GDPR

Automation by MsmePortal is committed to protecting your personal data and respecting your privacy rights. We comply with the General Data Protection Regulation (GDPR) and have implemented comprehensive measures to ensure your data is processed lawfully, fairly, and transparently.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You can request access to your personal data and information about how we process it.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data under certain circumstances.

Right to Restrict Processing

You can request limitation of processing of your personal data.

Right to Data Portability

You can request your data in a structured, machine-readable format.

Right to Object

You can object to processing of your personal data for certain purposes.

Data We Collect

We collect and process the following types of personal data:

  • Account Information: Name, email address, company details
  • Usage Data: How you interact with our platform
  • Technical Data: IP address, browser type, device information
  • Workflow Data: Data you input into your workflows
  • Communication Data: Support requests and correspondence

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract Performance: To provide our services to you
  • Legitimate Interest: To improve our services and prevent fraud
  • Consent: For marketing communications (where required)
  • Legal Obligation: To comply with applicable laws

Data Protection Measures

We implement appropriate technical and organizational measures to protect your data:

  • End-to-end encryption for data in transit and at rest
  • Regular security assessments and penetration testing
  • Access controls and authentication mechanisms
  • Employee training on data protection
  • Incident response procedures

Data Transfers

When we transfer your data outside the European Economic Area (EEA), we ensure adequate protection through:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions by the European Commission
  • Appropriate safeguards as required by GDPR

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Account data: For the duration of your account plus 3 years
  • Usage data: Up to 2 years for analytics purposes
  • Support data: Up to 3 years for quality assurance
  • Legal compliance: As required by applicable laws

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

Data Protection Officer: dpo@msmeportal.com

Privacy Team: privacy@msmeportal.com

Response Time: We will respond within 30 days

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately.

Updates to This Policy

We may update this GDPR compliance information from time to time. We will notify you of any material changes via email or through our platform. The latest version will always be available on this page.

Last updated: December 2024