GDPR Notice

Last updated: March 19, 2024

This notice explains how we process personal data in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

Nakyma acts as the data controller for personal data processed through our service.

2. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract fulfillment (providing our services)
• Legitimate interests
• Legal obligations
• Your consent

3. Your GDPR Rights

Under GDPR, you have the following rights:

3.1 Right to Access

• Request copies of your personal data
• Know how we use your data
• Understand who we share data with

3.2 Right to Rectification

• Correct inaccurate information
• Complete incomplete information

3.3 Right to Erasure

• Request deletion of your data
• Remove content you've shared

3.4 Right to Restrict Processing

• Limit how we use your data
• Temporarily stop processing

3.5 Right to Data Portability

• Receive your data in a structured format
• Transfer data to another service

3.6 Right to Object

• Object to direct marketing
• Object to processing based on legitimate interests

4. Data Protection Officer

Our Data Protection Officer can be contacted at contact@nakyma.eu

5. Supervisory Authority

You have the right to lodge a complaint with your local data protection authority.

6. International Transfers

For users in the EEA, we ensure appropriate safeguards for data transfers outside the EEA through:

• Standard contractual clauses
• Adequacy decisions
• Other legal mechanisms

7. Data Retention Periods

We retain personal data for:

• Active accounts: Duration of service
• Deleted accounts: Up to 30 days
• Backup data: Up to 90 days
• Legal requirements: As required by law

8. Automated Decision Making

We do not make automated decisions that significantly affect you without human intervention.