GDPR Compliance

Introduction to GDPR

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. At SynAppz, we are committed to ensuring compliance with GDPR requirements and protecting the privacy rights of our users.

This GDPR Compliance Statement explains how SynAppz collects, processes, and protects personal data of individuals in the European Economic Area (EEA) in accordance with the General Data Protection Regulation.

Data Controller Information

SynAppz operates as a data controller for the personal information collected through our mobile application and website. As a data controller, we determine the purposes and means of processing personal data.

Our contact information:

• Company Name: SynAppz Inc.
• Address: 123 Tech Lane, San Francisco, CA 94107, USA
• Email: privacy@synappz.io
• Phone: (555) 123-4567

Data Protection Officer

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection strategy and implementation to ensure compliance with GDPR requirements. You can contact our DPO if you have any questions about the processing of your personal data or this GDPR Compliance Statement.

Contact our DPO at:

• Email: dpo@synappz.io
• Address: Data Protection Officer, SynAppz Inc., 123 Tech Lane, San Francisco, CA 94107, USA

Legal Basis for Processing Personal Data

Under the GDPR, we must have a legal basis for processing personal data. We rely on the following legal bases for processing your data:

Consent

We process certain data based on your explicit consent, which you can withdraw at any time. This includes:

• Processing your personal data for marketing purposes
• Collecting and analyzing certain usage data to improve our services
• Using your location data to provide location-based features

Contractual Necessity

We process data as necessary to fulfill our contractual obligations to you, including:

• Creating and managing your account
• Processing your content uploads and interactions
• Facilitating communication between users

Legitimate Interests

We process data when it is in our legitimate interests to do so and not overridden by your rights, including:

• Ensuring the security of our platform
• Preventing fraud and abuse
• Improving and developing our services

Legal Obligation

We process data to comply with legal obligations, including:

• Responding to legal requests from authorities
• Complying with tax and accounting requirements
• Maintaining records as required by law

Categories of Personal Data We Process

We collect and process the following categories of personal data:

Account Information

• Name
• Email address
• Username
• Password (encrypted)
• Profile picture
• Date of birth

Content Data

• Videos, images, and text you create and share
• Comments and messages
• Likes, shares, and other interactions

Technical Data

• IP address
• Device information
• Browser type and version
• Operating system
• Log data and usage statistics

Location Data

• Approximate location (based on IP address)
• Precise location (with your permission, via GPS)

Your Rights Under GDPR

Under the GDPR, individuals in the EEA have the following rights regarding their personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you.

Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure (Right to be Forgotten)

You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing based on legitimate interests and direct marketing.

Rights Related to Automated Decision Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

How We Implement Your Rights

Access and Data Portability

You can request a copy of your personal data through:

• The "Download Your Data" option in your account settings
• Contacting our Data Protection Officer

We will provide your data in a structured, commonly used, and machine-readable format (such as JSON or CSV).

Correction and Updating

You can update most of your personal information directly through your account settings. For information that cannot be updated through your account, please contact our Data Protection Officer.

Deletion

You can delete your account and associated personal data through:

• The "Delete Account" option in your account settings
• Contacting our Data Protection Officer

Please note that some information may be retained for legal or legitimate business purposes even after account deletion.

Objection and Restriction

You can manage your preferences for data processing through:

• Privacy settings in your account
• Marketing preferences in your notification settings
• Contacting our Data Protection Officer for specific restrictions

International Data Transfers

SynAppz is based in the United States, and your data will be transferred to and processed in the United States. To ensure that your personal data receives an adequate level of protection when transferred outside the EEA, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission
• Ensuring that third-party service providers are certified under frameworks such as the EU-US Data Privacy Framework
• Implementing technical and organizational measures to protect your personal data

By using our Services, you consent to the transfer of your data to the United States and other jurisdictions in which we operate.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data during transmission and at rest
• Regular testing and evaluation of security measures
• Access controls and authentication requirements
• Regular security audits and vulnerability assessments
• Employee training on data protection and security
• Incident response procedures

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, when required, notify affected individuals.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Different types of personal data may be retained for different periods based on:

• The purpose for which we use that information
• Legal obligations
• Accounting and tax requirements
• Potential disputes
• Guidelines issued by relevant data protection authorities

When personal data is no longer needed, we will securely delete or anonymize it.

Cookies and Similar Technologies

We use cookies and similar technologies on our website and app. For users in the EEA, we will obtain your consent before placing non-essential cookies on your device. Our Cookie Policy provides detailed information about the types of cookies we use, their purposes, and how you can control them.

You can manage your cookie preferences through our Cookie Consent Manager when you first visit our website and at any time thereafter through the Cookie Settings link in the footer.

Children's Data

Our Services are not intended for children under the age of 13, and we do not knowingly collect personal data from children under 13. For users between 13 and 16 years old in the EEA, we will only process their personal data with the consent of the holder of parental responsibility.

If we learn that we have collected personal data from a child under 16 without appropriate consent, we will take steps to delete that information as quickly as possible.

Changes to This GDPR Compliance Statement

We may update this GDPR Compliance Statement from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new statement on our website and updating the "Last Updated" date.

We encourage you to review this statement periodically to stay informed about how we are protecting your personal data.

Complaints

If you have concerns about our processing of your personal data, please contact our Data Protection Officer first. We will work with you to resolve your concerns.

You also have the right to lodge a complaint with a supervisory authority in the EU member state where you reside, work, or where an alleged infringement of the GDPR has occurred.

Contact Us