GDPR Compliance Statement

Last Updated: November 5, 2025

🎬 Use the old afdah? Click here →

Introduction

This GDPR Compliance Statement describes how afdah complies with the General Data Protection Regulation (GDPR) regarding the processing of personal data of individuals in the European Union.

Your Rights Under GDPR

Under GDPR, you have the following rights:

  • Right to Access: Request copies of your personal data
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Request restriction of processing your personal data
  • Right to Data Portability: Request transfer of your data to another organization
  • Right to Object: Object to processing of your personal data
  • Rights Related to Automated Decision Making: Not be subject to automated decision-making

Legal Basis for Processing

afdah processes personal data under the following legal bases:

  • Consent: When you have given explicit consent
  • Legitimate Interests: For our legitimate business interests
  • Legal Obligation: When required by law

Data We Collect

afdah may collect:

  • IP addresses and device identifiers
  • Browser type and language preferences
  • Pages visited and time spent on site
  • Referring website addresses

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law.

International Data Transfers

If we transfer data outside the EU, we ensure appropriate safeguards are in place to protect your personal data in accordance with GDPR requirements.

Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Contact and Complaints

To exercise your GDPR rights or if you have concerns about how we handle your personal data, please contact us through the information provided in our Privacy Policy. You also have the right to lodge a complaint with your local data protection authority.