General Data Protection Regulation (GDPR)

What is GDPR?

GDPR (the European General Data Protection Regulation) is a set of rules designed to give you more rights and control over the personal data of EU Citizens. When a company has information that can directly or indirectly be identified with you, you have rights over what happens to that data specifically.

The GDPR applies to our collection, use, and transfer of user personal data. Our practices and procedures are set forth in our Privacy Policy, which was designed with the GDPR and other privacy legislation in mind.

The Rights of Users

Users may exercise certain rights regarding their Data processed by the Owner (YOU). In particular, Users have the right to do the following:

Request DPA for customers

You can request signed DPA via our support email: legal@nimbusweb.co

Withdraw consent at any time

Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.

Does it affect User / business?

If you hold or process the data of an any person in the EU, the GDPR will most likely apply to you, whether you’re based in the EU or not.

Object to processing of Data

Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.

Must data be stored in the EU to be GDPR Compliant?

No, this is a common misconception. While there are parts of regulation that apply to the transfer of data across regions, there is no requirement for data be stored in the EU.

Access Data

Users have the right to learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.

The right to rectify the data you store

Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.

Restrict the processing of Data

Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Owner will not process their Data for any purpose other than storing it.

Have their Personal Data deleted or otherwise removed.

Users have the right, under certain circumstances, to obtain the erasure of their Data from the Owner.

Receive their Data and have it transferred to another controller

Users have the right to receive their Data in a structured, commonly used machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance.

The right to object

Users have the right to bring a claim before their competent data protection authority.

Details about the right to object to processing

Users must know that, however, should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time without providing any justification. To learn, whether the Owner is processing Personal Data for direct marketing purposes, Users may refer to the relevant sections of Privacy Policy and Terms of Service.

How to exercise these rights

Please contact us legal@nimbusweb.co if you want to exercise this right, and we’ll be more than happy to send you all of the information we store