GDPR Policy
1. Introduction
Devimox IT Consultancy Private Limited (“Devimox”) is committed to ensuring the privacy and protection of personal data in accordance with the General Data Protection Regulation (GDPR). This policy outlines our approach to data protection and our commitment to compliance with GDPR requirements.
2. Scope
This policy applies to all personal data processed by Devimox, whether collected online or offline, including data collected through our website, email communications, customer support interactions, and any other means.
3. Data Collection and Processing
3.1 Lawfulness, Fairness, and Transparency: Devimox will collect and process personal data lawfully, fairly, and transparently, ensuring individuals are informed about the processing of their data and their rights under GDPR.
3.2 Purpose Limitation:Personal data will be collected for specified, explicit, and legitimate purposes and will not be further processed in a manner incompatible with those purposes.
3.3 Data Minimization: Devimox will only collect personal data that is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.
3.4 Accuracy: Devimox will take reasonable steps to ensure that personal data is accurate and kept up to date. Individuals have the right to request correction of inaccurate or incomplete data.
3.5 Storage Limitation: Personal data will be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data is processed.
4. Data Security
4.1 Technical and Organizational Measures: Devimox will implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
4.2 Confidentiality: Devimox will ensure that any person acting under its authority who has access to personal data does not process it except on instructions from Devimox, unless required to do so by law.
5. International Data Transfers
5.1 Legal Basis for Transfer: Devimox will only transfer personal data to countries or international organizations outside the European Economic Area (EEA) when adequate safeguards are in place to protect the data subject’s rights and ensure an adequate level of protection.
5.2 Cross-Border Data Transfers: Devimox, being based in Spain with a delivery office in India, will ensure that any international transfers of personal data comply with GDPR requirements, including the use of appropriate safeguards such as Standard Contractual Clauses or Binding Corporate Rules.
6. Data Subject Rights
6.1 Access and Rectification: Data subjects have the right to access their personal data held by Devimox and to request rectification of inaccurate or incomplete data.
6.2 Erasure and Restriction: Data subjects have the right to request the erasure or restriction of processing of their personal data under certain circumstances.
6.3 Data Portability: Data subjects have the right to receive their personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
6.4 Objection: Data subjects have the right to object to the processing of their personal data in certain circumstances, including direct marketing.
7. Data Protection Officer
Devimox has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this policy. The DPO can be contacted at [DPO’s contact details].
8. Policy Review
This GDPR policy will be reviewed and updated as necessary to ensure ongoing compliance with data protection laws and any changes in the business or regulatory environment.
9. Contact Information
If you have any questions or concerns regarding this GDPR policy or Devimox’s data protection practices, please contact us at:
Devimox IT Consultancy Private Limited
Support Email: info@devimox.com
10. Effective Date
This GDPR policy is effective as of 1st May 2024 and supersedes any previous versions.
