GDPR Compliance

Last updated: January 2024

Our Commitment to GDPR

SellerNova is committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and your rights as a data subject.

Legal Basis for Processing

We process personal data under the following legal bases:

• Contract: Processing necessary for the performance of our services
• Legitimate Interests: Processing necessary for our legitimate business interests
• Consent: Where you have given clear consent for processing
• Legal Obligation: Processing necessary to comply with legal requirements

Data Protection Measures

We implement appropriate technical and organizational measures to ensure data security:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication
• Employee training on data protection
• Data minimization practices
• Privacy by design principles

International Data Transfers

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable
• Additional security measures as required

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Providing our services
• Complying with legal obligations
• Resolving disputes
• Enforcing our agreements

Data Breach Notification

In the event of a personal data breach, we will:

• Notify the relevant supervisory authority within 72 hours (where required)
• Notify affected individuals without undue delay (where required)
• Document all breaches and actions taken

Data Protection Officer

For questions about our GDPR compliance or to exercise your rights, contact our Data Protection Officer:

Email: [email protected]
Phone: [DPO Phone Number]
Address: Menandrou, 3, GLAFKOS TOWER, Flat/Office 501, 1066, Nicosia, Cyprus

How to Exercise Your Rights

To exercise any of your GDPR rights:

1. Contact us at [email protected]
2. Provide proof of identity
3. Specify which right(s) you wish to exercise
4. We will respond within one month of receipt

Complaints

If you believe we have not complied with GDPR requirements, you have the right to lodge a complaint with your local supervisory authority. However, we encourage you to contact us first so we can address your concerns.

Updates to This Notice

We may update this GDPR notice from time to time. Any changes will be posted on this page with an updated revision date.