GDPR Policy

1. GDPR Compliance

Xpecto IT Solutions Pvt Ltd is committed to complying with the General Data Protection Regulation (GDPR) for all personal data of EU residents. This policy outlines our GDPR compliance measures.

2. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: We obtain explicit consent for marketing communications
• Contract: Processing is necessary to fulfill service agreements
• Legal Obligation: Compliance with applicable laws
• Legitimate Interest: Business operations and fraud prevention

3. Data Subject Rights

Under GDPR, you have the following rights:

• Right of Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive data in portable format
• Right to Object: Opt-out of marketing communications
• Rights Related to Automated Decision Making: Understand automated decisions

4. Data Protection Officer

For GDPR-related inquiries and to exercise your rights, you may contact our Data Protection Officer at:
Email: [email protected]

5. Data Transfers

We implement appropriate safeguards for transferring personal data outside the EU/EEA, including Standard Contractual Clauses and other mechanisms compliant with GDPR.

6. Data Breach Notification

In case of a personal data breach, we will notify affected individuals without undue delay as required by GDPR.

7. Exercising Your Rights

To exercise any of your GDPR rights, please submit a request to:
Email: [email protected]
We will respond to your request within 30 days.