How AgoraBoard complies with the General Data Protection Regulation
AgoraBoard is committed to protecting the privacy and security of personal data in accordance with the European Union's General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and what rights you have under this regulation.
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It applies to organizations that process personal data of individuals in the European Union, regardless of where the organization is located.
You have the right to request a copy of all personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request.
You can request that we correct any inaccurate or incomplete personal data. You can update most information directly through your account settings.
You can request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can export your data at any time through your account settings.
You can request that we limit how we use your personal data in certain circumstances, such as while we verify the accuracy of the data.
You have the right to object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.
Where processing is based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.
You have the right to lodge a complaint with your local supervisory authority if you believe we have not complied with GDPR requirements.
We process personal data under the following lawful bases:
We implement comprehensive technical and organizational measures:
We primarily process data within the European Economic Area (EEA). When data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as:
We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our GDPR compliance. You can contact our DPO with any questions or concerns about how we handle your personal data.
Email: [email protected]
Response Time: Within 30 days for all requests
To exercise any of your GDPR rights, you can:
We will respond to all requests within 30 days. In complex cases, we may extend this period by an additional 60 days and will inform you of the extension and reasons.
In the event of a data breach that poses a risk to your rights and freedoms, we will:
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will delete it immediately.
We do not use automated decision-making or profiling that produces legal effects or significantly affects you. Any automated processing is limited to:
AgoraBoard maintains the following certifications and compliance standards:
Fully compliant
Information Security
Security & Privacy
Healthcare Data
We regularly review and update our GDPR compliance measures to ensure we maintain the highest standards of data protection. Any significant changes will be communicated through our website and to registered users.