GDPR Compliance

1. Introduction

Trivosoft is committed to ensuring compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679. This document outlines how we handle personal data in accordance with GDPR requirements.

2. Our Commitment to GDPR

We are committed to protecting the privacy and rights of individuals whose personal data we process. We have implemented appropriate technical and organizational measures to ensure GDPR compliance.

3. Lawful Basis for Processing

We process personal data based on the following lawful bases:

• Consent: When you have given clear consent for us to process your personal data
• Contract: When processing is necessary for the performance of a contract
• Legal Obligation: When processing is necessary for compliance with a legal obligation
• Legitimate Interests: When processing is necessary for our legitimate business interests

4. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

4.1 Right of Access (Article 15)

You have the right to obtain confirmation as to whether personal data concerning you is being processed, and access to that personal data.

4.2 Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete personal data completed.

4.3 Right to Erasure (Article 17)

You have the right to request the deletion of your personal data under certain circumstances, including when the data is no longer necessary for the original purposes or when you withdraw consent.

4.4 Right to Restrict Processing (Article 18)

You have the right to request the restriction of processing of your personal data in certain situations.

4.5 Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

4.6 Right to Object (Article 21)

You have the right to object to processing of your personal data, including processing for direct marketing purposes.

4.7 Rights Related to Automated Decision Making (Article 22)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you.

5. Data Subject Requests

To exercise any of your rights, please contact us at owner@trivosoft.com. We will respond to your request within one month of receipt. In complex cases, we may extend this period by an additional two months and will inform you of the extension.

6. Data Protection Measures

We have implemented the following measures to protect personal data:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication measures
• Employee training on data protection
• Incident response procedures
• Regular backups and disaster recovery plans

7. Data Transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other appropriate safeguards as required by GDPR

8. Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and, where feasible, within 72 hours of becoming aware of the breach.

9. Data Protection Officer

For inquiries regarding data protection and GDPR compliance, please contact:

10. Supervisory Authority

If you believe that we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

11. Updates to This Policy

We may update this GDPR Compliance statement from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes.

12. Contact Information

For any questions or concerns about our GDPR compliance, please contact us: