GDPR Compliance

Introduction

This GDPR Compliance Policy outlines how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) of the European Union.

Data Controller

OpenGig (referred to as "we", "us", or "our" in this policy) is the data controller of your personal information.

Personal Data We Collect

We may collect and process the following types of personal data:

• Identity information (name, username, profile pictures)

• Contact information (email address, phone number)

• Account information (login details, preferences)

• Transaction data (purchases, payments, billing details)

• Technical data (IP address, browser type, device information)

• Usage data (how you use our website and services)

• Marketing and communications preferences

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Your consent

• Performance of a contract with you

• Compliance with legal obligations

• Protection of vital interests

• Public interest or official authority

• Legitimate interests pursued by us or third parties

Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

1. Right to be informed

   You have the right to know how we collect and use your personal data.

2. Right of access

   You have the right to request copies of your personal data.

3. Right to rectification

   You have the right to request that we correct any inaccurate information.

4. Right to erasure

   You have the right to request that we delete your personal data in certain circumstances.

5. Right to restrict processing

   You have the right to request that we restrict the processing of your data.

6. Right to data portability

   You have the right to request that we transfer your data to another controller.

7. Right to object

   You have the right to object to certain types of processing.

8. Rights related to automated decision making and profiling

   You have rights regarding automated decision making and profiling.

Data Security

We have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption of personal data, regular testing of security measures, and procedures to deal with any suspected data breach.

International Transfers

We may transfer your personal data to countries outside the European Economic Area (EEA). When we do, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented: EU-approved standard contractual clauses, approved certification mechanisms, or other legally valid transfer mechanisms.

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Contact Us

If you have any questions about this GDPR Compliance Policy or would like to exercise your GDPR rights, please contact our Data Protection Officer at privacy@example.com.