GDPR

At EXZIDE, we are committed to ensuring the privacy and protection of personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This GDPR Compliance Statement outlines our commitment to transparency and the rights of individuals regarding their personal data.

1. Data Collection and Processing:

1.1. Lawful Basis:

We only collect and process personal data when we have a lawful basis to do so. This may include the necessity of processing for the performance of a contract, compliance with legal obligations, consent, or legitimate interests pursued by the data controller or a third party.

1.2. Purpose Limitation:

Personal data is collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.

2. Data Subject Rights:

2.1. Access and Rectification:

Individuals have the right to access their personal data and correct any inaccuracies.

2.2. Erasure:

Individuals have the right to request the deletion of their personal data under certain circumstances.

2.3. Portability:

Individuals have the right to receive their personal data in a structured, commonly used, and machine-readable format.

2.4. Objection:

Individuals have the right to object to the processing of their personal data under certain circumstances.

3. Data Security:

3.1. Security Measures:

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing personal data.

3.2. Data Breach Response:

In the event of a data breach, we have procedures in place to identify, assess, and report the breach to the relevant supervisory authority and, when required, notify affected data subjects.

4. Data Processing Records:

4.1. Documentation:

We maintain records of our data processing activities in accordance with GDPR requirements.

5. Data Protection Officer:

5.1. Contact Information:

For any inquiries related to data protection, including the exercise of data subject rights, our Data Protection Officer can be contacted at sean@exzide.com.

6. Third-Party Data Processors:

6.1. Third-Party Agreements:

We have contracts in place with any third-party data processors to ensure they comply with GDPR requirements and the protection of personal data.

7. Consent:

7.1. Obtaining Consent:

When required, we obtain explicit consent from individuals for the processing of their personal data.

8. Privacy by Design:

8.1. Data Protection Impact Assessments (DPIA):

We conduct DPIAs for processing activities that present a high risk to individuals’ rights and freedoms.

9. Updates to GDPR Compliance:

9.1. Review and Update:

We regularly review and update our GDPR compliance measures to ensure ongoing alignment with the regulation and any relevant changes in the data protection landscape.

This GDPR Compliance Statement reflects our commitment to upholding the principles of data protection and respecting the rights of individuals. For any GDPR-related inquiries or concerns, please contact our Data Protection Officer at sean@exzide.com.