GDPR Compliance

CaviusConnect is committed to full compliance with the EU General Data Protection Regulation (GDPR). We process personal data lawfully, fairly, and transparently while respecting your rights as a data subject.

Lawfulness, fairness, transparency: we process data only with a valid legal basis and provide clear information about our processing activities.

Purpose limitation: data is collected for specific, explicit purposes and not used for incompatible purposes.

Data minimization: we collect only data necessary for our services.

Accuracy: we maintain accurate records and provide tools to update information.

Storage limitation: data is retained only as long as necessary for the stated purpose.

Integrity and confidentiality: appropriate security measures protect against unauthorized access, loss, or damage.

We process personal data under the following legal bases:

• Contract performance: processing necessary to provide our services
• Legitimate interests: security, fraud prevention, service improvement
• Consent: marketing communications (where required)
• Legal obligation: compliance with applicable laws

As a data subject, you have the following rights:

• Right to access: request a copy of your personal data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure (“right to be forgotten”): request deletion of your data
• Right to restriction: limit how we use your data
• Right to data portability: receive your data in a machine-readable format
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: withdraw consent for processing at any time
• Right to lodge a complaint: file a complaint with your local supervisory authority

To exercise any of your GDPR rights, please contact our Data Protection Officer at dpo@caviusconnect.com. We will respond to your request within 30 days.

Many rights can also be exercised directly through your account settings, including data export and account deletion.

We primarily store data within the European Economic Area (EEA). When data is transferred outside the EEA, we use:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for countries with equivalent data protection
• Appropriate safeguards as required by GDPR Article 46

Our Data Protection Officer oversees GDPR compliance and serves as your primary contact for data protection matters.

Contact: dpo@caviusconnect.com
Postal correspondence details for Cavius Technologies, Attn: Data Protection Officer, are available on request via the address above.

If you believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu.

In the event of a personal data breach, we will notify affected individuals and relevant supervisory authorities within 72 hours as required by GDPR Article 33, unless the breach is unlikely to result in a risk to your rights and freedoms.

Our services are not directed at children under 16. We do not knowingly collect personal data from children without parental consent as required by GDPR Article 8.

We may update this GDPR compliance page to reflect changes in our practices or legal requirements. Material changes will be communicated via email or prominent notice on our platform.