GDPR-yhteensopivuus

1. Our Commitment to GDPR

Tiquo is committed to complying with the General Data Protection Regulation (GDPR). This document outlines our approach to GDPR compliance.

2. Data Protection Principles

We adhere to the following data protection principles:

• Lawfulness, fairness, and transparency: We process personal data lawfully, fairly, and transparently
• Purpose limitation: We collect personal data for specified, explicit, and legitimate purposes
• Data minimization: We collect only the personal data that is necessary
• Accuracy: We keep personal data accurate and up to date
• Storage limitation: We retain personal data only for as long as necessary
• Integrity and confidentiality: We ensure appropriate security of personal data

3. Legal Bases for Processing

We process personal data based on the following legal bases:

• Consent
• Performance of a contract
• Legal obligations
• Legitimate interests

4. Data Subject Rights

Under GDPR, individuals have the following rights:

4.1 Right to Access

You have the right to request a copy of your personal data.

4.2 Right to Rectification

You have the right to request correction of inaccurate personal data.

4.3 Right to Erasure

You have the right to request deletion of your personal data in certain circumstances.

4.4 Right to Restrict Processing

You have the right to request restriction of processing in certain circumstances.

4.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format.

4.6 Right to Object

You have the right to object to processing based on legitimate interests.

5. International Data Transfers

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses
• Adequacy decisions
• Other approved mechanisms

6. Data Protection Officer

For GDPR-related inquiries, please contact our Data Protection Officer at dpo@tiquo.co.

7. Supervisory Authority

If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with a supervisory authority.