📘 GDPR Compliance
General Data Protection Regulation (GDPR) compliance is a key part of our privacy approach. We commit to:
1. Lawful Data Collection
We only collect data with a legal basis (e.g., user consent, contract performance, legal obligation, or legitimate interest).
2. Transparency
All data collection purposes are clearly communicated, and users can contact us to inquire about data storage and handling.
3. Consent Management
Where required, we obtain explicit opt-in consent for data collection and offer clear opt-out mechanisms.
4. Data Access and Control
Users have full rights to:
Access their personal data
Correct inaccuracies
Delete their data (right to be forgotten)
Transfer their data to another service
5. Data Breach Response
In the event of a data breach, we will notify the relevant supervisory authority within 72 hours and inform affected users where necessary.
6. Third-Party Processors
All third-party services we use (e.g., analytics, payment gateways, email tools) are GDPR-compliant and sign Data Processing Agreements (DPAs).
If you have questions about your personal data or our privacy practices, please contact us at:
Email: contact@sorina.cloud
Website: https://sorina.cloud