GDPR Compliance

Last updated: November 12, 2026

Our Commitment to GDPR

Corvynelotech is committed to compliance with the General Data Protection Regulation (GDPR) and respects the data protection rights of individuals in the European Economic Area (EEA) and beyond.

Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for a specific purpose
• Contract: Processing is necessary for a contract we have with you
• Legal obligation: Processing is necessary to comply with the law
• Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party

Your Rights Under GDPR

Under GDPR, you have the following rights:

• Right to access: You can request copies of your personal data
• Right to rectification: You can request correction of inaccurate or incomplete data
• Right to erasure: You can request deletion of your personal data under certain conditions
• Right to restrict processing: You can request restriction of processing under certain conditions
• Right to object: You can object to our processing of your personal data under certain conditions
• Right to data portability: You can request transfer of data to another organization or directly to you
• Right to withdraw consent: Where we rely on consent, you can withdraw it at any time

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month of receipt.

Data Protection Officer

For questions specifically related to data protection and GDPR compliance, you may contact our data protection team at [email protected].

Data Transfers

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, and where feasible, within 72 hours of becoming aware of the breach.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your residence, place of work, or place of the alleged infringement.

Updates to This Statement

We may update this GDPR compliance statement from time to time to reflect changes in our practices or legal requirements.