1. Lawful Processing

We process personal data only when there is a valid legal basis, such as user consent or legitimate business needs.

• Transparent data collection practices
• Clear purpose definition
• Limited data usage

2. Data Subject Rights

Users have rights over their personal data under GDPR.

• Right to access personal data
• Right to rectify inaccurate data
• Right to request deletion ("Right to be forgotten")
• Right to restrict or object to processing

3. Data Minimization

We collect and process only the data necessary for providing our services and avoid excessive or irrelevant data collection.

4. Data Security

Appropriate technical and organizational measures are implemented to protect personal data against unauthorized access, loss, or misuse.

5. Data Transfers

Where data is transferred outside applicable regions, we ensure adequate safeguards are in place to maintain compliance with GDPR requirements.

6. Compliance Responsibility

While Curofyx aligns with GDPR principles, users of the platform are responsible for ensuring their own compliance with applicable data protection laws.