GDPR Uyumluluğu

What is GDPR?

The General Data Protection Regulation (GDPR) is a European Union regulation that strengthens data protection and privacy for individuals. Even though bsynqed is based in the United Kingdom, we apply GDPR principles to all users because we believe in strong data protection regardless of location.

Legal Basis for Processing

We process your data based on:

• Contract Performance: To provide the PMS and Channel Manager services you've signed up for
• Legitimate Interest: To improve our services, ensure security, and prevent fraud
• Consent: For marketing communications (you can opt out anytime)
• Legal Obligation: To comply with tax, accounting, and other legal requirements

Your Rights Under GDPR

GDPR grants you several important rights. Here's how we support each one:

Data Retention

We retain your data only as long as necessary:

• Active Accounts: Data is retained while your account is active
• Cancelled Accounts: Data is retained for 90 days after cancellation to allow account recovery, then deleted
• Legal Requirements: Some data (e.g., financial records) may be retained longer if required by law
• Backup Data: Backups are retained for 30 days, then permanently deleted

Data Transfers

Your data may be processed and stored outside the European Economic Area (EEA). When this happens, we ensure:

• Data is transferred only to countries with adequate data protection laws
• We use Standard Contractual Clauses (SCCs) approved by the European Commission
• All third-party processors (e.g., cloud providers) are GDPR-compliant
• Data is encrypted in transit and at rest

Data Breach Notification

In the unlikely event of a data breach that affects your personal data, we will:

• Notify you within 72 hours of becoming aware of the breach
• Provide details about what data was affected
• Explain the steps we're taking to address it
• Advise on steps you can take to protect yourself
• Report to relevant data protection authorities as required

How to Exercise Your Rights

To exercise any of your GDPR rights:

1. Through Your Account: Many rights can be exercised directly in your account settings (data export, profile updates, email preferences)
2. By Email: Send a request to [email protected] with:
   • Your name and email address
   • The right you wish to exercise
   • Any additional information needed to process your request

We'll respond to your request within 30 days. If your request is complex, we may extend this by up to 60 days, but we'll inform you of the delay.

Data Protection Officer

While we're a small team, we take data protection seriously. For GDPR-related inquiries, contact our privacy team at [email protected].

Right to Lodge a Complaint

If you believe we haven't handled your data properly, you have the right to lodge a complaint with your local data protection authority. However, we'd appreciate the opportunity to resolve any concerns directly first - please contact us at [email protected].