General Provisions
- The data controller of personal data collected via the website [website address] is [Company Name], with full registration details, email address: [email address], referred to as the "Administrator".
- Personal data collected by the Administrator via the website are processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and the Data Protection Act of 10 May 2018.
Types of Processed Personal Data, Purpose, and Scope of Data Collection Purpose of Processing and Legal Basis:
- The Administrator processes personal data via the website [website address] for: a. Concluding a contract at the User’s request, under Art. 6(1)(b) GDPR. b. Performing a contract when concluded, under Art. 6(1)(b) GDPR. c. On the basis of the User’s consent, under Art. 6(1)(a) GDPR. Users can withdraw consent at any time, but it does not affect the lawfulness of processing based on consent before its withdrawal. d. Fulfilling legal obligations, such as issuing and storing invoices, under Art. 6(1)(c) GDPR. e. Establishing, exercising, or defending legal claims, under Art. 6(1)(f) GDPR. f. Analytical purposes to improve services, under Art. 6(1)(f) GDPR. g. Archival purposes to secure information, under Art. 6(1)(f) GDPR. h. Handling complaints related to content on the Administrator’s site, under Art. 16 DSA.
Types of Personal Data Processed:
- The Administrator processes the following categories of User personal data: name, email address, phone number, home/mailing address, IP address, browser data, location, and other relevant data.
Personal Data Retention Period:
- Data are stored as long as necessary to perform the contract and after that for the period required by the statute of limitations.
- If processed based on consent, data are stored until consent is withdrawn and after that for the period required by the statute of limitations.
Users' Rights
Users have the right to:
- Access their data (Art. 15 GDPR).
- Rectify their data (Art. 16 GDPR).
- Erase their data (Art. 17 GDPR).
- Restrict processing (Art. 18 GDPR).
- Data portability (Art. 20 GDPR).
- Object to processing (Art. 21 GDPR).
- Withdraw consent at any time (Art. 7(3) GDPR).
To exercise these rights, send an email to hello@gtmedia.world.
Sharing Personal Data
Personal data may be shared with:
- Our employees and collaborators.
- Subcontractors supporting marketing, accounting, or legal services.
- Entities maintaining our IT network.
- Email service providers.
- Payment system providers.
Your data may be transferred outside the EEA to ensure proper service and newsletter functioning.
Final Provisions
The Administrator uses technical and organizational measures to protect personal data from unauthorized access, alteration, destruction, or loss. SSL protocols are employed for security. In matters not regulated by this Privacy Policy, GDPR and relevant national laws apply.