GDPR Privacy Policy
Last updated: August 19, 2024
This Privacy Policy describes how xudaniu ("we", "us", or "our") collects, uses, stores, and protects personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws. By using xudaniu.com, you acknowledge the practices described in this document.
1. Data Controller
xudaniu acts as the data controller for personal data collected through this website. If you have any questions regarding how your data is processed, you may contact us at [email protected].
2. Legal Basis for Processing
We process your personal data only where we have a valid legal basis to do so. The legal bases we rely on include:
Consent — where you have given clear, informed, and freely withdrawable consent for a specific processing purpose.
Contractual necessity — where processing is required to fulfil a contract with you or to take steps at your request before entering into a contract.
Legitimate interests — where processing is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.
Legal obligation — where processing is necessary to comply with a legal obligation to which we are subject.
3. Personal Data We Collect
3.1 Data You Provide Directly
We may collect the following categories of personal data that you provide voluntarily:
Name and email address when you contact us, subscribe to communications, or create an account. Any content you submit through contact forms, feedback tools, or support channels.
3.2 Data Collected Automatically
When you visit our website, certain technical data may be collected automatically, including IP address, browser type and version, operating system, referring URLs, pages viewed, and timestamps of access. This data is used for security, analytics, and operational purposes.
3.3 Cookies and Tracking Technologies
We use cookies and similar technologies to operate and improve our services. You may manage your cookie preferences through your browser settings. Certain cookies are strictly necessary for the website to function and cannot be disabled. Others are used for analytics and may require your consent.
4. Purposes of Processing
We use the personal data we collect for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Providing and maintaining our services | Contractual necessity |
| Responding to enquiries and support requests | Legitimate interests / Contractual necessity |
| Sending service-related communications | Contractual necessity |
| Sending marketing communications | Consent |
| Improving and personalising user experience | Legitimate interests |
| Analytics and performance monitoring | Legitimate interests / Consent |
| Fraud prevention and security | Legitimate interests / Legal obligation |
| Compliance with legal obligations | Legal obligation |
5. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. When data is no longer needed, it is securely deleted or anonymised. Specific retention periods depend on the nature of the data and the purpose of processing.
6. Data Sharing and Transfers
6.1 Third-Party Service Providers
We may share personal data with trusted third-party service providers who assist us in operating our website and delivering our services. These providers are bound by data processing agreements and are permitted to use your data only as instructed by us.
6.2 Legal Disclosure
We may disclose personal data where required to do so by law, court order, or governmental authority, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
6.3 International Transfers
Where personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or other legally recognised transfer mechanisms.
7. Your Rights Under GDPR
As a data subject, you have the following rights with respect to your personal data:
Right of access — You may request a copy of the personal data we hold about you.
Right to rectification — You may request correction of inaccurate or incomplete personal data.
Right to erasure — You may request deletion of your personal data where there is no compelling reason for its continued processing.
Right to restriction of processing — You may request that we limit how we use your data in certain circumstances.
Right to data portability — You may request a copy of your data in a structured, commonly used, and machine-readable format.
Right to object — You may object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to lodge a complaint — You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been infringed.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframes required by applicable law, typically within 30 days.
8. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly to reflect current best practices. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
9. Children's Privacy
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us at [email protected] and we will take prompt steps to delete such data.
10. Automated Decision-Making and Profiling
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals without human review. If this practice changes, we will update this policy and seek consent where required by law.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external sites you visit.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the date at the top of this page. We encourage you to review this policy periodically. Continued use of our services after any changes constitutes your acknowledgement of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:
Email: [email protected]
Website: xudaniu.com