GDPR Compliance

    GDPR compliance was a requirement for eboks.cc from day one, not something added on later. This page covers how we handle and protect your data rights under European privacy law.

    Your GDPR Rights, Simplified

    Right to Access

    You can request a copy of all personal data we hold about you, which we'll provide in a machine-readable format within 30 days.

    Right to Rectification

    If your personal information is incorrect, you can update it at any time.

    Right to Erasure

    You can delete your account and all associated personal data at any time.

    Right to Restriction

    You can temporarily block us from processing your data while still using basic services.

    Right to Object

    You can opt out of specific data processing activities like analytics.

    Data Portability

    Export your data in a format that can be easily transferred to another service.

    To exercise any of these rights, contact us at dpo@eboks.cc and we'll respond within 30 days.

    Our Data Processing Practices

    Legal Basis for Processing

    We process your data based on one or more of the following legal grounds:

    • Contract fulfillment: Processing necessary to provide our service to you
    • Legitimate interest: Processing that benefits you and us (like service improvements)
    • Consent: Processing based on your explicit permission
    • Legal obligation: Processing required by law

    International Data Transfers

    We keep your data within the EU/EEA whenever possible. If we need to transfer data outside these regions, we ensure equivalent protection through mechanisms like:

    • EU Standard Contractual Clauses
    • EU-US Data Privacy Framework (for US partners)
    • Data processing agreements with all third-party processors

    Data Protection Impact Assessments

    Before implementing new features or technologies, we conduct thorough assessments of potential privacy impacts to ensure your rights are protected.

    Data Breach Protocol

    In the unlikely event of a data breach affecting your personal information, we will:

    • Notify relevant supervisory authorities within 72 hours
    • Inform affected users promptly with detailed information
    • Take immediate steps to mitigate any potential harm

    Data Protection Officer

    Our dedicated Data Protection Officer ensures we maintain the highest standards of data privacy and can address any GDPR-related questions or concerns.

    Email: dpo@eboks.cc