Data Protection

GDPR Compliance

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR). Learn how we handle your data and your rights as a data subject.

Your data rights

Under the GDPR, you have the following rights regarding your personal data

Right to Access

You can request a copy of your personal data that we process.

Right to Rectification

You can ask us to correct inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data in certain circumstances.

Right to Restrict Processing

You can ask us to limit how we use your data.

Right to Data Portability

You can receive your data in a structured, machine-readable format.

Right to Object

You can object to processing based on legitimate interests or direct marketing.

Our compliance measures

We have implemented comprehensive measures to ensure GDPR compliance across our organization and platform.

  • Data Protection Officer appointed
  • Data Processing Agreements with all sub-processors
  • Standard Contractual Clauses for international transfers
  • Privacy by Design principles in product development
  • Regular privacy impact assessments
  • Breach notification procedures within 72 hours
  • Data retention policies and automated deletion
  • Employee privacy training programs

Data Processing Location

Your data is processed in data centers located in the European Union (Frankfurt) or United States, based on your preference during onboarding.

Sub-processors

We maintain a list of all sub-processors and notify customers of any changes. All sub-processors are bound by data processing agreements.

Legal Basis

We process data based on contract performance, legitimate interests, and where required, explicit consent.

Contact Our Data Protection Officer

If you have questions about GDPR compliance or want to exercise your data rights, please contact our Data Protection Officer.

dpo@riskapture.app

We respond to all requests within 30 days

Exercise your rights

Submit a data subject request to access, correct, delete, or export your personal data. We will process your request within 30 days.

Submit Data Request