GDPR Compliance

1. Our GDPR Commitment

Nubinix is committed to complying with the General Data Protection Regulation (GDPR) and protecting the privacy and personal data of all individuals, including our customers, website visitors, and employees. We have implemented comprehensive measures to ensure full GDPR compliance.

2. Legal Basis for Processing

We process personal data based on the following legal grounds:

2.1 Consent

We obtain explicit consent for marketing communications, newsletter subscriptions, and non-essential cookies.

2.2 Contract Performance

We process data necessary to fulfill our contractual obligations and provide our cloud services.

2.3 Legitimate Interest

We process data for legitimate business interests such as improving our services, fraud prevention, and analytics.

2.4 Legal Obligation

We process data to comply with legal requirements and regulatory obligations.

3. Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

4. Data Processing Principles

We adhere to the following GDPR principles:

• Lawfulness, Fairness, and Transparency: We process data lawfully, fairly, and transparently.
• Purpose Limitation: We collect data for specified, explicit, and legitimate purposes.
• Data Minimization: We only collect data that is adequate, relevant, and limited to what is necessary.
• Accuracy: We take steps to ensure data is accurate and up-to-date.
• Storage Limitation: We retain data only as long as necessary for the intended purpose.
• Integrity and Confidentiality: We implement appropriate security measures to protect data.
• Accountability: We demonstrate compliance with all GDPR principles.

5. Data Protection Measures

5.1 Technical Safeguards

• End-to-end encryption for data transmission and storage
• Multi-factor authentication and access controls
• Regular security assessments and penetration testing
• Secure cloud infrastructure with industry-standard security
• Automated backup and disaster recovery systems

5.2 Organizational Safeguards

• Data protection training for all employees
• Privacy by design and default principles
• Regular privacy impact assessments
• Data processing agreements with third parties
• Incident response and breach notification procedures

6. Data Processing Records

We maintain detailed records of our data processing activities including:

• Purposes of processing
• Categories of personal data processed
• Categories of data subjects
• Recipients of personal data
• Data retention periods
• Security measures implemented

7. Third-Party Data Processors

We work with trusted third-party service providers who assist in delivering our services. All processors are bound by:

• Data Processing Agreements (DPAs) that comply with GDPR
• Standard Contractual Clauses (SCCs) for international transfers
• Regular security assessments and compliance audits
• Data breach notification requirements

8. International Data Transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure adequate protection through:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules (BCRs)
• Certification schemes and codes of conduct

9. Data Breach Response

In the event of a data breach, we have procedures in place to:

• Detect and assess the breach within 72 hours
• Notify the relevant supervisory authority
• Inform affected individuals without undue delay
• Document all breach incidents and responses
• Implement remedial measures to prevent future breaches

10. Exercising Your Rights

To exercise any of your GDPR rights, please contact us:

We will respond to your request within 30 days and may require verification of your identity.

11. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated. The relevant authority depends on your location within the EU.

12. Updates to This Policy

We regularly review and update our GDPR compliance measures. Any significant changes to this policy will be communicated to you through our website or direct communication.