GDPR Statement | The Perez Code

1. Scope

This GDPR Statement applies to individuals located in the European Economic Area (EEA) and the United Kingdom whose personal data is processed by The Perez Code in connection with our products and services. We are committed to protecting the privacy rights of all individuals in accordance with the General Data Protection Regulation (GDPR).

2. Legal Basis for Processing

We process personal data only when we have a valid legal basis to do so. The legal bases we rely on include:

Consent: You have given clear consent for us to process your data for a specific purpose (e.g., marketing communications)
Contract: Processing is necessary for the performance of a contract with you (e.g., delivering purchased products)
Legal Obligation: Processing is necessary to comply with legal obligations (e.g., tax records)
Legitimate Interests: Processing is necessary for our legitimate interests (e.g., fraud prevention, service improvement) that do not override your fundamental rights

3. Data Subject Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of Access: Request a copy of the personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure (Right to be Forgotten): Request deletion of your personal data where there is no compelling reason for continued processing
Right to Restrict Processing: Request restriction of processing under certain circumstances
Right to Data Portability: Request transfer of your data to another controller in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
Rights Related to Automated Decision Making: Not be subject to decisions based solely on automated processing that significantly affect you

4. Exercising Your Rights

To exercise any of your data subject rights, submit a request to systems@theperezcode.com with "GDPR Request" in the subject line. We will respond within one month of receiving your verified request. This period may be extended by two months for complex or multiple requests, with notification provided. We may request additional information to verify your identity before processing your request.

5. International Transfers

If we transfer your personal data outside the EEA or UK, we ensure appropriate safeguards are in place. This may include:

Standard Contractual Clauses (SCCs) approved by the European Commission
Transfer to countries with an adequacy decision from the European Commission
Other legally recognized transfer mechanisms

Our primary data processing infrastructure is located in the United States.

6. Data Protection Officer (DPO)

We have appointed a Data Protection Officer who can be contacted regarding GDPR matters:
Email: systems@theperezcode.com (Subject: "ATTN: DPO")
You also have the right to lodge a complaint with your local data protection supervisory authority.