GDPR
Last updated: [date] — draft pending legal review.
If you're located in the European Economic Area (EEA) or the United Kingdom, this page describes your rights under the General Data Protection Regulation (GDPR) and UK GDPR, in addition to what's covered in our Privacy Policy.
Your rights
- Access — request a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your account and associated personal data, subject to any legal retention requirements.
- Restriction — request that we limit how your data is processed in certain circumstances.
- Portability — receive your data in a structured, commonly-used format.
- Objection — object to certain kinds of processing.
To exercise any of these rights, contact info@mavarosystems.com. We'll respond within the timeframes required by law.
Legal basis for processing
We process account and business data under contract (to provide the service you signed up for) and legitimate interest (to operate and improve Repuvane). Where required, we rely on consent — for example, for optional communications.
International data transfers
Our infrastructure providers (Clerk, Convex, Vercel, Anthropic) may process data outside the EEA/UK, including in the United States. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses.
Data Protection Officer / Contact
For any GDPR-related inquiry: info@mavarosystems.com
Supervisory authority
If you're in the EEA or UK and believe we haven't adequately addressed your concern, you have the right to lodge a complaint with your local data protection authority.