GDPR Compliance

Last updated: January 25, 2025

1. Our Commitment to GDPR

qual-a is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and how you can exercise your rights.

2. Legal Basis for Processing

We process personal data based on the following legal grounds:

Legitimate Interest

Business operations, security, and service improvement

Contract Performance

Providing white label partnership services

Consent

Marketing communications and non-essential cookies

Legal Obligation

Compliance with applicable laws and regulations

3. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

🔍 Right of Access (Article 15)

You can request confirmation of whether we process your personal data and obtain a copy of that data.

Response time: Within 1 month

✏️ Right to Rectification (Article 16)

You can request correction of inaccurate or incomplete personal data.

Response time: Within 1 month

🗑️ Right to Erasure (Article 17)

You can request deletion of your personal data under certain circumstances.

Response time: Within 1 month

🚫 Right to Restrict Processing (Article 18)

You can request limitation of processing in specific situations.

Response time: Within 1 month

📦 Right to Data Portability (Article 20)

You can receive your personal data in a structured, commonly used format.

Response time: Within 1 month

⚠️ Right to Object (Article 21)

You can object to processing based on legitimate interests or for direct marketing.

Response time: Immediately for marketing

🔄 Right to Withdraw Consent (Article 7)

You can withdraw consent at any time where processing is based on consent.

Effective: Immediately upon request

4. How to Exercise Your Rights

To exercise any of your GDPR rights, you can:

📧 Email Us

Send your request to: gdpr@qual-a.com

Include: Full name, email address, and specific request details

📝 Written Request

Mail your request to our Data Protection Officer

Address: 123 Music Lane, London, UK

🔒 Secure Portal

Use our secure data request portal (coming soon)

Verified identity required for sensitive requests

5. Identity Verification

To protect your privacy, we may need to verify your identity before processing certain requests. This may involve:

  • Confirming your email address
  • Asking for additional identifying information
  • Requiring a signed declaration for written requests
  • Requesting proof of authority for third-party requests

6. Data Protection Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) for high-risk processing activities, including:

  • New technology implementations
  • Large-scale personal data processing
  • Automated decision-making systems
  • Cross-border data transfers

7. International Data Transfers

When transferring personal data outside the EEA, we ensure appropriate safeguards:

Adequacy Decisions

Transfers to countries deemed adequate by the EU Commission

Standard Contractual Clauses

EU-approved contract terms for data protection

Binding Corporate Rules

Internal policies for multinational organizations

Certification Schemes

Approved certification mechanisms for data protection

8. Data Breach Notification

In case of a personal data breach that poses a risk to your rights and freedoms:

  • We will notify supervisory authorities within 72 hours
  • Affected individuals will be informed without undue delay
  • We will provide clear information about the breach and our response
  • Appropriate measures will be taken to mitigate the risk

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe your personal data has been processed unlawfully. You can contact:

Your Local Data Protection Authority

Contact the authority in your country of residence

EU Data Protection Authorities: Find your local authority

10. Contact Our Data Protection Officer

Data Protection Officer Contact

Email: dpo@qual-a.com

GDPR Requests: gdpr@qual-a.com

Address: 123 Music Lane, London, UK

Phone: +44 20 7946 0958

11. Regular Updates

We regularly review and update our GDPR compliance measures to ensure continued protection of your personal data. This page will be updated to reflect any changes in our processes or legal requirements.