Introduction At Vedamails, we are committed to protecting the privacy and security of personal data in compliance with the EU General Data Protection Regulation (GDPR). Our policy outlines the steps we take to ensure data protection and uphold the rights of our users.

1. Consent and Data Management We obtain explicit, informed, and unambiguous consent from individuals for the collection and processing of their personal data. This consent is voluntary and can be withdrawn at any time. Special attention is given to the data processing of children under 16, for whom parental consent is obtained.

2. Data Subject Rights In accordance with GDPR, we uphold the following rights of our users:

• Right of Access: Users can request access to their personal data.
• Right of Rectification: Users can correct inaccurate or incomplete data.
• Right to Erasure: Users can request the deletion of their data.
• Right to Restriction of Processing: Users can request a limitation on data processing.
• Right to Data Portability: Users can transfer their data to another service.
• Right to Object: Users can object to the processing of their data for specific purposes.

3. Data Minimization and Privacy by Design We collect only the data necessary for the intended purpose and regularly review our data holdings to erase unnecessary data. We incorporate privacy by design principles to ensure data minimization.

4. Data Protection Impact Assessments (DPIAs) We conduct DPIAs for data processing activities that may pose a risk to individuals’ rights and freedoms, particularly for sensitive data processing.

5. Security Measures We implement robust security measures including data encryption, firewalls, access controls, and regular security audits to protect personal data from unauthorized access and breaches.

6. Data Breach Notification In the event of a data breach, we will notify the relevant supervisory authorities and affected individuals within 72 hours, outlining the nature of the breach and measures taken in response.

7. Employee Training Our employees receive regular training on GDPR standards, data subject rights, data breach response procedures, and internal GDPR compliance processes.

8. Documentation and Accountability We maintain up-to-date documentation on our data processing activities and policies. This includes our Personal Data Protection Policy, Data Retention Policy, and Privacy Notice.

9. Appointment of a Data Protection Officer (DPO) We have appointed a Data Protection Officer responsible for overseeing GDPR compliance and acting as a point of contact for any GDPR-related inquiries.

10. Review and Update This policy will be regularly reviewed and updated to ensure continued compliance with GDPR and other relevant data protection laws.

Contact Us For any questions or concerns related to GDPR or data privacy, please contact our Data Protection Officer at support@vedamails.com.