GDPR Compliance

TechAbout is committed to protecting the privacy and security of personal data in compliance with the General Data Protection Regulation (GDPR) - Regulation (EU) 2016/679.

This GDPR Statement explains how we collect, process, and protect personal data of individuals in the European Union (EU) and European Economic Area (EEA), and outlines your rights under the GDPR.

This statement applies to:

• EU and EEA residents whose personal data we process
• All TechAbout services offered to EU/EEA customers
• Data processing activities conducted by TechAbout and its processors
• Both automated and manual processing of personal data

We act as a data controller for personal data collected through our services and as a data processor when processing data on behalf of our clients.

We process personal data under the following legal bases:

Contractual Necessity (Article 6(1)(b))

Processing necessary to perform our contract with you or take pre-contractual steps.

Legitimate Interests (Article 6(1)(f))

Processing necessary for our legitimate business interests, balanced against your rights.

Legal Obligation (Article 6(1)(c))

Processing necessary to comply with legal requirements.

Consent (Article 6(1)(a))

Where you have given explicit consent for specific processing activities.

We collect and process the following categories of personal data:

Identity Data: Name, username, title Contact Data: Email address, phone number, address Technical Data: IP address, browser type, device information Usage Data: How you use our services and platforms Transaction Data: Payment and billing information Communication Data: Correspondence and support interactions

We do not collect special category data (sensitive personal data) unless specifically required and with explicit consent.

Under the GDPR, you have the following rights:

Right to Access (Article 15)

Request a copy of your personal data and information about how it's processed.

Right to Rectification (Article 16)

Request correction of inaccurate or incomplete personal data.

Right to Erasure (Article 17)

Request deletion of your personal data in certain circumstances.

Right to Restrict Processing (Article 18)

Request limitation of processing in certain circumstances.

Right to Data Portability (Article 20)

Receive your data in a structured, machine-readable format.

Right to Object (Article 21)

Object to processing based on legitimate interests or direct marketing.

Rights Related to Automated Decision-Making (Article 22)

Not be subject to decisions based solely on automated processing.

To exercise any of your rights:

Email: Send your request to legal@techabout.com with "GDPR Request" in the subject line.

Required Information:

• Your full name and contact details
• The specific right you wish to exercise
• Any relevant account or reference numbers
• Proof of identity (may be required)

Response Time: We will respond to your request within 30 days. Complex requests may take up to 90 days, and we will inform you of any extension.

No Fee: Most requests are free. We may charge a reasonable fee for manifestly unfounded or excessive requests.

When we transfer personal data outside the EU/EEA, we ensure appropriate safeguards:

Standard Contractual Clauses (SCCs)

We use EU-approved SCCs for transfers to countries without adequacy decisions.

Adequacy Decisions

Transfers to countries recognized by the EU as providing adequate protection.

Binding Corporate Rules

For intra-group transfers where applicable.

Transfer Impact Assessments

We conduct assessments for transfers to high-risk jurisdictions.

We implement appropriate technical and organizational measures:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments and audits
• Staff training on data protection
• Incident response procedures
• Data minimization practices
• Regular backup and recovery testing

We retain personal data only as long as necessary for:

• The purposes for which it was collected
• Compliance with legal obligations
• Establishment, exercise, or defense of legal claims
• Our legitimate business interests

When data is no longer needed, it is securely deleted or anonymized. Specific retention periods vary by data type and are documented in our data retention policy.

In the event of a personal data breach:

• We will notify the relevant supervisory authority within 72 hours where required
• We will notify affected individuals without undue delay if there is a high risk to their rights
• We maintain detailed records of all breaches and our response actions
• We conduct post-incident reviews to prevent future occurrences

For GDPR-related inquiries, contact our Data Protection team:

Email: legal@techabout.com Phone: +1 307 463 4505 Address: 30 N Gould St Suite R, Sheridan, WY 82801, USA

We are committed to addressing your concerns and protecting your privacy rights.

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with:

• Our Data Protection team at legal@techabout.com
• Your local data protection supervisory authority

We encourage you to contact us first so we can address your concerns directly.