Privacy Rights for Pelgora

1. Right to Information (Art. 13 & 14 GDPR)

• The categories of personal data we collect.
• The purposes and legal basis for processing.
• How long we retain your data.
• Details about recipients or third parties who may access your data.
• Information about your rights under GDPR.
• Security measures we implement to protect your data.

We ensure our data processing practices are transparent, keeping you informed about how your information is used.

2. Right of Access (Art. 15 GDPR)

• The purposes of processing.
• The categories of personal data processed.
• The recipients of your data, including third parties.
• The retention periods or criteria for determining them.
• The source of the data, if not directly collected from you.

You are entitled to receive the first copy of your personal data for free. A reasonable fee may apply for additional copies. To exercise this right, contact us at info.pelgora@gmail.com. We will respond within one month of receiving your request, as required by GDPR.

3. Right to Rectification (Art. 16 GDPR)

If your personal data is inaccurate or incomplete, you can request corrections or updates. Once verified, we will promptly update the information. Ensuring accurate data helps us serve you better and maintain trust.

4. Right to Erasure (Right to Be Forgotten) (Art. 17 GDPR)

• It is no longer needed for the original purposes.
• You withdraw your consent, and no other legal basis applies.
• You object to the processing, and there are no overriding legitimate grounds.
• The data was unlawfully processed.
• We must comply with a legal obligation.

If we cannot delete your data due to legal or legitimate reasons, we will inform you of the rationale.

5. Right to Restriction of Processing (Art. 18 GDPR)

• When the accuracy of your data is contested.
• When the processing is unlawful, but you oppose erasure.
• When we no longer need the data, but you require it for legal claims.
• When you object to processing pending verification of legitimate grounds.

While restricted, we will only process your data with your consent or for legal purposes.

6. Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. Additionally, you can request that we transfer this data directly to another controller where technically feasible.

7. Right to Object (Art. 21 GDPR)

• When processing is based on legitimate interests.
• For direct marketing purposes.

If you object to direct marketing, we will immediately stop processing your data for that purpose. For other objections, we will evaluate our legitimate grounds and inform you of the outcome.

8. Right to Withdraw Consent (Art. 7(3) GDPR)

If we process your data based on your consent, you can withdraw it at any time. Withdrawal does not affect the legality of prior processing. To withdraw consent, contact us at info.pelgora@gmail.com.

9. Right to Lodge a Complaint (Art. 77 GDPR)

If you believe your data protection rights have been violated, you can file a complaint with your local data protection authority or the Federal Commissioner for Data Protection and Freedom of Information (BfDI) in Germany. Alternatively, contact us directly at info.pelgora@gmail.com, and we will do our best to resolve your concerns.

10. Data Protection by Design and Default

• Implement technical measures, such as encryption, to protect your data.
• Minimize the data we collect to what is strictly necessary.
• Regularly review and improve our data protection practices.

We maintain up-to-date records of our processing activities, including purposes, categories of data, and retention periods. These records are available to regulators upon request.

11. Data Protection Officer and Accountability

We have appointed a team responsible for ensuring GDPR compliance. They evaluate and implement our data protection policies. You can contact them via info.pelgora@gmail.com for any privacy-related concerns.

12. Automated Decision-Making and Profiling (Art. 22 GDPR)

Pelgora does not engage in decision-making based solely on automated processing, including profiling, that produces legal or similarly significant effects.

13. Updates to This Document

We may update this document periodically to reflect changes in legal requirements or our practices. Updates will be posted on our website with the effective date clearly noted. We encourage you to review this document regularly.