GDPR Rights

Under the General Data Protection Regulation (GDPR), you have several rights regarding your personal data. We are committed to upholding these rights and ensuring transparency in our data processing activities.

• Right to Access: You can request a copy of your personal data and information about how we process it
• Right to Rectification: You can request corrections to your personal data if it's inaccurate or incomplete
• Right to Erasure: Also known as 'right to be forgotten', you can request deletion of your personal data
• Right to Data Portability: You can request to receive your data in a structured, commonly used format
• Right to Object: You can object to the processing of your personal data for certain purposes
• Right to Restrict Processing: You can request to limit how we use your personal data

We process personal data based on the following legal grounds:

• Consent: When you explicitly agree to the processing of your personal data
• Contract: When processing is necessary for performing a contract with you
• Legal Obligation: When we need to comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate business interests

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Providing our services to you
• Complying with legal obligations
• Resolving disputes
• Enforcing our agreements

When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place through:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions issued by the European Commission
• Other legally approved transfer mechanisms

To exercise any of your GDPR rights or if you have questions about how we process your personal data, you can contact us:

• Email: privacy@chanmax.com
• Address: [Your Business Address]
• Data Protection Officer: dpo@chanmax.com

We will respond to your request within 30 days. In complex cases, we may extend this period by an additional 60 days, but we will inform you of any such extension.

While we hope to resolve any privacy concerns you may have, you also have the right to file a complaint with your local data protection authority if you believe we have not addressed your concerns adequately.