GDPR Compliance
Last updated: January 1, 2026
Our Commitment to GDPR
AI Tech is committed to protecting the privacy and security of personal data in compliance with the General Data Protection Regulation (GDPR). This page explains your rights under GDPR and how we ensure compliance.
Your Rights Under GDPR
As a data subject, you have the following rights:
Right to Access
You have the right to obtain confirmation of whether we process your personal data and request a copy of that data.
Right to Rectification
You can request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure
You can request deletion of your personal data under certain circumstances ("right to be forgotten").
Right to Restriction
You can request limitation of processing of your personal data in certain situations.
Right to Portability
You can request to receive your data in a structured, machine-readable format.
Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes.
Data Controller
AI Tech acts as the data controller for personal data collected through our website and services.
Legal Basis for Processing
We process personal data only when we have a valid legal basis:
- Consent: You have given explicit consent for specific purposes
- Contract: Processing is necessary for contract performance
- Legal Obligation: Required for compliance with laws
- Legitimate Interests: Necessary for our business operations
International Transfers
When we transfer data outside the EEA, we use:
- Standard Contractual Clauses (SCCs)
- EU-US Data Privacy Framework certifications
- Binding Corporate Rules where applicable
Data Security
We implement appropriate technical and organizational measures:
- Encryption of data in transit and at rest
- Regular security assessments
- Access controls and authentication
- Employee training programs
- Incident response procedures
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights, we will:
- Notify the relevant supervisory authority within 72 hours
- Notify affected individuals without undue delay
- Document all breaches and remediation actions
Exercising Your Rights
To exercise any of your GDPR rights, please contact:
Complaints
You have the right to lodge a complaint with a supervisory authority. If you are in the EU, you can contact your local data protection authority.