1. Introduction

At NeuralPact Technologies (“we”, “our”, or “us”), we are committed to protecting the data and privacy of our users and clients, particularly those located in the European Economic Area (EEA). This statement outlines how we ensure compliance with the General Data Protection Regulation (GDPR).

The GDPR is a regulation that governs how organizations handle personal data of individuals in the EU and EEA, including requirements for data transfers outside these regions.

2. Our Commitment to GDPR

NeuralPact Technologies ensures full compliance with the GDPR by adhering to the following principles:

  • Processing data lawfully, fairly, and transparently
  • Collecting personal data for specified and legitimate purposes
  • Limiting data collection to what is necessary
  • Ensuring accuracy and keeping data up to date
  • Retaining data only as long as necessary
  • Applying appropriate security measures against unauthorized access, alteration, or loss

3. Legal Bases for Processing

We process personal data under GDPR using one or more of the following lawful bases:

  • Consent – When you give us clear permission to use your personal data for a specific purpose
  • Contract – When processing is needed to fulfill a contract or pre-contractual obligation
  • Legal Obligation – When processing is required to meet a legal requirement
  • Legitimate Interest – When processing serves a legitimate purpose that does not override your rights or freedoms

4. Your Rights Under GDPR

If you are an EEA resident, you have the following rights:

  • Right to Access – Request a copy of the personal data we hold
  • Right to Rectification – Request correction of inaccurate or incomplete data
  • Right to Erasure – Ask for data deletion in certain circumstances
  • Right to Restrict Processing – Request we limit how your data is used
  • Right to Object – Object to our use of your data for certain purposes
  • Right to Data Portability – Request we send your data to you or another organization

🕒 We respond to all GDPR-related requests within one month.

📧 To exercise any of these rights, email us at [email protected]

5. Data Protection Measures

We implement the following data security practices to protect personal information:

  • Encryption of sensitive data when necessary
  • Regular audits and assessments of our systems and policies
  • Staff training on data handling and protection
  • Access control policies limiting data exposure
  • Minimization of data collection and storage
  • Data Protection Impact Assessments (DPIAs) for high-risk activities

6. International Data Transfers

We may transfer data outside the EEA. When doing so, we ensure:

  • Use of EU Standard Contractual Clauses (SCCs)
  • Implementation of Binding Corporate Rules (BCRs) where applicable
  • Transfers only to countries recognized as providing adequate protection by the EU Commission

7. Data Protection Officer (DPO)

We have appointed a Data Protection Officer (DPO) responsible for overseeing GDPR compliance at NeuralPact. For questions, contact:

📧 [email protected]

8. Updates to This Statement

This GDPR Compliance Statement may be updated occasionally. Changes will be published on this page with a revised effective date.

We encourage you to review this page regularly.