рдЬреАрдбреАрдкреАрдЖрд░ рдЕрдиреБрдкрд╛рд▓рди GDPR Compliance

General Data Protection Regulation compliance for India and EU customers

Your privacy rights protected under GDPR and Indian IT Act 2000

ЁЯЗкЁЯЗ║ GDPR Article 32 Compliant
ЁЯЗоЁЯЗ│ Indian IT Act 2000
ЁЯФТ SOC 2 Type II

рдЬреАрдбреАрдкреАрдЖрд░ рд╕рд┐рджреНрдзрд╛рдВрдд - GDPR Principles

We follow all six GDPR principles for data processing

Lawfulness, Fairness, and Transparency

рд╡реИрдзрддрд╛, рдирд┐рд╖реНрдкрдХреНрд╖рддрд╛ рдФрд░ рдкрд╛рд░рджрд░реНрд╢рд┐рддрд╛

We process data lawfully, fairly, and transparently. You always know what data we collect and why.

Purpose Limitation

рдЙрджреНрджреЗрд╢реНрдп рд╕реАрдорд╛

We collect data only for specific, explicit, and legitimate purposes. No secondary use without consent.

Data Minimization

рдбреЗрдЯрд╛ рдиреНрдпреВрдиреАрдХрд░рдг

We collect only the minimum data necessary for the stated purpose. Nothing more.

Accuracy

рд╕рдЯреАрдХрддрд╛

We ensure personal data is accurate and kept up to date. You can correct inaccurate data anytime.

Storage Limitation

рд╕рдВрдЧреНрд░рд╣рдг рд╕реАрдорд╛

We retain data only as long as necessary. Automatic deletion after retention period.

Integrity and Confidentiality

рдЕрдЦрдВрдбрддрд╛ рдФрд░ рдЧреЛрдкрдиреАрдпрддрд╛

We protect data with appropriate security measures. SOC 2 Type II and ISO 27001 certified.

рдЖрдкрдХреЗ рдЕрдзрд┐рдХрд╛рд░ - Your GDPR Rights

Exercise your data protection rights at any time

Right to Access

рдкрд╣реБрдВрдЪ рдХрд╛ рдЕрдзрд┐рдХрд╛рд░

Request a copy of all personal data we hold about you

Request Data Export

Right to Rectification

рд╕реБрдзрд╛рд░ рдХрд╛ рдЕрдзрд┐рдХрд╛рд░

Correct any inaccurate or incomplete personal data

Update Your Data

Right to Erasure

рд╡рд┐рд▓реЛрдкрди рдХрд╛ рдЕрдзрд┐рдХрд╛рд░

Request deletion of your personal data (Right to be Forgotten)

Request Deletion

Right to Data Portability

рдбреЗрдЯрд╛ рдкреЛрд░реНрдЯреЗрдмрд┐рд▓рд┐рдЯреА рдХрд╛ рдЕрдзрд┐рдХрд╛рд░

Receive your data in a structured, machine-readable format

Download Data

Right to Object

рдЖрдкрддреНрддрд┐ рдХрд╛ рдЕрдзрд┐рдХрд╛рд░

Object to processing of your personal data for specific purposes

Submit Objection

Right to Restrict Processing

рдкреНрд░рд╕рдВрд╕реНрдХрд░рдг рдкреНрд░рддрд┐рдмрдВрдзрд┐рдд рдХрд░рдиреЗ рдХрд╛ рдЕрдзрд┐рдХрд╛рд░

Restrict how we process your personal data in certain circumstances

Request Restriction

рд╣рдо рдХреНрдпрд╛ рдбреЗрдЯрд╛ рдПрдХрддреНрд░рд┐рдд рдХрд░рддреЗ рд╣реИрдВ - Data We Collect

Complete transparency on what data we collect, why, and how long we keep it

Account Information

Data Collected:

  • Name
  • Email address
  • Phone number
  • Company name
  • Job title

Purpose:

To create and manage your account

Retention:

Until account deletion + 30 days

Event Data

Data Collected:

  • Event details
  • Attendee information
  • Registration data
  • Ticket sales

Purpose:

To provide event management services

Retention:

5 years after last event activity

Payment Information

Data Collected:

  • Payment method
  • Billing address
  • GST number
  • Transaction history

Purpose:

To process payments and comply with tax laws

Retention:

7 years (Indian tax compliance)

Usage Data

Data Collected:

  • IP address
  • Browser type
  • Device information
  • Usage patterns

Purpose:

To improve our services and ensure security

Retention:

13 months

рдбреЗрдЯрд╛ рдкреНрд░реЛрд╕реЗрд╕рд┐рдВрдЧ - How We Process Data

Complete control over where and how your data is processed

ЁЯЗоЁЯЗ│

India Data Centers

All data is stored in Mumbai, Bangalore, or Delhi data centers

ЁЯФТ

No International Transfers

Your data stays in India unless you explicitly request otherwise

ЁЯУЭ

Data Processing Agreement

We sign DPAs with all enterprise customers

ЁЯдЭ

Third-Party Processors

All sub-processors are GDPR compliant and audited

рд╕реБрд░рдХреНрд╖рд╛ рдЙрдкрд╛рдп - Security Measures (Article 32)

Technical and organizational measures protecting your data

End-to-end encryption (TLS 1.3)
AES-256 encryption at rest
Multi-factor authentication (MFA)
Role-based access control (RBAC)
Regular security audits
SOC 2 Type II certified
ISO 27001 certified
Penetration testing quarterly

рдбреЗрдЯрд╛ рд╕рдВрд░рдХреНрд╖рдг рдЕрдзрд┐рдХрд╛рд░реА - Data Protection Officer

Have questions about your data rights or GDPR compliance? Contact our Data Protection Officer.

Email: dpo@webmobi.com

Response Time: Within 72 hours

Location: Mumbai, India

рдбреАрдкреАрдУ рд╕реЗ рд╕рдВрдкрд░реНрдХ рдХрд░реЗрдВ - Contact DPO

рдЖрдкрдХреА рдЧреЛрдкрдиреАрдпрддрд╛ рд╣рдорд╛рд░реА рдкреНрд░рд╛рдердорд┐рдХрддрд╛ рд╣реИ

GDPR compliant тАв India data residency тАв Your data, your control