GDPR Compliance Statement

At Theyfy.com, we are fully committed to protecting the privacy and personal data of our users. We comply with the General Data Protection Regulation (GDPR) (EU) 2016/679, which governs how personal data must be collected, processed, stored, and handled.

What is GDPR?

The General Data Protection Regulation is a legal framework that sets guidelines for the collection and processing of personal information from individuals who live in the European Union (EU) and European Economic Area (EEA).

Our Commitment to GDPR

• Lawful Basis for Processing:
  We collect and process personal data only when we have a lawful basis to do so, such as user consent or contractual necessity.
• Transparency:
  We clearly inform users what data we collect, why we collect it, how it's used, and who it may be shared with — all outlined in our Privacy Policy.
• Data Minimization:
  We only collect the data necessary for providing our services. No excessive or irrelevant information is requested.
• User Rights:
  All users have the right to:
  • Access their personal data
  • Request correction or deletion
  • Object to data processing
  • Withdraw consent at any time
  • Request data portability
• Security Measures:
  We implement industry-standard technical and organizational security measures to protect all data from unauthorized access, alteration, or loss.
• Data Processing Agreements:
  We ensure all third-party services and partners involved in processing personal data are GDPR-compliant and have signed Data Processing Agreements (DPAs).
• Data Retention:
  We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws.
• Cross-border Transfers:
  Any transfer of personal data outside the EU/EEA is done in accordance with GDPR safeguards, such as Standard Contractual Clauses or valid adequacy decisions.