General Data Protection Regulation (GDPR) Compliance
At Dromation, we take your privacy and the protection of your personal data seriously. We are committed to complying with the General Data Protection Regulation (GDPR), which sets out the principles for processing personal data of individuals within the European Union (EU). This GDPR Statement outlines how we handle your personal data in accordance with GDPR requirements.
Data Controller
Dromation operates as the data controller for the personal data we collect and process through our services, including the Analyzer for Computer Numerical Control (ACNC) Machines.
Lawful Basis for Processing
We ensure that the collection and processing of personal data are conducted under a lawful basis as specified by the GDPR. The lawful bases for processing your data include:
- Consent: You have given clear consent for us to process your personal data for a specific purpose.
- Contract: Processing is necessary for the performance of a contract with you or to take steps to enter into a contract.
- Legal Obligation: Processing is necessary to comply with a legal obligation.
- Legitimate Interests: Processing is necessary for our legitimate interests, except where such interests are overridden by your rights and interests.
Types of Personal Data Collected
We may collect and process the following categories of personal data:
- Contact Information: Name, email address, phone number, and mailing address.
- Account Information: Username, password, and other information necessary for authentication and access.
- Payment Information: Credit card details and billing information for transaction purposes.
- Technical Data: IP address, browser type, operating system, and hardware details.
- Usage Data: Log files, user actions, and other interaction data.
Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right to Access: You can request access to the personal data we hold about you.
- Right to Rectification: You can request correction of inaccurate or incomplete personal data.
- Right to Erasure: You can request deletion of your personal data, subject to certain conditions.
- Right to Restrict Processing: You can request the restriction of processing of your personal data under certain circumstances.
- Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller.
- Right to Object: You can object to the processing of your personal data under certain circumstances.
- Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw your consent at any time.
Data Security
We implement appropriate technical and organizational measures to ensure the security of your personal data and protect it against unauthorized access, alteration, disclosure, or destruction.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements.
Data Transfers
Your personal data may be transferred to, and stored at, a destination outside the European Economic Area (EEA). We ensure that such transfers are conducted in accordance with GDPR requirements and that appropriate safeguards are in place to protect your personal data.
Changes to This GDPR Statement
We may update this GDPR Statement from time to time. Any changes will be posted on our website, and where appropriate, we will notify you via email. You are advised to review this GDPR Statement periodically for any updates.
Contact Us
If you have any questions or concerns about this GDPR Statement or how we handle your personal data, please contact us at: