NetYatri is committed to complying with the EU General Data Protection Regulation (GDPR). This page outlines your rights and how we protect EU residents' personal data.
1. Data Controller
NetYatri Hosting, Bhubaneswar, Odisha, India, India, acts as the data controller for personal data we collect from EU residents.
2. Lawful Basis for Processing
We process personal data on the following lawful bases:
- Contract: To provide services you ordered.
- Legitimate interests: To improve services, prevent fraud and ensure security.
- Consent: For marketing communications (withdrawable anytime).
- Legal obligation: To comply with tax, accounting and law-enforcement requirements.
3. Your GDPR Rights
- Right to access — Request a copy of all personal data we hold.
- Right to rectification — Correct inaccurate or incomplete data.
- Right to erasure — "Right to be forgotten" (subject to legal retention).
- Right to restriction — Limit how we process your data.
- Right to portability — Receive your data in machine-readable format.
- Right to object — Object to processing based on legitimate interests.
- Right to withdraw consent — At any time, for any consent-based processing.
- Right to lodge a complaint — With your local data protection authority.
4. International Data Transfers
If you choose EU data centers (Frankfurt, London), your data stays in the EU. For data centers outside the EU, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission.
5. Data Processing Agreement (DPA)
EU customers acting as data controllers can request a Data Processing Agreement (DPA). Email [email protected] to receive a copy.
6. Data Protection Officer
Our Data Protection Officer can be reached at [email protected].
7. Data Breach Notification
In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by GDPR Article 33.
8. How to Exercise Your Rights
Email [email protected] with your request. We respond within 30 days as required by GDPR.