General Data Protection Regulation

1. General Data Protection Regulation (GDPR)

The General Data Protection Regulation (GDPR) is a European Union regulation that came into effect on May 25, 2018. It strengthens data protection and privacy for individuals within the European Economic Area (EEA). GDPR applies to any organization that processes personal data of individuals located in the EEA, regardless of where the organization is based.

Personal data includes, but is not limited to: name, address, identification numbers, location data, IP addresses, cookies, and sensitive data such as health, biometric, genetic, or ethnic information.

At Tapasya IT Services, we are committed to protecting the privacy and security of all users, regardless of their location.

2. Data Controller and Processor

Under GDPR:

• A Data Controller determines how and why personal data is processed.
• A Data Processor processes data on behalf of the Controller.

In the context of our services:

• Customers act as Data Controllers.
• Tapasya IT Services acts as a Data Processor when handling customer data.

3. Data Security and Protection

We implement appropriate technical and organizational measures to protect personal data, including:

• Data encryption
• Access control mechanisms
• Secure infrastructure
• Regular monitoring and updates

4. International Data Transfers

Personal data may be transferred outside the EEA only when adequate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs)
• Compliance with applicable legal requirements

5. Data Subject Rights

Users have the following rights under GDPR:

• Right to access their data
• Right to correct inaccurate data
• Right to request deletion
• Right to restrict processing
• Right to data portability
• Right to object to processing

6. Data Location

Customers may request data hosting within specific regions (such as the EU), subject to infrastructure availability.

7. Updates to Agreement

Customers can contact us to update agreements or request GDPR-related documentation.