GDPR
To our European Customers
At Draup Inc (“Draup”) the privacy and security of our users’ data is our highest priority. On May 25, 2018, the European Union’s General Data Protection Regulation (“GDPR”) will go into effect. The GDPR unifies several existing privacy and security laws under one comprehensive law which will apply across the European Union. The GDPR aims to strengthen and expand data privacy protections for citizens of the EU and provide them with greater control over how their data is collected, accessed, shared and used.
Given that Draup engages with users in the European Union, we have been working hard to ensure that we are in compliance with these new regulations before May 25, 2018. We are committed to providing our users with the best and most secure experience possible and want to ensure they trust us to handle their data.
We are working with an American Law Firm and a European Law Firm who are helping us revise our privacy and security procedures and policies to fully comply with GDPR, which we are in the process of implementing.
We are also in the process of filing for self-certification to the EU-U.S. Privacy Shield and Swiss-US Privacy Shield (collectively, “Privacy Shield”) certification with the United States Department of Commerce (“DOC”). Privacy Shield adequately transfers your Personal Data from European Union and Switzerland to USA for processing. We will let you know once this certification has been granted by the DOC, by updating out Privacy Policy, putting up Privacy Notice on our website, and informing you via email or comparable means. While our application is pending and where required, any data transfer from EEA or Switzerland, will be made subject to the terms of the applicable EU Standard Contractual Clauses or with your consent.
Notwithstanding, we currently keep your Personal Data in a very secure manner and restrict who has access to it. We need your Personal Data to be able to provide Services to you and to give you access to our Platform and you give us your Personal Data at the time your register for our Platform, download our mobile app and/or use or buy our Products and Services.
We will notify as soon as possible but no later than 72 hours if we determine that our systems have been hacked and your Personal Data disclosed as a result of such hacking or any other unauthorized breach of your systems and databases.
If at any time you want to cancel your registration, all you need to do is to access our Platform and there are both opt-out provisions and erasure options available. Alternatively, you can write to us at info@draup.com and tell us you want us to cancel the registration and we will do so.
If you want to know what Personal Data that we have on you, again just access our Platform, look at our Privacy Policy, or write to us at info@draup.com and ask us for such information and we will provide it to you.
If you want us to delete such information from our Platform or Services and other databases, just ask us to do so and we will delete such information as soon as we no longer need such information, for example, to invoice you for our Services. We will not keep such information beyond the time that we need it.
If you have any questions or concerns about our privacy and security policies, please email us at info@draup.com, and we will be happy to discuss them with you. To facilitate this, we have appointed a Data Protection Officer, who can be reached at the above email address.
We will keep you apprised of the changes to our privacy and security policies and if you have any questions about this GDPR Notice, please do not hesitate to contact us at info@draup.com