GDPR Compliance

Our Commitment to GDPR

Aureon One is committed to protecting the privacy and security of your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Your Rights Under GDPR

As a data subject, you have the following rights:

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at hello@aureonone.in. We will respond to your request within 30 days.

When making a request, please provide:

• Your full name and email address
• A description of the right you wish to exercise
• Any relevant details or documentation
• Proof of identity (if required)

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: You have given clear consent for us to process your data
• Contract: Processing is necessary to fulfill our contract with you
• Legal Obligation: Processing is required by law
• Legitimate Interests: Processing is necessary for our legitimate business interests

Data Protection Measures

We implement comprehensive security measures to protect your data:

• Encryption of data in transit and at rest
• Regular security audits and assessments
• Access controls and authentication
• Employee training on data protection
• Incident response and breach notification procedures
• Data minimization and purpose limitation
• Regular backups and disaster recovery plans

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Our retention periods are:

• Account Data: Retained while your account is active
• Marketing Data: Retained until you unsubscribe
• Transaction Data: Retained for 7 years (legal requirement)
• Support Data: Retained for 3 years after resolution
• Analytics Data: Anonymized after 26 months

International Data Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• Binding Corporate Rules (BCRs)
• Certification schemes (e.g., Privacy Shield successor)

Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our GDPR compliance. You can contact our DPO at:

• Email: dpo@aureonone.in
• Address: Data Protection Officer, Aureon One, Kolkata, India

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe we have violated your data protection rights. In the EU, you can contact your local data protection authority.

Children's Data

We do not knowingly collect or process personal data from children under 16 years of age without parental consent. If you believe we have collected data from a child, please contact us immediately.

Automated Decision-Making

We may use automated decision-making, including profiling, to:

• Personalize your experience
• Recommend relevant content
• Detect fraud and security threats
• Optimize our services

You have the right to object to automated decision-making and request human intervention.

Updates to This Policy

We may update this GDPR Compliance page from time to time. We will notify you of any material changes by email or through a prominent notice on our website.

Contact Us

If you have any questions about our GDPR compliance or data protection practices, please contact us:

• Email: hello@aureonone.in
• DPO Email: hello@aureonone.in
• Website: www.aureonone.in
• Address: Kolkata, India