GDPR Compliance

Last Updated: May 25, 2026

Post Vinfam is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page outlines our compliance measures and your rights under GDPR.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contract: When processing is necessary to fulfill our service agreements
• Legal Obligation: When required by applicable laws and regulations
• Legitimate Interests: When necessary for our business operations, balanced against your rights

Your Rights Under GDPR

As a data subject, you have the following rights:

• Right to Access: Request access to your personal data we process
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data (right to be forgotten)
• Right to Restriction: Request limitation of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing

Data Protection Measures

We implement comprehensive security measures including:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security audits and vulnerability assessments
• Staff training on data protection principles
• Incident response procedures for data breaches

Data Transfers

When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions for countries with equivalent data protection standards
• Binding corporate rules for international data transfers

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

Exercising Your Rights

To exercise any of your GDPR rights or if you have concerns about our data processing practices, please contact us at:

Email: [email protected]

We will respond to your request within one month of receipt.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR provisions.