GDPR Compliance

Our GDPR Commitment

GlodusInc is fully committed to complying with the General Data Protection Regulation (GDPR). We have implemented comprehensive data protection measures to ensure that all personal data is processed lawfully, fairly, and transparently. Our platform is designed with privacy by default and privacy by design principles at its core.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for a contract we have with you
• Legitimate Interest: Where processing is necessary for our legitimate business interests, provided your rights do not override those interests
• Legal Obligation: Where processing is necessary for compliance with a legal obligation

International Data Transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other legally recognized mechanisms to protect your data.

Data Processing for B2B Database

Our B2B contact database processes business contact information under the legitimate interest legal basis. We only process business-related data that is publicly available or provided to us with consent. We conduct regular Legitimate Interest Assessments (LIAs) and maintain detailed records of processing activities (ROPA).

Data Breach Notification

In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify affected individuals without undue delay.

Data Protection Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) for all high-risk processing activities. This includes our B2B database operations, AI-powered analytics, and any new features that involve processing of personal data. These assessments help us identify and minimize data protection risks.