GDPR Compliance
Your data protection rights under the General Data Protection Regulation
Our Commitment to GDPR
Zonnex is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR). This page explains how we comply with GDPR and what rights you have regarding your personal data.
The GDPR is a comprehensive data protection law that applies to organizations processing personal data of individuals in the European Union (EU) and European Economic Area (EEA).
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access
Request a copy of all personal data we hold about you
Right to Rectification
Request correction of inaccurate or incomplete data
Right to Erasure
Request deletion of your personal data ("right to be forgotten")
Right to Restriction
Request restriction of processing of your personal data
Right to Data Portability
Receive your data in a structured, machine-readable format
Right to Object
Object to processing of your personal data for specific purposes
Right to Withdraw Consent
Withdraw consent for data processing at any time
Right to Lodge a Complaint
File a complaint with your local data protection authority
How Zonnex Complies with GDPR
1. Lawful Basis for Processing
We process your personal data based on:
- Consent: You provide explicit consent when creating an account
- Contract: Processing necessary to provide our Service
- Legitimate Interest: Improving our Service and preventing fraud
- Legal Obligation: Compliance with applicable laws
2. Data Minimization
We only collect and process personal data that is necessary for providing our Service. We do not collect excessive or irrelevant information.
3. Transparency
Our Privacy Policy clearly explains what data we collect, how we use it, who we share it with, and how long we retain it.
4. Security Measures
We implement appropriate technical and organizational measures:
- Encryption of data in transit (TLS/SSL) and at rest
- Access controls and authentication mechanisms
- Regular security audits and vulnerability assessments
- Employee training on data protection
5. Data Breach Notification
In the event of a data breach, we will notify affected users and relevant supervisory authorities within 72 hours, as required by GDPR.
6. International Data Transfers
When transferring data outside the EU/EEA, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.
7. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy or as required by law. You can request deletion of your data at any time.
How to Exercise Your Rights
To exercise any of your GDPR rights, you can:
- Through the App: Access account settings to update, export, or delete your data
- Email Us: Send a request to support@zonnex.in
- Call Us: Contact us at +91 7063474409
Response Time: We will respond to your request within 30 days. If we need more time, we will inform you and explain the reason for the delay.
Data Protection Officer
For EU/EEA residents, you can contact our Data Protection Officer for any privacy-related inquiries:
Email: support@zonnex.in
Subject Line: "GDPR / Data Protection Inquiry"
Supervisory Authority
If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
You can find your local supervisory authority at: European Data Protection Board - List of Supervisory Authorities
Questions About GDPR?
If you have questions about GDPR compliance or your data protection rights, please contact us:
Email: support@zonnex.in
Phone: +91 7063474409
Address: Bhubandanga, Bolpur, Birbhum, West Bengal, India - 731204