GDPR Compliance Statement

Effective Date: 24/12/2024

• Data Controller
• Personal Data We Collect
• Legal Basis for Processing
• Your GDPR Rights
• Data Retention
• Data Security
• Data Transfers
• Third-Party Processors
• Cookies and Tracking Technologies
• Supervisory Authority
• Changes to This Statement

At Veranet, we are committed to protecting the privacy and security of our users' personal data. This GDPR Compliance Statement outlines how we comply with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

Data Controller

Veranet operates as the data controller for the personal data collected and processed through our services. For inquiries, you can contact us at:

Veranet OÜ
Email: support@veranet.io
Address: Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 15551

Personal Data We Collect

We collect and process the following types of personal data:

• Account Information: Name, email address, payment information, and account details.
• Usage Data: IP address, device type, browser type, and activity on our platform.
• Third-Party Data: Data from integrated services like Stripe, Google Analytics, HubSpot, or other platforms.

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Contractual Necessity: To provide and operate our services.
• Consent: Where you have explicitly agreed to the processing of your data (e.g., for marketing communications).
• Legitimate Interests: To improve our services, enhance security, and conduct analytics.
• Legal Obligations: To comply with applicable laws and regulations.

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of your personal data.
• Correction: Correct inaccurate or incomplete data.
• Erasure: Request the deletion of your data (“Right to be Forgotten”).
• Restriction: Restrict the processing of your data.
• Portability: Receive your data in a machine-readable format and transfer it to another controller.
• Objection: Object to the processing of your data based on legitimate interests.
• Withdraw Consent: Withdraw consent for data processing activities where applicable.

To exercise your rights, contact us at support@veranet.io.

Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. When data is no longer required, we securely delete or anonymize it.

Data Security

We implement robust technical and organizational measures to protect your personal data against unauthorized access, disclosure, or loss. These measures include encryption, firewalls, and access controls.

Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or other GDPR-compliant mechanisms.

Third-Party Processors

We work with third-party processors who handle personal data on our behalf, including:

• Stripe: For payment processing.
• Google Analytics: For usage analytics.
• HubSpot: For customer relationship management.
• Amazon Web Services (AWS): For cloud hosting and storage.

We ensure these processors comply with GDPR and only process data as instructed by Veranet.

Cookies and Tracking Technologies

We use cookies to enhance user experience and analyze website performance. Details about our use of cookies can be found in our Cookie Policy.

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a data protection authority in your EU member state.

Changes to This Statement

We may update this GDPR Compliance Statement as necessary. Updates will be posted on this page, and the effective date will be revised accordingly.