GDPR Compliance
Information about our compliance with the General Data Protection Regulation.
Last updated: 9/16/2026
1. Data Controller
SevenTicks acts as the data controller for personal data collected through our website and services. We are committed to protecting your privacy and ensuring compliance with GDPR.
2. Legal Basis for Processing
We process personal data based on the following legal grounds:
- Consent: When you provide explicit consent for specific processing activities
- Contract: To fulfill our contractual obligations to you
- Legitimate Interest: For business operations and service improvement
- Legal Obligation: To comply with applicable laws and regulations
3. Your Rights Under GDPR
Right of Access
You have the right to request access to your personal data and information about how it's processed.
Right to Rectification
You can request correction of inaccurate or incomplete personal data.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances.
Right to Restrict Processing
You can request limitation of processing of your personal data.
Right to Data Portability
You have the right to receive your personal data in a structured, machine-readable format.
Right to Object
You can object to processing of your personal data for certain purposes.
4. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.
5. Data Security
We implement appropriate technical and organizational measures to protect personal data, including:
- Encryption of data in transit and at rest
- Access controls and authentication mechanisms
- Regular security assessments and updates
- Staff training on data protection
6. Data Transfers
When transferring personal data outside the European Economic Area, we ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
7. Data Breach Notification
In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay when the breach poses a high risk to their rights and freedoms.
8. Exercising Your Rights
To exercise your GDPR rights, please contact us at privacy@seventicks.com. We will respond to your request within one month.
9. Supervisory Authority
You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your personal data in accordance with GDPR.
10. Contact Information
For GDPR-related inquiries, contact our Data Protection Officer at dpo@seventicks.com