GDPR Policy – SoulExec Path

We comply with the General Data Protection Regulation (GDPR) for users within the European Economic Area (EEA), ensuring transparency, accountability, and control over personal data.

1. Lawful Basis for Processing

We process your data based on legitimate interest, contract necessity, consent, and legal obligations.

2. Data Minimization

We only collect data that is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.

3. Data Subject Rights

Under GDPR, you have the right to access, rectify, erase, restrict processing, object to processing, and request data portability.

4. Data Transfers

If we transfer your data outside the EEA, it is safeguarded by standard contractual clauses or other approved mechanisms.

5. Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

6. Retention Policy

Your data is retained for only as long as needed to fulfill the purposes outlined or as required by law.

7. Consent Withdrawal

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

8. Contact for GDPR Queries

To exercise your GDPR rights or for any related inquiries, please contact our Data Protection Officer at: dpo@soulexecpath.com