Our GDPR approach

Our privacy program supports GDPR requirements for the processing to which they apply, including transparency, purpose limitation, data minimization, individual rights, security, and accountability. The privacy notice describes information categories, purposes, sources, and recipient categories.

We act as controller for our own operations and independently maintained research datasets, and as processor for customer content processed under documented instructions. Customers remain responsible for the lawful use of research, outreach, and results in their own activities.

Your rights

• Access your personal data and obtain information about its processing.
• Correct inaccurate data and request erasure, subject to lawful exceptions.
• Request restriction or portability where the relevant conditions apply.
• Object to processing based on legitimate interests, including related profiling; object to direct marketing at any time.
• Withdraw consent where processing relies on it, as easily as giving it.
• Exercise applicable safeguards concerning solely automated decisions with legal or similarly significant effects.

Prepare a request or email privacy@daanveda.com. Explain the record or activity involved; an account is not required. We may need proportionate verification for disclosure or deletion, but not unnecessary identity documents.

Responses and complaints

GDPR requests must be handled without undue delay and generally within one calendar month of receipt. A permitted extension of up to two further months requires notification within the first month with reasons. Requests are normally free; only legally permitted exceptions justify a fee or refusal, with an explanation and complaint rights.

You may complain to a competent supervisory authority, including in your habitual residence, workplace, or the place of an alleged infringement. Contacting DaanVeda first is not a condition for exercising that right. Find an EU / EEA supervisory authority.

Processing agreements and transfers

Organizations can request a DPA and transfer information. Customer data protection arrangements address processing scope, instructions, subprocessors, security measures, assistance, deletion, and audit terms. International transfer safeguards depend on the actual transfer and applicable agreement.

Contact our privacy team at privacy@daanveda.com about your rights, relevant data protection contacts, or the arrangements for your organization. A customer-specific agreement governs its scope; the public DPA overview explains the subjects it covers.

Regulatory reference

Irish Data Protection Commission: transparency under Articles 13 and 14. This includes information owed when personal data comes from sources other than the individual.