GDPR

General Data Protection Regulation (GDPR) Compliance Policy for Raps.co

Effective Date: March 1, 2025
Last Updated: March 1, 2025

1. Introduction
Raps.co (“Company,” “we,” “us,” or “our”) is committed to ensuring the privacy and protection of personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”). This GDPR Compliance Policy outlines the principles, procedures, and responsibilities we adhere to in order to comply with the GDPR and safeguard the personal data of our users, employees, and other data subjects.

2. Scope
This policy applies to all personal data processed by Raps.co, whether collected through our website, mobile applications, or other means, and regardless of the location of the data subject, provided that the data subject is within the European Union (EU) or the European Economic Area (EEA).

3. Definitions

• Personal Data: Any information relating to an identified or identifiable natural person (“Data Subject”).
• Processing: Any operation performed on personal data, including collection, storage, use, and deletion.
• Controller: The entity that determines the purposes and means of processing personal data (Raps.co).
• Processor: A third party that processes personal data on behalf of the Controller.
• Data Subject: The individual to whom the personal data relates.

4. Principles of Data Processing
Raps.co adheres to the following GDPR principles:

1. Lawfulness, Fairness, and Transparency: Personal data shall be processed lawfully, fairly, and in a transparent manner.
2. Purpose Limitation: Personal data shall be collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
3. Data Minimization: Personal data shall be adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
4. Accuracy: Personal data shall be accurate and kept up to date.
5. Storage Limitation: Personal data shall be kept in a form that permits identification of data subjects for no longer than necessary.
6. Integrity and Confidentiality: Personal data shall be processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

5. Legal Basis for Processing
Raps.co processes personal data only when one or more of the following legal bases apply:

• The data subject has given consent.
• Processing is necessary for the performance of a contract.
• Processing is necessary for compliance with a legal obligation.
• Processing is necessary to protect the vital interests of the data subject or another natural person.
• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
• Processing is necessary for the legitimate interests pursued by Raps.co or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

6. Data Subject Rights
Under the GDPR, data subjects have the following rights:

1. Right to Access: Data subjects may request access to their personal data and obtain information about how it is processed.
2. Right to Rectification: Data subjects may request the correction of inaccurate or incomplete personal data.
3. Right to Erasure (“Right to be Forgotten”): Data subjects may request the deletion of their personal data under certain circumstances.
4. Right to Restrict Processing: Data subjects may request the restriction of processing under certain conditions.
5. Right to Data Portability: Data subjects may request the transfer of their personal data to another controller in a structured, commonly used, and machine-readable format.
6. Right to Object: Data subjects may object to the processing of their personal data for specific purposes, including direct marketing.
7. Right to Withdraw Consent: Where processing is based on consent, data subjects may withdraw their consent at any time.

7. Data Security Measures
Raps.co implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data.
• Regular security assessments and audits.
• Access controls and authentication mechanisms.
• Employee training on data protection and security.
• Incident response and breach notification procedures.

8. Data Breach Notification
In the event of a personal data breach, Raps.co shall notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to the rights and freedoms of data subjects. If the breach poses a high risk to data subjects, Raps.co shall also notify the affected data subjects without undue delay.

9. International Data Transfers
Where personal data is transferred outside the EU/EEA, Raps.co shall ensure that adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adherence to an approved certification mechanism.

10. Data Protection Officer (DPO)
Raps.co has appointed a Data Protection Officer (DPO) to oversee compliance with the GDPR. The DPO can be contacted at:
[Insert Contact Information]

11. Third-Party Processors
Raps.co shall ensure that any third-party processors engaged to process personal data on its behalf comply with the GDPR and provide sufficient guarantees to implement appropriate technical and organizational measures.

12. Record-Keeping
Raps.co shall maintain records of all processing activities under its responsibility, including the purposes of processing, categories of data subjects, and data recipients.

13. Policy Review and Updates
This GDPR Compliance Policy shall be reviewed annually or as necessary to ensure ongoing compliance with applicable data protection laws and regulations.

14. Contact Information
For questions or concerns regarding this policy or the processing of personal data, please contact:
RAPSCOmedia@gmail.com or call Toll Free: 872-529-1199.

15. Governing Law
This policy shall be governed by and construed in accordance with the laws of Riverside, California, County of Riverside, U.S.A., without regard to its conflict of law principles.

Acknowledgment
By using Raps.co’s services, you acknowledge that you have read, understood, and agree to the terms of this GDPR Compliance Policy.