This GDPR Statement applies to all individuals whose personal data we process within the EEA, including users of our platform, website visitors, and third-party stakeholders. It covers data collected through account registration, compliance submissions, support interactions, and website analytics. Whether you’re an EEA resident or a global user interacting with our EEA-based services, Virideed ensures GDPR compliance as a data controller, extending protections wherever applicable.

• Data from I/O reports (e.g., User inputs, AI outputs, Flags, Recommendations, Fine-tuning metrics).
• Data from sustainability reports (e.g., emissions, waste metrics).
• Account information (e.g., name, email, organization).
• Support queries submitted via our Contact Form.

For inquiries, reach our Data Protection Officer at support@virideed.com.

You have the right to request a copy of the personal data we hold about you, such as your account details, submitted compliance data (e.g.,I/O reports, emissions reports), or website usage analytics. This allows you to verify what information we process and ensure its accuracy. We’ll provide this in a structured, commonly used format, typically within 30 days of your request.

How It Works: This right applies to data like your name, email, organization, and any I/O or sustainability metrics you’ve uploaded. We’ll include details on how we use it (e.g., for compliance reporting) and who we’ve shared it with (e.g., regulators, if applicable). No fees apply unless requests are excessive.

Exercise This Right: Visit our Settings page to submit a request directly from your account dashboard, where you can download your data securely.

If your personal data is inaccurate or incomplete—like an outdated email address or incorrect organization name—you can request corrections. This ensures our records reflect the truth, maintaining the integrity of your compliance submissions and communications with us.

How It Works: For example, if your company name changes due to a merger, you can update it or we’ll update it across your account and linked reports. We process rectification requests promptly, typically within 30 days, notifying you once completed.

Exercise This Right: Use our Account editor in your account settings to update your details instantly or contact us for assistance.

Known as the “right to be forgotten,” this allows you to request deletion of your personal data when it’s no longer needed for its original purpose, such as after closing your account, or if you withdraw consent for optional processing (e.g., marketing).

How It Works: We’ll erase data like your account profile or analytics history unless we’re required to retain it (e.g., for legal compliance records). Deletion occurs automatically or within 30 days, with confirmation provided. Note: anonymized compliance data may persist for aggregate reporting.

Exercise This Right: Initiate deletion via our Account Deletion Tool, accessible in your settings, for a streamlined process.

You can limit how we process your data under specific conditions—e.g., if you contest its accuracy (pending verification) or if processing is unlawful but you prefer restriction over erasure. This pauses further use while preserving your data.

How It Works: For instance, if you dispute an I/O audit, we’ll restrict its use in reports until resolved. Restrictions are applied within 30 days, and we’ll notify you before lifting them.

Exercise This Right: Request restriction through our Support Center, where you can flag data for review.

You can receive your personal data in a structured, machine-readable format (e.g., CSV, JSON) to transfer it to another service or keep for your records. This applies to data you’ve provided, like account info or uploaded compliance metrics.

How It Works: Download or request your profile data, I/O logs or emissions history, and we’ll deliver it securely within 30 days. This right enhances your control, letting you reuse data elsewhere without hassle.

Exercise This Right: Use our Data Export Tool in your dashboard to download your data effortlessly.

You can object to processing based on legitimate interests (e.g., analytics for platform improvement) or direct marketing. We’ll stop unless we demonstrate compelling grounds overriding your objection.

How It Works: For example, object to marketing emails, and we’ll cease immediately. For legitimate interests, we’ll review your request within 30 days, balancing it against our needs (e.g., security).

Exercise This Right: Manage objections via our Privacy & Security page, where you can opt out of specific processing activities.

The DPO is your direct point of contact for all GDPR-related matters. Whether you have questions about how we process your data (e.g., AI safety and sustainability metrics or account details), need assistance exercising your rights, or wish to raise a concern, our DPO is here to assist you promptly and transparently.

• Email: Contact the DPO at support@virideed.com for personalized support.
• Online Form: Submit inquiries or requests via our Contact Form, available on our website.
• Response Time: We aim to acknowledge your request within 72 hours and resolve it within 30 days, per GDPR timelines.

Example: If you’re unsure how your I/O logs and emissions data are shared with regulators, the DPO can explain the process and address any concerns, ensuring clarity and trust.