GDPR Compliance
Your rights under the General Data Protection Regulation
Last updated: December 2024
GDPR Overview
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to all individuals within the European Union (EU) and European Economic Area (EEA). It also applies to organizations outside the EU that offer goods or services to EU residents.
Latio Tech is committed to protecting your personal data and respecting your privacy rights under GDPR. This page explains your rights and how we comply with GDPR requirements.
Your Rights Under GDPR
As an EU resident, you have the following rights regarding your personal data:
Right to Information
You have the right to know what personal data we collect, how we use it, and who we share it with.
How we comply: Our Privacy Policy provides comprehensive information about our data practices, including collection, processing, and sharing of personal data.
Right of Access
You can request a copy of all personal data we hold about you, including how we obtained it and who we've shared it with.
How to request: Email us at info@latio.com with your request. We'll respond within 30 days with your data in a commonly used, machine-readable format.
Right to Rectification
You can ask us to correct or update personal data that is inaccurate or incomplete.
How to update: Most personal information can be updated through your account settings. For other corrections, contact us at info@latio.com.
Right to Erasure ("Right to be Forgotten")
You can request deletion of your personal data when it's no longer necessary for our original purpose.
Limitations: We may retain some data if required by law or for legitimate business purposes such as:
- • Legal compliance and tax obligations
- • Fraud prevention and security
- • Published reviews (anonymized)
- • Exercise or defense of legal claims
Right to Restrict Processing
You can ask us to limit how we use your data while we resolve disputes about accuracy or our right to use it.
When applicable: If you contest data accuracy, object to processing, or need data for legal claims while we consider deletion requests.
Right to Data Portability
You can receive your personal data in a machine-readable format and transfer it to another service provider.
Data formats: We provide data in JSON format including account information, reviews, preferences, and usage history where technically feasible.
Right to Object
You can object to processing of your data for direct marketing, research, or when based on legitimate interests.
How to object: Use unsubscribe links in emails, adjust account settings, or contact us directly. We'll stop processing unless we have compelling legitimate grounds.
Rights Related to Automated Decision-Making
You have the right not to be subject to purely automated decision-making that significantly affects you.
Our approach: While we use AI for search recommendations, all significant decisions (account actions, content moderation) involve human review and oversight.
How to Exercise Your Rights
Contact Us
Email us at info@latio.com with your request. Include details about which right you want to exercise and any relevant information.
Identity Verification
We may ask you to verify your identity to protect your personal data. This helps ensure requests are legitimate and data is only shared with the rightful owner.
Response Timeline
We'll respond to your request within 30 days (may be extended to 90 days for complex requests). If we need more time, we'll inform you and explain why.
No Cost to You
Exercising your GDPR rights is free of charge. We may only charge a reasonable fee for excessive or repeated requests.
Important:
If you believe we haven't properly addressed your request or you want to file a complaint, you have the right to contact your local data protection authority. You can find contact information at European Data Protection Board .
Legal Basis for Processing Your Data
Under GDPR, we must have a legal basis for processing your personal data. Here are the legal bases we rely on:
Contract Performance
Processing necessary to provide our services and fulfill our contract with you.
Examples: Account management, subscription billing, feature delivery
Legitimate Interests
Processing for purposes that are in our legitimate business interests and don't override your rights.
Examples: Platform security, fraud prevention, service improvement
Consent
Processing based on your explicit consent, which you can withdraw at any time.
Examples: Marketing communications, optional analytics, newsletter subscriptions
Legal Obligation
Processing required to comply with legal or regulatory obligations.
Examples: Tax records, anti-money laundering checks, legal discovery requests
International Data Transfers
Some of our service providers are located outside the EEA. When we transfer your data internationally, we ensure appropriate safeguards:
Adequacy Decisions
We transfer data to countries recognized by the EU as providing adequate protection.
Standard Contractual Clauses
We use EU-approved contractual clauses to ensure data protection during transfers.
Certification Programs
Some providers participate in certification programs like Privacy Shield successors.
Technical Safeguards
Data encryption, pseudonymization, and access controls protect transferred data.
Key Transfer Partners:
- • Auth0 (US): Authentication services with Standard Contractual Clauses
- • Vercel (US): Hosting and analytics with adequacy frameworks
- • Stripe (US): Payment processing with certified data protection
Data Protection Contact
While Latio Tech doesn't require a formal Data Protection Officer under GDPR, we have designated team members responsible for data protection and privacy compliance.
Privacy Team Contact
Response Time: We aim to respond to all GDPR-related inquiries within 72 hours and provide full responses within the required 30-day timeframe.
Supervisory Authority
If you're not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with your local data protection authority.
Find Your Local Authority
Each EU member state has its own data protection authority. You can file a complaint in:
- • The country where you live
- • The country where you work
- • The country where the alleged violation occurred
Contact Us About GDPR
We're committed to protecting your privacy and ensuring GDPR compliance. If you have any questions or want to exercise your rights, please contact us:
Latio Tech
Cybersecurity Vendor Directory Platform
Website: latio.tech
This page provides information about your GDPR rights. For detailed information about how we collect and use your data, please see our Privacy Policy.