GDPR Compliance

Introduction

This GDPR compliance statement explains how Karavan Digital Inc. complies with the General Data Protection Regulation (GDPR) when processing personal data of EU residents.

Data Controller

Karavan Digital Inc. is the data controller for personal data processed through our platform:

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent - When you explicitly consent to data processing
• Contract Performance - To fulfill our contractual obligations to you
• Legitimate Interests - To improve our services and prevent fraud
• Legal Obligation - To comply with applicable laws and regulations

Categories of Personal Data

We process the following categories of personal data:

• Identity Data - Name, email address, phone number, and identification documents
• Contact Data - Address, phone numbers, and communication preferences
• Financial Data - Payment information, transaction history, and financial records
• Technical Data - IP address, browser type, device information, and usage data
• Usage Data - Information about how you use our platform and services

Purposes of Processing

We process personal data for the following purposes:

• To provide and maintain our B2B trade platform
• To manage your account and provide customer support
• To communicate with you about our services
• To send you relevant marketing communications (with consent)
• To analyze and improve our platform performance
• To comply with legal and regulatory requirements

Data Retention

We retain personal data for different periods depending on the purpose:

• Account Data - Retained for 7 years after account closure
• Transaction Data - Retained for 10 years for legal and tax compliance
• Marketing Data - Retained until consent is withdrawn
• Legal Compliance Data - Retained as required by applicable laws

Data Sharing

We may share personal data with:

• Service Providers - Trusted third parties who assist in platform operations
• Business Partners - Partners involved in transaction facilitation
• Legal Authorities - When required by law or to protect our rights
• With Your Consent - When you explicitly agree to data sharing

Your Rights Under GDPR

As an EU resident, you have the following rights:

Exercising Your Rights

To exercise your rights:

• Contact us at [email protected]
• We may need to verify your identity
• We will respond within 30 days
• Exercising your rights is free of charge

Data Security

We implement appropriate security measures:

• Data encryption in transit and at rest
• Restricted access to personal data
• Regular security monitoring and audits
• Staff training on data protection
• Incident response and breach notification procedures

International Data Transfers

When transferring data outside the EU, we ensure:

• Adequacy decisions by the European Commission
• Appropriate safeguards such as standard contractual clauses
• Your explicit consent for specific transfers
• Transfers necessary for contract performance

Children's Data

Our services are not intended for children under 16. We do not knowingly collect personal data from children under 16.

Right to Complain

You have the right to lodge a complaint with a supervisory authority:

Changes to This Statement

We may update this GDPR compliance statement. We will notify you of significant changes.

Contact Us

For GDPR-related inquiries, contact us: