Introduction

TradeSync, located at Richmond Hill Road, Kingstown, Saint Vincent and the Grenadines (SVG), acknowledges the importance of data protection and privacy rights under the General Data Protection Regulation (GDPR). This policy outlines our commitment and actions to comply with GDPR.

Scope

This policy applies to all personal data processed by TradeSync of individuals residing in the European Union (EU) and European Economic Area (EEA) for the provision of our services.

Principles

TradeSync adheres to the following GDPR principles:

• Lawfulness, Fairness, and Transparency: Processing personal data in a lawful, fair, and transparent manner.

• Purpose Limitation: Collecting personal data for specified, explicit, and legitimate purposes and not processing it further in a manner incompatible with those purposes.

• Data Minimization: Ensuring that personal data is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.

• Accuracy: Keeping personal data accurate and up-to-date.

• Storage Limitation: Retaining personal data no longer than necessary for the purposes for which it is processed.

• Integrity and Confidentiality: Ensuring the security of personal data through appropriate technical and organizational measures.

• Accountability: TradeSync takes responsibility for and can demonstrate compliance with the GDPR principles.

Rights of Data Subjects

Under GDPR, data subjects have the following rights:

• The right to be informed

• The right of access

• The right to rectification

• The right to erasure (‘right to be forgotten’)

• The right to restrict processing

• The right to data portability

• The right to object

• Rights in relation to automated decision-making and profiling

Data Protection Measures

TradeSync implements appropriate technical and organizational measures to ensure and demonstrate that data processing is performed in accordance with GDPR. Measures include:

• Data protection policies

• Data protection by design and by default

• Data minimization

• Integration of data protection into processing activities

• Regular security assessments

Data Breach Notification

In the event of a personal data breach, TradeSync shall without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the competent supervisory authority, unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons.

Third Party Processors

TradeSync commits to engaging only those processors that provide sufficient guarantees to implement appropriate technical and organisational measures in compliance with GDPR.

Training and Awareness

All employees of TradeSync who have access to personal data are provided with GDPR training to enhance awareness and ensure company-wide compliance.

Policy Review and Monitoring

This GDPR Compliance Policy will be reviewed regularly and updated as necessary to ensure ongoing compliance with GDPR requirements.

Contact Us

For more information about our GDPR policy, or if you have any concerns about your personal data, please contact us on info@thetradesync.com.