1. Legal Bases for Processing Data
Under the EU General Data Protection Regulation (GDPR), we process personal data under the following legal bases (Art. 6 GDPR):
• Consent (Art. 6(1)(a)): When you voluntarily submit contact forms or subscribe to newsletters.
• Contractual Necessity (Art. 6(1)(b)): To fulfill service delivery for registered users.
• Legitimate Interests (Art. 6(1)(f)): To maintain web security, analyze site usage, and prevent fraud.
2. Your Data Subject Rights under GDPR
European users hold explicit rights regarding personal data:
• Right to Access (Art. 15): Request confirmation and details of personal data processed.
• Right to Rectification (Art. 16): Correct inaccurate personal data.
• Right to Erasure / "Right to be Forgotten" (Art. 17): Request deletion of your personal data.
• Right to Restrict Processing (Art. 18): Limit how your data is processed.
• Right to Data Portability (Art. 20): Receive data in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests.
3. Exercising Your GDPR Rights
To submit a Data Subject Request (DSR), email gdpr@examstrail.com. We respond to all verified requests within 30 days. You also have the right to lodge a complaint with your local Supervisory Authority in the EU/UK.