GDPR Compliance Policy

Introduction

ATA Asia complies with the General Data Protection Regulation (GDPR) to ensure the protection of personal data for users in the European Economic Area (EEA).

Legal Basis for Processing We collect and process data based on:

• User consent.
• Contractual necessity.
• Legal obligations.
• Legitimate business interests.

Data Collection

• Personal data is collected through website forms, cookies, and tracking technologies.

Data Processing Purposes

• To improve our services and user experience.
• To communicate with users regarding inquiries or service updates.

Data Retention and Deletion

• Data is retained only for the necessary duration and deleted upon request.

User Rights Under GDPR

• Right to access, modify, or delete data.

• Right to restrict or object to data processing.

• Right to data portability.

• Right to withdraw consent.

Security Measures

• We implement encryption and secure storage practices.

Third-Party Data Sharing

• Data may be shared with legal authorities or trusted partners following GDPR compliance.

International Data Transfers

• If data is transferred outside the EEA, necessary safeguards are in place.

Compliance and Complaints

• Users can contact the Data Protection Officer at [email address] for GDPR-related concerns.