GDPR Compliance – Diamond Up Drinse

At Diamond Up Drinse, we are fully committed to the General Data Protection Regulation (GDPR) and to protecting the privacy rights of individuals in the European Union and worldwide.

1. Lawful Basis for Processing

We process your personal data only when a lawful basis applies. These include your explicit consent, fulfillment of a service agreement, compliance with legal obligations, or our legitimate business interest (such as enhancing service quality).

2. Types of Personal Data

We may collect and process the following categories of data:

• Contact information (name, email, phone number)
• Vehicle details (make, model, year)
• Billing and payment data
• Technical and usage data (IP address, browser, device, on-site activity)

3. Data Subject Rights

Under the GDPR, EU residents have the following rights:

• Right to access personal data
• Right to correct inaccurate or incomplete data
• Right to request erasure (“right to be forgotten”)
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time

4. Cross-Border Transfers

We may process data on secure cloud platforms hosted outside the EU. In such cases, we ensure compliance using standard contractual clauses or equivalent legal safeguards.

5. Retention Period

We retain personal data only as long as necessary to deliver services, meet contractual/legal obligations, or for legitimate record-keeping. Data deletion can be requested when applicable under GDPR.

6. Data Protection Measures

Diamond Up Drinse uses industry-standard SSL encryption, secure cloud infrastructure, access restrictions, and regular audits to protect your data.