GDPR Compliance

Your data rights under the General Data Protection Regulation

Last updated: January 2025

Fully GDPR Compliant

We meet all requirements of the EU General Data Protection Regulation

Your Rights Protected

Access, rectify, delete, or export your data at any time

Data Security

Bank-level encryption and strict access controls

Our Commitment to GDPR

Genwave is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR). This page outlines your rights under GDPR and how we protect your personal data.

What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It strengthens and unifies data protection for individuals within the European Union (EU) and addresses the export of personal data outside the EU.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Information

You have the right to be informed about how your personal data is collected and used.

Right of Access

You have the right to request access to your personal data and receive a copy of it.

Right to Rectification

You have the right to have inaccurate personal data corrected or completed if incomplete.

Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data under certain circumstances.

Right to Restrict Processing

You have the right to request restriction of processing of your personal data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format.

Right to Object

You have the right to object to processing of your personal data for direct marketing purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to automated decision-making, including profiling.

Genwave Agent & GDPR

Genwave Agent is designed with GDPR compliance at its core:

  • All Agent conversations can be exported or deleted on request
  • Agent only accesses WordPress data you explicitly authorize
  • 30-day undo snapshots can be permanently deleted
  • No data is shared with third parties for marketing
  • Full audit logs available for compliance verification

Data Minimization

Agent only processes the minimum data necessary to execute your commands. We don't store or analyze your WordPress content beyond what's needed for immediate operations.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

Consent: You have given clear consent for specific purposes
Contract: Processing is necessary for contract performance
Legal Obligation: Required to comply with legal requirements
Legitimate Interest: Necessary for our legitimate business interests

Data Protection Measures

We implement appropriate technical and organizational measures to ensure data security:

Technical Measures

  • Encryption in transit and at rest
  • Regular security assessments
  • Access controls and authentication
  • Regular backups and recovery

Organizational Measures

  • Staff training on data protection
  • Data protection impact assessments
  • Privacy by design and default
  • Regular policy reviews

Data Retention

We retain personal data only for as long as necessary:

Account Data: Until account deletion or 3 years of inactivity
Marketing Data: Until you withdraw consent or 2 years
Legal Requirements: As required by applicable laws
Support Records: 3 years after case closure

International Data Transfers

When we transfer your data outside the EU, we ensure adequate protection through:

  • •Standard Contractual Clauses (SCCs)
  • •Adequacy decisions by the European Commission
  • •Appropriate safeguards and security measures

Exercising Your Rights

To exercise any of your GDPR rights, please contact us using the information below. We will respond to your request within 30 days.

Data Protection Officer

We will respond to your request within 30 days as required by GDPR.

Complaints

If you believe we have not complied with GDPR requirements, you have the right to lodge a complaint with your local supervisory authority or the relevant EU data protection authority.

Updates to This Page

We may update this GDPR compliance page from time to time to reflect changes in our practices or legal requirements. Please check this page regularly for updates.

Your Privacy Matters

Genwave is committed to protecting your data rights. Use our services with confidence knowing your privacy is protected.