At Gersuz, we are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR). This Privacy Policy explains what personal data we collect, how we use it, and how we protect it.
1. Information We Collect
Required information
We collect only the personal data that is necessary to provide our services.
- During registration, we only require your email address to create and manage your account.
Optional profile information
Users may optionally choose to complete additional profile information, including:
- Name and surname
- Tax identification number
- Date of birth
- Country and city of residence
- Full address
- etc.
2. Why We Collect Your Data
We collect and process personal data solely for the following purposes:
- To provide and operate the Gersuz platform, panel, and digital tools
- To create, manage, and maintain user accounts
- To securely process international payments and subscriptions
- To comply with applicable legal, regulatory, and tax obligations
- To improve the performance, security, and functionality of the Gersuz platform and its tools
3. Legal Basis for Processing
We process personal data in accordance with the GDPR and based on the following legal grounds:
- Your consent, where required, for optional features or communications
- Performance of a contract, when providing access to the Gersuz platform, panel, and digital tools
- Compliance with legal obligations, including tax and accounting regulations
- Legitimate interests, such as ensuring the security, stability, and continuous improvement of the Gersuz platform and its tools
4. How We Protect Your Data
We take the protection of personal data seriously and apply appropriate technical and organizational measures to safeguard it, in accordance with the GDPR. These measures include:
- Secure data storage with strict role-based access controls
- Encryption of data both in transit and at rest, including the use of SSL/TLS for data transmission
- Regular security monitoring, updates, and risk assessments
- Restricted access to personal data, limited to authorized senior personnel and only when strictly necessary
5. Your Rights Under GDPR
Under the GDPR, you have the right to:
- Access your personal data
- Correct or update your personal information
- Request the deletion of your data (“right to be forgotten”)
- Restrict the processing of your personal data
- Object to data processing based on legitimate interests
- Request the transfer of your data to another service provider (data portability)
- Withdraw your consent at any time, where processing is based on consent
- Lodge a complaint with a relevant supervisory authority if you believe your rights have been violated
To exercise any of these rights, users can submit a request through their authenticated user panel using the ticketing system. This process helps us verify identity, protect user data, and prevent unauthorized or fraudulent requests.
6. Cookies
We use cookies and similar technologies that are strictly necessary for the operation, security, and functionality of the Gersuz platform and user panel.
Where applicable, we may also use limited analytical cookies to understand how the platform and tools are used, in order to improve performance and user experience. These cookies do not collect unnecessary personal data and are used in accordance with applicable data protection laws.
Users can manage or disable cookies through their browser settings. Please note that disabling certain cookies may affect the functionality of the Gersuz platform and its tools.
7. Third Parties
We do not disclose or share personal data with third parties, except in the following limited circumstances:
- When required to do so by applicable laws or legal authorities
- When necessary to securely process payments and subscriptions through trusted and compliant payment service providers
8. Data Retention
We retain personal data only for as long as it is necessary to achieve the purposes outlined in this Privacy Policy, including:
- Providing and maintaining the Gersuz platform, panel, and digital tools
- Complying with applicable legal, tax, and regulatory obligations
- Resolving disputes and enforcing our agreements
When personal data is no longer required for these purposes, it is securely deleted or anonymized in accordance with applicable data protection laws.
9. International Users
Gersuz provides its services and processes payments on an international basis. As a result, personal data may be processed or transferred to countries outside the user’s country of residence.
Where such transfers occur, Gersuz ensures that appropriate safeguards are in place to protect personal data, in accordance with applicable data protection laws and the GDPR. These safeguards are designed to ensure that personal data receives an adequate level of protection, regardless of where it is processed.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. If significant changes are made, users will be notified through their registered email address or via a notice within the Gersuz user panel.
We encourage users to review this Privacy Policy periodically to stay informed about how personal data is protected.
If you have any questions or concerns regarding this Privacy Policy or the handling of your personal data, you can contact us through the 🛎️Help Desk available in your authenticated user panel.
