GDPR Compliance
DatoNow is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR).
Last updated: January 15, 2025
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that gives EU residents control over their personal data and how it's processed by organizations.
Right of Access
You can request information about what personal data we hold about you
Right to Rectification
You can request correction of inaccurate or incomplete personal data
Right to Erasure
You can request deletion of your personal data under certain circumstances
Right to Restriction
You can request limitation of processing of your personal data
Right to Data Portability
You can request your data in a structured, machine-readable format
Right to Object
You can object to processing of your personal data for certain purposes
We process your personal data based on the following legal grounds:
- Consent: You have given clear consent for processing for specific purposes
- Contract Performance: Processing is necessary to perform our service contract with you
- Legitimate Interests: Processing is necessary for our legitimate business interests
- Legal Obligation: Processing is required to comply with legal obligations
We implement comprehensive technical and organizational measures to protect your data:
Technical Safeguards
- End-to-end encryption of all data
- Multi-factor authentication and access controls
- Continuous security monitoring and logging
Organizational Measures
- Regular staff training on data protection
- Comprehensive data protection policies
- Regular security audits and assessments
When we transfer your data outside the EU, we ensure adequate protection through:
- Transfers to countries with adequacy decisions
- Appropriate safeguards like Standard Contractual Clauses
- Your explicit consent for specific transfers
To exercise any of your GDPR rights, please contact our Data Protection Officer:
Data Protection Officer
We will respond to your request within 30 days as required by GDPR.