GDPR Compliance

Data Controller

Company: UnnoGPS

Email: privacy@unnogps.com

For all GDPR-related requests, please contact the address above. We respond within 30 days.

Your GDPR Rights

Under the General Data Protection Regulation (GDPR), you have several important rights regarding your personal data:

🔍 Right to Access

You can request a copy of all personal data we hold about you, including how it's used and who it's shared with.

✏️ Right to Rectification

You can request correction of inaccurate or incomplete personal data we hold about you.

🗑️ Right to Erasure

You can request deletion of your personal data under certain circumstances (also known as "right to be forgotten").

📦 Right to Data Portability

You can request your personal data in a structured, machine-readable format to transfer to another service.

🚫 Right to Object

You can object to processing of your personal data for direct marketing or other legitimate interests.

⏸️ Right to Restrict Processing

You can request limitation of processing your personal data under certain circumstances.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the information below. We will respond within 30 days of receiving your request.

What We Need From You

To process your request, we may need:

Proof of identity (to protect your data from unauthorized access)
Specific details about your request
Account information or device identifiers
Clarification if your request is unclear

Legal Basis for Processing

We process your personal data based on:

Contract: To provide GPS tracking services you've purchased
Legitimate Interest: To improve our services and prevent fraud
Consent: For marketing communications and optional features
Legal Obligation: To comply with tax and legal requirements

Data Processing Activities

Data Type	Purpose	Legal Basis	Retention
Account Information	Service provision	Contract	Account lifetime
Location Data	GPS tracking	Contract	12 months
Payment Information	Transaction processing	Contract	7 years
Usage Analytics	Service improvement	Legitimate Interest	2 years
Marketing Data	Communications	Consent	Until withdrawn

International Data Transfers

When we transfer your data outside the EU, we ensure adequate protection through:

European Commission adequacy decisions
Standard Contractual Clauses (SCCs)
Binding Corporate Rules
Certification schemes and codes of conduct

Data Breach Notification

In case of a data breach that may affect your rights and freedoms, we will:

Notify the supervisory authority within 72 hours
Inform affected individuals without undue delay
Provide clear information about the breach and our response
Offer guidance on protective measures you can take

Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority. If you're located in the EU/EEA, you can find your authority here:

European Data Protection Board (EDPB)

Website: edpb.europa.eu

The EDPB website contains a list of all supervisory authorities in EU/EEA member states. You can contact the authority in your country of residence or where the alleged infringement occurred.

We encourage you to contact us first so we can address your concerns directly.

Regular Reviews

We regularly review our data processing activities to ensure:

Compliance with GDPR requirements
Appropriate technical and organizational measures
Data minimization and purpose limitation
Regular staff training on data protection