Privacy Policy

GDPR Compliance

Everything You Need to Know About Roy Solos’ GDPR Compliance

What is GDPR?

The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is a regulation enacted by the European Parliament, the Council of the European Union, and the European Commission. Its aim is to strengthen and unify data protection for all individuals within the European Union (EU).

To Whom Does the GDPR Apply?

GDPR applies to the processing of personal data belonging to individuals in the EU. In the case of Roy Solos, personal data may be collected when users build a database of contacts, store customer information, or engage in business communications (e.g., through a CRM system). Please note: GDPR applies only to individuals (data subjects), not businesses or government entities.

Is Roy Solos GDPR Compliant?

Yes, Roy Solos has taken the necessary measures to be fully compliant with the GDPR since it became enforceable in May 2019.

More GDPR FAQs

Do You Have a Dedicated Data Protection Officer (DPO) or Compliance Team?

Yes. A staff member has been assigned to handle all GDPR-related matters. For any GDPR inquiries, please contact us at:
📩 support@roysolos.com

How Will You Verify GDPR Compliance to Customers?

If formal verification is required, you may submit your Data Processing Agreement (DPA) template to us. We will review, complete, and return it to you signed.

How Is Sensitive Information Stored?

Sensitive data is securely stored with restricted access. In the event of a data breach, we follow a strict protocol that includes immediate notification to affected parties, our DPO, and local authorities as required by GDPR.

How Long Is Customer Data Stored?

We retain customer data only as long as they are actively using our services or until a deletion request is submitted.

Where Is Customer Data Stored?

All customer data is securely hosted on Google Cloud-based servers with a CDN-oriented structure.

Who Has Access to Customer Personal Information?

Access to personal information is limited to authorized personnel and only occurs with customer consent or request. Typically, this includes our customer support, development, or marketing teams.

How Do You Handle Customer Data Deletion Requests?

We act immediately on any data deletion request and remove personal data without delay.

How Do You Manage Sub-Processors and Their GDPR Responsibilities?

We have signed Data Processing Agreements (DPAs) with all our sub-processors and subcontractors to ensure full compliance.

What New Safeguards Are in Place to Meet GDPR Requirements?

While many of our safeguards were already in place, we have enhanced our internal guidelines for handling sensitive data and responding to incidents, breaches, and compliance checks.

Data Processing & Categories

Processing Operations Performed by Roy Solos (Data Processor):

  • All activities required to deliver customer support

  • Service management

  • Technical maintenance

Data Subjects:

  • Any individual whose data has been shared with Roy Solos.

Categories of Data Collected:

  • Name

  • Email

  • Phone number

  • Address

  • IP address

  • Timestamps of user actions

  • Browser cookies

Special Categories of Data:
Some forms may ask for business-related goals to tailor services more effectively. The complete list of information fields is available on:
🔗 https://www.roysolos.com

Cross-Border Transfers

Cross-border data transfers are performed within the EU and US in accordance with legal frameworks that ensure data protection.

Additional Security Measures

HTTPS Encryption

All Roy Solos hosted environments use secure HTTPS connections to ensure encrypted communication between your browser and our servers, including all email and chat interactions.

API Security

Our REST API is secured and accessible only to accredited users via authenticated credentials (username/password or API tokens).

Request Data Removal

Roy Solos offers the ability to delete Service Data that may include personal data (e.g., profiles, commissions, logs, IP addresses) from active accounts.

Affiliate Account & Data Deletion

Affiliates may request full deletion of their data, including all personal and service-related records.