GDPR Compliance

The General Data Protection Regulation (GDPR) is a pivotal piece of legislation that came into effect in May 2018 in the European Union (EU). It provides a set of standardized data protection laws across all the member countries, imposing strict guidelines for the collection, storage, and processing of personal information.

GDPR applies to any entity, regardless of its location, that processes the personal data of individuals within the EU. If you handle such data, compliance with GDPR is not optional, but a legal requirement.

KDAN Mobile Software Ltd. (“KDAN”, “us”, “we”, or “our”) acknowledges the importance of data protection and privacy. In our quest to be compliant with GDPR, we have taken several measures to secure our users' personal data, ensure their privacy, and maintain transparency in our operations:

1) Our Internal Procedures

• a) Transparent Policies
• Our commitment to clarity is reflected in our Privacy Policy, Terms of Service, and Security Policy. Regular updates to these documents ensure that they remain accessible, allowing our users to easily understand how their data is managed.

• b) Information Security
• Security is of the utmost importance to us. To that end, we utilize protective measures such as firewalls, intrusion detection systems, and secure cloud storage solutions to safeguard our network and your data.
• Customer data is handled with the greatest care. KDAN only collects what's necessary, stored safely with Google Cloud. Please visit the Google Cloud website for more information. Your privacy is paramount to us. Strict controls are in place to ensure only authorized KDAN developers can access our database, and only when needed to resolve issues or enhance performance.
• We're committed to keeping your data safe and private. Explore our detailed security policy to learn more.

• c) Employee Training
• We believe that GDPR compliance is a company-wide responsibility. That’s why all our employees undergo training focused on the proper handling and protection of personal data. Constant updates to this training keep our staff knowledgeable about the latest practices in data privacy.

• d) Development and Compliance
• Our software development lifecycle incorporates privacy by design, resulting in products that are GDPR-compliant from the ground up. Continuous quality checks and updates ensure our compliance remains current.
• Planning what changes to make
• Writing down the changes
• Making plans for testing the changes
• Testing the changes and writing down the results
• Checking the quality and approving the changes
• Having a dedicated QA team review and confirm the changes
• Reviewing and updating regularly to keep everything up to date

• e) Cross-Platform Data Security
• Adhering to the data security standards set by prominent platforms such as App Store, Google Play, and Microsoft Store, we reinforce the safeguarding of user data, maintaining its integrity and privacy.

• f) Data Transfer and Agreements
• We take care of your data and make sure it's handled right. Here's how:
• Data Processing Agreements (DPAs): We are committed to safeguarding your personal data and conducting data transfers that align with GDPR regulations. As part of our commitment, we have established Data Processing Agreements (DPA) with all of our users. This agreement details how we will adhere to GDPR regulations in handling and processing data. The terms of the DPA are used to govern the act transmitting your data to KDAN. Please check out our Data Processing Agreement for more.
• For international transfers:
• 1. If we need to send data to another country or organization, we follow strict rules and only do it when the law says it's okay.
• 2. If we engage the services of another company, we make sure they follow the same rules, using agreements that have been approved by the authorities.
• We work hard to make sure your data is safe and only used in the right way.

• g) Enhanced User Control
• Our Privacy Policies grant our users increased control over their personal information. This includes:
• Information Transparency: We provide transparent information detailing how user data is utilized, ensuring users understand our practices and intentions.
• Data Deletion: Users have the option to delete their registered member data, giving them greater control over their personal information.

2) Our Products

• a) Data Management and Deletion
• For services that require a registered member account to access relevant features, all users can manage their own member accounts. Requests for account deletion must be processed through our Contact Page
• In other services where features are accessible immediately after purchase without the need for a separate member registration, all users can directly manage the data they use, access, or upload.

• b) Cookie Policy
• A comprehensive Cookie Policy is in place to inform our users about our use of cookies, including their ability to control cookie settings.

Ensuring GDPR compliance is an ongoing process, and we take our responsibility seriously. For any queries regarding your GDPR rights or our compliance practices, please get in touch through our Customer Service. We’re committed to maintaining an open dialogue with our users about their data rights and our data protection efforts.