EU/UK Privacy Notice
Last updated:
This notice supplements our Privacy Policy and applies to individuals in the European Economic Area (EEA), the United Kingdom, and Switzerland. It describes how PSYPR ("we," "us," or "our") processes personal data under the EU General Data Protection Regulation (GDPR) and the UK GDPR.
1. Data controller
PSYPR is the controller of the personal data described in this notice. Insert your full legal entity name, registered address, and contact details here. If you have appointed an EU or UK representative or a Data Protection Officer, list them here with contact information.
2. What data we process
- Information you provide: name, email address, organization, and the contents of inquiries you send us.
- Technical data: IP address, browser and device information, and usage data collected through cookies and similar technologies, as described in our Cookie Policy.
3. Legal bases for processing
Under the GDPR, we rely on one or more of the following legal bases:
- Consent (Art. 6(1)(a)) — for non-essential cookies and analytics, and any optional communications. You may withdraw consent at any time.
- Legitimate interests (Art. 6(1)(f)) — to operate, secure, and improve the Site and to respond to inquiries, balanced against your rights.
- Legal obligation (Art. 6(1)(c)) — where we must process data to comply with the law.
4. Your rights
If you are in the EEA, UK, or Switzerland, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request erasure of your data ("right to be forgotten").
- Restrict or object to certain processing.
- Data portability, where applicable.
- Withdraw consent at any time, without affecting prior lawful processing.
- Lodge a complaint with your local supervisory authority.
To exercise any of these rights, email our contact form. We will respond within the timeframes required by law.
5. International data transfers
We are based in the United States, so your personal data may be transferred to and processed outside the EEA or UK. Where we make such transfers, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum. Confirm the specific transfer mechanism with counsel.
6. Data retention
We keep personal data only as long as necessary for the purposes described here, after which we delete or anonymize it, unless a longer retention period is required by law.
7. Supervisory authority
If you believe our processing infringes data protection law, you may complain to your national supervisory authority. In the UK this is the Information Commissioner's Office (ICO). In the EEA it is the authority in your country of residence.
8. Contact
For any question about this notice or your data, contact our contact form.
