GDPR Compliance

1. Data Controller

Voskes International is the data controller for any personal data collected through our website and services. Our registered office is in Taipei, Taiwan. For GDPR-related inquiries, contact info@voskes-int.com.

2. Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you fill out our contact form, you explicitly consent to us using your information to respond to your inquiry.
• Legitimate interest: We may process data to provide and improve our services, ensure website security, and communicate with clients about active projects.
• Contractual necessity: When you engage our services, we process your data as necessary to fulfill our contractual obligations.

3. Data We Collect

We collect only the data you explicitly provide through our contact form: name, email address, website URL, country, and project details. We also collect minimal server log data (IP address, browser type, timestamps) for security and performance purposes.

4. Your Rights Under GDPR

As a data subject in the European Economic Area, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Request transfer of your data to another service provider in a machine-readable format.
• Right to object: Object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. Data Retention

Contact form data is retained for the duration of our business relationship. Server logs are retained for a maximum of 30 days. Client project files are deleted 3 weeks after project completion unless otherwise agreed. You may request earlier deletion of your data at any time.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption, access controls, and regular security reviews.

7. International Data Transfers

Your data may be processed outside the EEA. When we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

8. Complaints

If you believe we have not complied with GDPR requirements, you have the right to lodge a complaint with your local data protection authority. We encourage you to contact us first at info@voskes-int.com so we can address your concerns directly.

9. Contact Our Data Protection Representative

For all GDPR-related inquiries, data access requests, or deletion requests:

Email: info@voskes-int.com
Response time: We aim to respond to all GDPR requests within 30 days.