GDPR Compliance

Our Commitment to GDPR

SalesRep is committed to compliance with the EU General Data Protection Regulation (GDPR). We process personal data lawfully, fairly, and transparently, and we have implemented appropriate technical and organizational measures to protect the rights of data subjects across all our products and services.

Lawful Basis for Processing

We only process personal data when we have a lawful basis to do so. This includes processing necessary for the performance of a contract with you, compliance with our legal obligations, your consent, or our legitimate interests such as improving our services and preventing fraud, provided those interests are not overridden by your rights and freedoms.

Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data, also known as the right to be forgotten.
• Right to restriction: request that we limit the processing of your data.
• Right to data portability: receive your data in a structured, commonly used, machine-readable format.
• Right to object: object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent: withdraw your consent at any time where processing is based on consent.

Data Security and Retention

We protect personal data with encryption in transit, access controls, and secure hosting environments. We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, or to resolve disputes, after which it is securely deleted or anonymized.

International Data Transfers

When personal data is transferred outside the European Economic Area, we ensure an adequate level of protection through appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

Data Processing and Sub-processors

SalesRep acts as a data processor for the customer data our clients manage through our platform, and as a data controller for our own website and account data. We maintain data processing agreements with our sub-processors and require them to meet the same GDPR obligations we uphold.