GDPR Compliance

Our Commitment to Data Protection

As a European-based company, EuroStaff takes data protection seriously. We comply with all requirements of the General Data Protection Regulation (GDPR) and are committed to protecting the privacy and security of your personal data.

Data Controller

EuroStaff is the data controller for the personal data we collect and process. You can contact us at:

Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

• •Right to Access: You can request a copy of the personal data we hold about you.
• •Right to Rectification: You can request that we correct any inaccurate or incomplete data.
• •Right to Erasure: You can request that we delete your personal data ("right to be forgotten").
• •Right to Restrict Processing: You can request that we limit how we use your data.
• •Right to Data Portability: You can request a copy of your data in a machine-readable format.
• •Right to Object: You can object to certain types of processing, including direct marketing.
• •Right to Withdraw Consent: Where we rely on consent, you can withdraw it at any time.

Data We Collect

We collect and process the following types of personal data:

• •Contact Information: Name, email address, phone number, company name
• •Communication Data: Messages you send us through contact forms or email
• •Technical Data: IP address, browser type, device information, cookies
• •Usage Data: How you interact with our website and services

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• •Consent: When you provide explicit consent (e.g., subscribing to newsletters)
• •Contract Performance: To fulfill our contractual obligations to you
• •Legitimate Interests: For our business operations and improving our services
• •Legal Obligation: To comply with legal requirements

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• •Encryption of data in transit and at rest
• •Regular security assessments and updates
• •Access controls and authentication
• •Employee training on data protection
• •Regular backups and disaster recovery procedures

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• •Contact form submissions: 2 years from last contact
• •Client data: Duration of contract + 7 years (legal requirement)
• •Analytics data: 26 months
• •Marketing data: Until consent is withdrawn

International Data Transfers

We primarily process data within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• •Standard Contractual Clauses approved by the European Commission
• •Adequacy decisions by the European Commission
• •Binding Corporate Rules

Exercising Your Rights

To exercise any of your GDPR rights or if you have questions about our data protection practices, please contact us:

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately.

Updates to This Policy

We may update this GDPR compliance statement from time to time. We will notify you of any significant changes by posting a notice on our website or by email.