# GDPR Compliance - JyotishGrid

Source: https://jyotishgrid.com/gdpr

# GDPR Compliance

Last updated: 10/21/2026

## 1. Introduction

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect in the European Union (EU) on May 25, 2018. GDPR strengthens and unifies data protection for individuals within the EU and addresses the export of personal data outside the EU.

JyotishGrid is committed to full compliance with GDPR and ensuring that your personal data is protected in accordance with the highest standards. This page explains your rights under GDPR and how we protect your data.

## 2. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

### Right to Access

You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and access to your personal data. You can request a copy of your data at any time.

### Right to Rectification

You have the right to have inaccurate personal data corrected and incomplete personal data completed. You can update your information directly in your account settings or request corrections from us.

### Right to Erasure ("Right to be Forgotten")

You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.

### Right to Restrict Processing

You have the right to request the restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

### Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

### Right to Object

You have the right to object to processing of your personal data for direct marketing purposes or for reasons related to your particular situation.

### Rights Related to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you.

## 3. How We Comply with GDPR

### 3.1 Lawful Basis for Processing

We process your personal data based on the following lawful bases:

- Consent: When you provide explicit consent for specific processing activities
- Contract: When processing is necessary for the performance of a contract with you
- Legal obligation: When we need to comply with legal requirements
- Legitimate interests: When processing is necessary for our legitimate business interests

### 3.2 Data Minimization

We only collect and process personal data that is necessary for the purposes for which it is processed. We do not collect excessive or irrelevant data.

### 3.3 Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

- Encryption of data in transit and at rest
- Regular security assessments and audits
- Access controls and authentication
- Employee training on data protection
- Incident response procedures

### 3.4 Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law.

## 4. Exercising Your Rights

To exercise any of your GDPR rights, please contact us using one of the following methods:

Email: privacy@jyotishgrid.com

Subject: GDPR Request

Response Time: We will respond to your request within 30 days

When making a request, please provide:

- Your full name and email address associated with your account
- A clear description of the right you wish to exercise
- Any relevant information to help us process your request

## 5. Data Processing Agreements

When we use third-party service providers (data processors) to process your personal data on our behalf, we ensure that:

- We have Data Processing Agreements (DPAs) in place
- Processors are GDPR compliant
- Processors implement appropriate security measures
- We maintain control over your data

## 6. Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will:

- Notify the relevant supervisory authority within 72 hours
- Inform affected individuals without undue delay
- Provide clear information about the nature of the breach
- Explain the measures taken to address the breach

## 7. Supervisory Authority

If you are located in the EU and believe that we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.

You can find your local supervisory authority at: European Data Protection Board

## 8. Contact Us

For any questions or concerns regarding GDPR compliance or your data protection rights, please contact our Data Protection Officer:

Email: dpo@jyotishgrid.com

Address: JyotishGrid, Data Protection Office

Response Time: Within 30 days as required by GDPR