GDPR Information
1. GDPR Applicability
The General Data Protection Regulation (GDPR) applies to the processing of personal data of individuals located in the European Union, regardless of where BuildUP is located. This document outlines how we comply with GDPR requirements.
2. Data Controller
Data Controller: BuildUP India Private Limited
Location: Greater Noida, Uttar Pradesh, India
Website: build-up.in
3. Legal Basis for Processing
Under GDPR, we process personal data based on the following legal bases:
- Consent (Article 6(1)(a)): When you explicitly consent to the processing of your data
- Contract (Article 6(1)(b)): To perform services you have requested
- Legal Obligation (Article 6(1)(c)): To comply with applicable laws and regulations
- Legitimate Interests (Article 6(1)(f)): To pursue our business interests and improve our services
4. Your GDPR Rights
If you are a resident of the EU, you have the following rights under GDPR:
Right of Access (Article 15)
You have the right to obtain confirmation of whether we are processing your personal data and to access that data in a structured, commonly used, and machine-readable format.
Right to Rectification (Article 16)
You have the right to correct inaccurate or incomplete personal data without undue delay.
Right to Erasure (Article 17)
You have the right to request deletion of your personal data under certain circumstances, including when the data is no longer necessary or when you withdraw consent.
Right to Restrict Processing (Article 18)
You have the right to restrict our processing of your data while we verify its accuracy or assess our legitimate interests.
Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller without obstruction.
Right to Object (Article 21)
You have the right to object to the processing of your data, particularly for marketing purposes and processing based on legitimate interests.
Rights Related to Automated Decision Making (Article 22)
You have the right not to be subject to decisions based solely on automated processing that produces legal effects concerning you.
5. International Data Transfers
BuildUP is located in India, which is not recognized as having an adequate level of data protection under GDPR. If we transfer your personal data outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or other GDPR-compliant mechanisms.
6. Data Retention
We retain personal data for the duration necessary to fulfill the purposes for which it was collected, or as required by applicable law. Retention periods vary depending on the context of the processing and our legal obligations.
7. Data Breaches
In the event of a personal data breach, we will notify affected individuals and relevant authorities without undue delay, where required by GDPR Article 33 and 34, unless the breach is unlikely to result in a risk to your rights and freedoms.
8. Data Protection Impact Assessment (DPIA)
We conduct Data Protection Impact Assessments for processing activities that pose high risks to the rights and freedoms of individuals, in compliance with GDPR Article 35.
9. Data Protection Officer
While BuildUP may not be required to appoint a Data Protection Officer under GDPR, we remain committed to data protection principles and can be contacted regarding any GDPR-related inquiries.
10. Exercising Your Rights
To exercise any of your GDPR rights, please contact us with your request. We will respond to your request within 30 days, extendable by two months for complex requests. Requests will be verified to ensure they come from the legitimate rights holder.
11. Complaints to Data Protection Authority
If you believe we have violated your rights under GDPR, you have the right to lodge a complaint with your local Data Protection Authority (e.g., your country's equivalent to the German Federal Data Protection Commissioner).
12. Contact for GDPR Requests
For any GDPR-related inquiries, data subject requests, or to exercise your rights, please contact us through the contact form on our website or reach out to our team directly.
Last Updated: April 2025