Legal · Compliance

GDPR Compliance

How browseAnywhere handles personal data for individuals in the EU and EEA — and how to exercise your rights under the General Data Protection Regulation.

Last updated: December 10, 2024

1. Our commitment to GDPR

browseAnywhere is committed to compliance with the General Data Protection Regulation (GDPR) and to protecting the privacy rights of individuals in the European Union and European Economic Area.

2. Data controller

For the purposes of GDPR, browseAnywhere acts as the data controller for personal data we collect through our website and platform.

3. Your rights under GDPR

As a data subject, you have the following rights:

Right of Access

Obtain confirmation that we process your personal data and request a copy of that data.

Right to Rectification

Have inaccurate personal data corrected and incomplete data completed.

Right to Erasure

Request deletion of your personal data under the circumstances permitted by GDPR.

Right to Restrict Processing

Restrict how we process your personal data in specific situations defined by law.

Right to Data Portability

Receive your personal data in a structured, commonly used, machine-readable format.

Right to Object

Object to processing of your personal data for direct marketing or our legitimate interests.

4. Legal basis for processing

We process personal data on one or more of these bases:

  • Consent — when you have given clear consent for a specific purpose.
  • Contract — when processing is necessary to fulfil a contract with you.
  • Legal obligation — when we must process data to comply with the law.
  • Legitimate interests — when processing supports our legitimate business interests and does not override your rights.

5. International data transfers

When we transfer personal data outside the EEA, we put appropriate safeguards in place — typically Standard Contractual Clauses (SCCs) or transfers to jurisdictions covered by an adequacy decision.

6. Exercising your rights

To exercise any of your GDPR rights, contact our Data Protection Officer:

We will respond to your request within 30 days, as required by GDPR.

7. Data breach notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.