GDPR Compliance Statement

Last Updated: [14.09.2024]

At EAS Project, we are committed to protecting the privacy and personal data of our users and customers. This GDPR Compliance Statement outlines how we collect, process, and protect your data in accordance with the General Data Protection Regulation (EU) 2016/679.

1. Data Controller

Easy Access System Project Oü (EAS)
Registered Address: Mustamäe tee 50, 10621, Tallinn, Estonia
Company Registration Number: 16244595
Email: info@easproject.com

We act as the data controller when processing your personal data.

2. Data We Collect

We may collect the following types of personal data:

• Contact Details: Name, email address, phone number.
• Business Information: Company name, registration number, address.
• Account Details: Login credentials, account usage, and service preferences.
• Financial Data: Payment details when subscribing to our services.
• Technical Data: IP address, browser type, cookies, and other technical information.

3. Purpose of Data Processing

We collect and process personal data for the following purposes:

1. Providing Services: To deliver compliance automation services (e.g., IOSS, VAT support, GPSR).
2. Customer Support: Managing inquiries, troubleshooting issues, and providing support.
3. Legal Obligations: Complying with EU regulations, invoicing, and other legal requirements.
4. Improving Services: Analytics and feedback to enhance our services.

4. Lawful Basis for Processing

We process your data based on:

• Contractual Necessity: To perform the services you requested.
• Legal Obligations: To comply with EU VAT, product safety and regulatory laws.
• Legitimate Interest: To improve our services and maintain website security.
• Consent: Optional cookies (you can withdraw at any time).

5. Data Sharing

We only share your data when necessary:

• Service Providers: With trusted partners for payment processing, hosting, or IT support.
• Regulatory Authorities: To comply with legal requirements, such as EU VAT reporting and product safety documentation.
• Business Transfers: If we merge, sell, or restructure the company.

We ensure all partners comply with GDPR standards.

6. Data Retention

We retain your data:

• As long as necessary to provide services.
• To comply with legal obligations (e.g., tax records and safety documentation).

Upon request, we will delete or anonymise your data, unless stated otherwise within EU regulations.

7. Your Rights

You have the following rights under GDPR:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data.
• Restriction: Limit the processing of your data.
• Portability: Receive your data in a portable format.
• Object: Opt out of specific processing activities.
• Withdraw Consent: Revoke any consent you’ve provided.

To exercise your rights, contact us at info@easproject.com.

8. Data Transfers Outside the EU

We ensure any data transfers outside the EU comply with GDPR through:

• Standard Contractual Clauses (SCCs).
• Adequate data protection measures.

9. Security Measures

We take the security of your data seriously by implementing:

• Data encryption (in transit and at rest).
• Access control measures.
• Regular data audits and security reviews.

10. Cookies

For detailed information on cookies, please visit our https://easproject.com/cookie-policy-eu/ page.

Contact Us

For any GDPR-related inquiries or requests, contact us at:
Email: info@easproject.com
Address: Easy Access System Project Oü (EAS), Mustamäe tee 50, 10621, Tallinn, Estonia