GDPR Compliance Information

Last updated: June 4, 2025

Anthromorphe LLC complies with the General Data Protection Regulation (GDPR) and provides comprehensive protection for EU residents' personal data and privacy rights.

✅ GDPR COMPLIANCE CONFIRMED

FULL COMPLIANCE: Anthromorphe LLC meets GDPR requirements for data protection, user rights, and lawful processing.

DATA CONTROLLER STATUS: We act as data controller for contact form data and implement appropriate technical and organizational measures.

EU RESIDENT RIGHTS: We provide comprehensive support for all GDPR data subject rights through automated and manual processes.

PRIVACY BY DESIGN: Our systems are built with privacy protection as a core principle, not an afterthought.

TRANSPARENT PROCESSING: We clearly communicate our data practices and provide easy access to privacy information.

1. What is GDPR? 🛡️

General Data Protection Regulation

A comprehensive EU data protection law that came into effect on May 25, 2018, applying to all companies processing personal data of EU individuals, regardless of company location.

The General Data Protection Regulation (GDPR) is the EU's data protection law that applies to any organization that processes personal data of EU residents, regardless of where the organization is located. As a US company that may serve EU customers, we fully comply with GDPR requirements.

✅ Anthromorphe LLC complies with GDPR as a US-based company that processes EU residents' personal data through our contact forms and website services.

Our GDPR Compliance Status

Company: Anthromorphe LLC (Los Angeles, California, USA)

Data Controller: ✅ Compliant data controller for contact form data

Data Protection Contact: ✅ privacy@anthromorphe.com

GDPR Compliance Framework: ✅ Implemented and maintained

Data Processing Records: ✅ Maintained per GDPR Article 30

Privacy Impact Assessments: ✅ Conducted for data processing activities

Technical & Organizational Measures: ✅ Encryption, access controls, data minimization

Compliance Note: Our data processing practices meet GDPR requirements through privacy by design, minimal data collection, and comprehensive rights support.

2. Your GDPR Rights (Fully Supported) ⚖️

✅ Under GDPR, EU residents have specific data protection rights. We fully support and guarantee the fulfillment of these rights through both automated and manual processes.

✅ Full GDPR Support: Our systems and procedures are designed to meet GDPR requirements for data subject rights fulfillment, including verification, processing times, and comprehensive data management.

Right to Information 📋

Right to know what personal data we collect, how we use it, and who we share it with.

✅ Fully Supported: Comprehensive privacy notices and data processing information provided

Right to Access 📥

Request a copy of all personal data we hold about you.

✅ Automated System: Secure verification and prompt delivery within 30 days, usually faster

Right to Rectification ✏️

Ask us to correct any inaccurate or incomplete personal data.

✅ Secure Process: Identity verification and systematic data correction procedures

Right to Erasure 🗑️

Request deletion of your personal data under certain circumstances.

✅ Complete Erasure: Secure deletion with verification, respects retention preferences

Right to Restrict ⏸️

Ask us to limit how we process your personal data in certain situations.

✅ Technical Controls: System-level processing restrictions and compliance tracking

Right to Portability 📦

Obtain your personal data in a machine-readable format for transfer.

✅ Structured Export: JSON/CSV data export capabilities with complete data sets

GDPR Rights Exercise - Full Support

📧 How to Submit

• Automated Data Rights Form
• Email: privacy@anthromorphe.com
• Secure identity verification process
• Encrypted communication options available

⏱️ Processing Standards

• Automated processing when possible
• Response within 72 hours
• Completion within 30 days (usually faster)
• Full verification and completeness checks

✅ GDPR Compliance Guaranteed: Our rights handling procedures meet GDPR requirements for verification, processing times, and systematic data management. EU residents' rights are fully protected.

3. Data Protection Implementation 🔐

✅ We implement comprehensive technical and organizational measures to meet GDPR requirements for data protection:

Technical Measures ⚙️

Encryption at rest and in transit (AES-256, TLS 1.3)

Role-based access controls (Supabase RLS)

Automated data deletion based on retention preferences

Secure database hosting with backup encryption

Network security and firewall protection

Regular security monitoring and updates

Privacy by design development practices

Data minimization in all processing activities

Organizational Measures 👥

Documented data processing procedures

Privacy impact assessments for new processing

Data protection by design and by default

Regular GDPR compliance training and updates

Incident response procedures for data breaches

Data processing records per Article 30

Clear data retention and deletion policies

Vendor management with data processing agreements

Lawful Bases for Processing (GDPR Article 6)

Contact Form Data:

• Consent (Art. 6(1)(a)): Clear consent for processing
• Legitimate Interest (Art. 6(1)(f)): Responding to inquiries
• Contract (Art. 6(1)(b)): Service delivery preparation

Website Analytics:

• Legitimate Interest: Website improvement
• Anonymized Data: No personal data in analytics
• Minimal Collection: Only aggregate statistics

4. GDPR Contact & Support 📞

📧 For GDPR-related questions and data subject rights requests (comprehensive support provided):

GDPR Data Protection Contact

Full GDPR compliance support

Primary Contact

privacy@anthromorphe.com

Response Time

Within 72 hours

Processing

Within 30 days

✅ Comprehensive GDPR Support

What We Provide:

• GDPR-compliant data subject rights fulfillment
• Secure and encrypted communication channels
• Guaranteed response within GDPR timeframes
• Professional data protection support
• Complete compliance with EU privacy law
• Transparent data processing information

Our Capabilities:

• Automated data subject rights processing
• Comprehensive data mapping and inventory
• Identity verification and security measures
• Data retention and deletion management
• Incident response and breach notification
• Ongoing GDPR compliance monitoring

✅ EU Residents: Your GDPR rights are fully protected and supported. We provide comprehensive data protection services that meet or exceed EU privacy law requirements.

EU Data Protection Authority Information

While we are committed to resolving any privacy concerns directly, EU residents have the right to lodge complaints with their local Data Protection Authority if needed:

How to Find Your DPA:

Visit: edpb.europa.eu/about-edpb/about-edpb/members

Supervisory Authority Rights:

Lodge complaints about data processing practices

Our Commitment: We work proactively to address any concerns and maintain positive relationships with data protection authorities.

✅ GDPR COMPLIANCE CONFIRMED

Last Updated: June 4, 2025

This GDPR compliance statement reflects our current comprehensive compliance with the General Data Protection Regulation. We guarantee GDPR protection for EU residents and maintain the highest privacy standards.

✅ EU USERS PROTECTED: We fully comply with GDPR. Your privacy rights under EU law are guaranteed and supported through our comprehensive data protection framework.