1. Lawful Bases
- Legitimate interests for operating, securing, and improving the website.
- Consent for non-essential cookies and certain analytics where required.
- Legal obligation for handling lawful requests, compliance records, and security incidents.
2. Rights
- Access, correction, erasure, restriction, objection, and portability where applicable.
- Withdrawal of consent at any time for consent-based processing.
- The right to complain to a supervisory authority if you believe your rights were not handled correctly.
3. Transfers and Retention
Data may be processed by providers located outside the EEA. Where this occurs, appropriate contractual or technical safeguards may be used as required by applicable law. Retention is limited to operational, legal, fraud-prevention, and security needs.
