About GDPR
The General Data Protection Regulation (GDPR) is a European Union (EU) data protection law that came into effect on May 25, 2018. It provides individuals in the EU, EEA, and UK with greater control over their personal data and requires organizations to be transparent about how they collect, use, and protect personal information.
At Ecdentistry, we are committed to protecting your privacy and ensuring compliance with the GDPR. This page explains your rights under the GDPR and how we handle your personal data in accordance with these regulations.
This GDPR Compliance page should be read in conjunction with our Privacy Policy, Cookie Policy, and Terms of Use.
Your Rights Under GDPR
If you are located in the European Union (EU), European Economic Area (EEA), or United Kingdom (UK), you have the following rights regarding your personal data:
1. Right to Access
You have the right to request access to your personal data that we hold. This includes the right to know what personal data we process, why we process it, and who we share it with. You can request a copy of your personal data by contacting us at care@ecdentistry.in.
2. Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data. You can update your information directly through your account settings or by contacting us.
3. Right to Erasure ("Right to be Forgotten")
You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw your consent. However, we may retain certain information as required by law or for legitimate business purposes.
4. Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
5. Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
6. Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes or when processing is based on legitimate interests. You can opt-out of marketing communications at any time.
7. Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
8. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates the GDPR. You can find your local supervisory authority at edpb.europa.eu.
How We Process Your Data
Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR:
- Consent: When you provide explicit consent for specific processing activities (e.g., marketing communications, cookies)
- Contract Performance: To fulfill our contractual obligations to provide educational services
- Legitimate Interests: For business operations, security, fraud prevention, and service improvement
- Legal Obligations: To comply with applicable laws and regulations
Data We Collect
We collect and process the following categories of personal data:
- Identity data (name, email address, phone number)
- Account data (username, password, profile information)
- Usage data (how you interact with our platform)
- Technical data (IP address, device information, browser type)
- Marketing and communications data (preferences, consent records)
- Payment data (processed securely through third-party payment processors)
Third-Party Services and Data Transfers
We use third-party services to provide and improve our platform. These services may process your personal data on our behalf. We ensure that all third-party processors comply with GDPR requirements through appropriate data processing agreements.
Amazon Web Services (AWS)
We use AWS for cloud hosting, data storage, and content delivery. Your data is stored on AWS servers, which may be located in India or other regions. AWS is GDPR compliant and provides appropriate safeguards for data transfers.
Data Processing: Hosting, storage, content delivery, performance monitoring
Location: Primarily India, with potential transfers to other AWS regions
Safeguards: AWS Data Processing Addendum, Standard Contractual Clauses (SCCs)
Google Analytics
We use Google Analytics to analyze website traffic and user behavior. Google Analytics processes data in accordance with GDPR requirements.
Data Processing: Website analytics, user behavior tracking
Location: United States (with appropriate safeguards)
Safeguards: Google's Data Processing Amendment, Standard Contractual Clauses
Opt-out: You can opt-out using the Google Analytics Opt-out Browser Add-on
Facebook Meta Pixel
We use Facebook Meta Pixel for advertising and analytics. Meta processes data in accordance with GDPR and provides appropriate safeguards.
Data Processing: Advertising, conversion tracking, audience building
Location: United States, Ireland (with appropriate safeguards)
Safeguards: Meta's Data Processing Terms, Standard Contractual Clauses
Opt-out: Manage preferences in your Facebook Ad Settings
Google Ads
We use Google Ads for online advertising. Google processes advertising data in accordance with GDPR requirements.
Data Processing: Online advertising, conversion tracking, remarketing
Location: United States (with appropriate safeguards)
Safeguards: Google's Data Processing Amendment, Standard Contractual Clauses
Opt-out: Manage preferences at Google Ad Settings
International Data Transfers
When we transfer personal data outside the EU/EEA/UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or adequacy decisions. All our third-party processors are required to maintain GDPR-compliant data protection standards.
Data Security and Retention
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication mechanisms
- Secure hosting infrastructure through AWS
- Regular backups and disaster recovery procedures
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we securely delete or anonymize it.
Exercising Your Rights
To exercise any of your GDPR rights, please contact us using the information below. We will respond to your request within one month (or inform you if we need more time). We may need to verify your identity before processing your request.
Email: care@ecdentistry.in
Subject Line: "GDPR Request - [Your Request Type]"
Address: EDMODE ED TECH PRIVATE LIMITED
160/10, Kavumpurathu House, Muthalakkodam, Thodupuzha, Idukki, Kerala, 685605, India
Please include the following information in your request:
- Your full name and email address associated with your account
- Description of the right you wish to exercise
- Any additional information that may help us process your request
Data Protection Officer
While we are not currently required to appoint a Data Protection Officer (DPO) under GDPR, we have designated a privacy contact person to handle data protection matters. For any GDPR-related inquiries, please contact us at care@ecdentistry.in.
Updates to This Policy
We may update this GDPR Compliance page from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date.
We encourage you to review this page periodically to stay informed about your rights and our data protection practices.
Contact Us
If you have any questions, concerns, or requests regarding GDPR compliance or your personal data, please contact us:
Email: care@ecdentistry.in
Address: EDMODE ED TECH PRIVATE LIMITED
160/10, Kavumpurathu House, Muthalakkodam, Thodupuzha, Idukki, Kerala, 685605, India
Phone: +91 90740 84041