1. Scope
This GDPR Privacy Notice supplements our Privacy Policy and applies to individuals located in the European Economic Area (EEA), Switzerland, and the United Kingdom. It explains how Anilocus Inc. processes your personal data in accordance with the General Data Protection Regulation (GDPR) and equivalent UK legislation.
2. Data Controller
Anilocus Inc. is the data controller for personal data collected through our website and services. Our registered address is 20271 Goldenrod Lane Ste 2086, Germantown, Maryland 20876, United States.
3. Data Protection Officer
We have appointed a Data Protection Officer (DPO) who can be contacted at contact us.
4. Purposes and Legal Bases
| Processing Purpose | Legal Basis | Categories of Data |
|---|---|---|
| Service delivery and contract performance | GDPR Art. 6(1)(b) – Contract | Identity, contact, billing, project-related |
| Website analytics and improvement | GDPR Art. 6(1)(f) – Legitimate Interest | Usage data, device information, IP address |
| Marketing communications | GDPR Art. 6(1)(a) – Consent | Name, email, company, preferences |
| Legal compliance | GDPR Art. 6(1)(c) – Legal Obligation | Transaction records, communications |
| Security and fraud prevention | GDPR Art. 6(1)(f) – Legitimate Interest | Access logs, account activity, IP addresses |
5. Your GDPR Rights
As a data subject in the EEA, you have the following rights:
- Right to Access (Art. 15): Obtain confirmation of whether we process your data and request a copy
- Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data
- Right to Erasure (Art. 17): Request deletion of your data, subject to legal obligations
- Right to Restrict Processing (Art. 18): Request restriction of processing in certain circumstances
- Right to Data Portability (Art. 20): Receive your data in a structured, commonly used format
- Right to Object (Art. 21): Object to processing based on legitimate interests or direct marketing
- Rights Related to Automated Decision-Making (Art. 22): Not be subject to solely automated decisions with legal effects
6. Exercising Your Rights
To exercise your rights, contact us. We will respond within one month. We may request proof of identity and additional information to process your request.
7. International Transfers
Your personal data may be transferred to and processed in the United States. We ensure adequate protection through Standard Contractual Clauses adopted by the European Commission and Data Processing Agreements with all service providers.
8. Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected. See our Data Retention Policy for details.
9. Consent Withdrawal
Where processing is based on consent, you may withdraw consent at any time. To withdraw consent, contact us.
10. Supervisory Authority
You have the right to lodge a complaint with your local data protection authority. Contact details are available at edpb.europa.eu.