GDPR Compliance

Our Commitment to GDPR

FiveXFast is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). We have implemented comprehensive measures to ensure your data is processed lawfully, fairly, and transparently.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access (Article 15)

You have the right to request access to your personal data and information about how we process it, including the purposes, categories of data, and recipients.

Right to Rectification (Article 16)

You can request correction of inaccurate personal data and completion of incomplete data without undue delay.

Right to Erasure (Article 17)

You can request deletion of your personal data when it's no longer necessary for the original purpose or when you withdraw consent.

Right to Restrict Processing (Article 18)

You can request limitation of data processing in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability (Article 20)

You can request your data in a structured, commonly used, and machine-readable format and have it transmitted to another controller.

Right to Object (Article 21)

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent (Article 6(1)(a)): When you have given clear consent
• Contract (Article 6(1)(b)): When processing is necessary for contract performance
• Legal Obligation (Article 6(1)(c)): When required by law
• Legitimate Interests (Article 6(1)(f)): When necessary for our legitimate business interests

Data Protection Measures

We implement appropriate technical and organizational measures including:

• Encryption of personal data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication systems
• Staff training on data protection principles
• Data breach response procedures

International Data Transfers

When we transfer personal data outside the EEA, we ensure adequate protection through:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules (BCRs)
• Certification schemes

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. Our retention periods are based on business needs and legal requirements.

Data Protection Officer

For any GDPR-related inquiries or to exercise your rights, please contact our Data Protection Officer at dpo@fivexfast.com

Exercising Your Rights

To exercise any of your rights under GDPR:

• Email us at privacy@fivexfast.com with your request
• Include sufficient information to verify your identity
• Specify which right you wish to exercise
• We will respond within 30 days (extendable to 90 days for complex requests)

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).