GDPR Compliance
CoCarer is fully compliant with the General Data Protection Regulation (GDPR), ensuring your data rights are protected.
Our Commitment to GDPR
As a data controller and processor, CoCarer takes GDPR compliance seriously. We've implemented comprehensive measures to protect the personal data of EU residents and ensure their rights are respected.
Your Rights Under GDPR
Right to Access
Request a copy of your personal data we hold
Right to Rectification
Correct any inaccurate personal data
Right to Erasure
Request deletion of your personal data
Right to Data Portability
Export your data in a portable format
How We Ensure GDPR Compliance
1. Lawful Basis for Processing
We only process personal data when we have a lawful basis, such as consent, contract fulfillment, or legitimate interests. You can withdraw consent at any time through your account settings.
2. Data Minimization
We only collect and process data that is necessary for providing our services. We regularly review our data collection practices to ensure we're not collecting excessive information.
3. Privacy by Design
Privacy considerations are built into our product development process from the ground up. We conduct privacy impact assessments for new features and regularly update our practices.
4. Data Security
We implement appropriate technical and organizational measures to ensure data security, including encryption, access controls, and regular security audits.
5. Third-Party Processing
We only work with third-party processors who demonstrate GDPR compliance and sign data processing agreements that protect your rights.
Data Protection Officer
Our Data Protection Officer ensures we maintain the highest standards of data protection and can assist with any GDPR-related inquiries.
Contact our DPO: dpo@co-carer.comHow to Exercise Your Rights
To exercise any of your GDPR rights, you can:
- Access your data directly through your account settings
- Contact our support team at privacy@co-carer.com
- Submit a formal request through our privacy portal
We will respond to all requests within 30 days as required by GDPR.