GDPR Compliance

1. Our Commitment

Dustin's Designer Den is committed to protecting the privacy and rights of individuals in the European Economic Area (EEA) and complying with the General Data Protection Regulation (GDPR).

2. Legal Basis for Processing

We process your personal data based on:

• Contract: Processing necessary to provide our services to you
• Consent: When you give explicit consent (e.g., marketing emails)
• Legitimate Interest: For service improvement and fraud prevention
• Legal Obligation: When required by law (e.g., tax records)

3. Your Rights Under GDPR

As an EEA resident, you have the following rights:

4. Data Protection Measures

We protect your data through:

• Encryption: SSL/TLS for data in transit, AES for data at rest
• Access Controls: Limited employee access on a need-to-know basis
• Regular Audits: Periodic security assessments
• Data Minimization: We only collect necessary data
• Secure Infrastructure: Cloud hosting with enterprise-grade security
• Breach Notification: We will notify you within 72 hours of any breach

5. International Data Transfers

Your data may be transferred to and processed in countries outside the EEA. When we do this, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the EU Commission
• Transfers to countries with adequacy decisions
• Your explicit consent when required

6. Data Retention

7. How to Exercise Your Rights

To exercise any of your GDPR rights:

1. Email us at gdpr@dustinsdesignerden.com
2. Include your full name and account email address
3. Specify which right you wish to exercise
4. Provide any additional relevant details

We will respond within 30 days of receiving your request.

8. Data Protection Officer

For GDPR-related matters, you can contact our Data Protection Officer:

9. Supervisory Authority

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. Find your supervisory authority at: European Data Protection Board