GDPR & Data Protection Statement
Last updated: November 5, 2026
1. GDPR Compliance
For users in the European Union, Researck complies with the General Data Protection Regulation (GDPR). You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict processing of your data
- Data portability
- Object to processing
- Withdraw consent at any time
2. Legal Basis for Processing
We process personal data based on:
- Consent: You have explicitly consented to the processing
- Contract: Processing is necessary to fulfill a contract with you
- Legal Obligation: We are required by law to process the data
- Legitimate Interests: Processing is necessary for our legitimate business interests
- Vital Interests: Processing is necessary to protect vital interests
3. Your Rights
Under GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data (right to be forgotten)
- Restrict Processing: Limit how we use your data
- Data Portability: Receive your data in a portable format
- Object: Oppose certain types of processing
- Withdraw Consent: Withdraw previously given consent
- Automated Decisions: Not be subject to decisions based solely on automated processing that significantly affect you
- Lodge a Complaint: Complain to your local data protection authority
To exercise these rights, contact us at [email protected]. We will respond within 30 days, as required by GDPR. If your data is held in Researck by your employer, we may refer your request to them, as they control that data.
4. Data Protection Measures
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption of data in transit and at rest
- Role-based access controls and two-factor authentication
- Audit logging of user activity
- Incident response procedures
5. Data Transfers
Your data may be transferred to and processed in countries outside the EU/EEA, including India and the United States. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions. You can request a copy of these safeguards by contacting us at [email protected].
6. Data Protection Officer
For data protection inquiries, contact our Data Protection Officer at [email protected].
7. Exercising Your Rights
To exercise any of your rights, contact us at [email protected]. We will respond within 30 days. If your data is held in Researck by your employer, we may refer your request to them, as they control that data.