GDPR Compliance

Futuracom is committed to protecting the privacy and rights of individuals in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and how you can exercise your rights.

We process personal data based on the following lawful bases:

Contract Performance

We process data necessary to provide our services as outlined in our Terms of Service. This includes:

• Account creation and management
• Message processing and delivery
• Customer support
• Billing and payment processing

Legitimate Interests

We process data for our legitimate business interests, including:

• Service improvement and development
• Security and fraud prevention
• Analytics and usage statistics
• Marketing communications (with opt-out options)

Legal Obligations

We process data as required by law, such as:

• Tax and financial reporting
• Law enforcement requests
• Regulatory compliance

Consent

For certain processing activities, we rely on your explicit consent, including:

• Marketing emails and communications
• Non-essential cookies
• Optional data sharing with partners

As a data subject, you have the following rights:

To exercise any of your rights, you can:

• Self-Service: Access and update your data through your account settings
• Email: Contact our Data Protection Officer at [email protected]
• Written Request: Send a request to our registered address

We will respond to your request within 30 days. In complex cases, we may extend this period by an additional 60 days with prior notice.

When Futuracom acts as a data processor on your behalf, we offer a Data Processing Agreement (DPA) that includes:

• Standard Contractual Clauses for international transfers
• Details of sub-processors we use
• Security measures we implement
• Breach notification procedures
• Assistance with data subject requests

To request a DPA, please contact [email protected].

When we transfer personal data outside the European Economic Area (EEA), we ensure adequate protection through:

• Adequacy Decisions: Transfers to countries recognized by the EU as providing adequate protection
• Standard Contractual Clauses: EU-approved contractual safeguards
• Binding Corporate Rules: Where applicable with our group companies

We use the following categories of sub-processors:

• Cloud Infrastructure: For hosting and data storage
• Payment Processing: For billing and payments
• Email Services: For transactional and marketing emails
• Analytics: For service improvement
• AI Providers: For AI-powered features

A detailed list of sub-processors is available upon request.

We conduct Data Protection Impact Assessments (DPIAs) for:

• New products or features involving personal data
• Changes to data processing activities
• High-risk processing operations
• Automated decision-making processes

In the event of a personal data breach:

• We will notify the relevant supervisory authority within 72 hours
• We will notify affected individuals without undue delay when there is high risk
• We maintain records of all data breaches

Our Data Protection Officer can be contacted at:

• Email: [email protected]
• Response Time: Within 5 business days

You have the right to lodge a complaint with a supervisory authority. If you are in the EU, you can contact your local Data Protection Authority or the lead supervisory authority where Futuracom’s EU representative is established.

For any questions about GDPR compliance or data protection, please contact:

• Data Protection Officer: [email protected]
• Privacy Team: [email protected]