GDPR Compliance

1. Data Controller

SwiftShift acts as the data controller for personal information collected through our platform.

2. Legal Basis for Processing

We process personal data under the following legal bases:

• Contract fulfillment
• Legal obligations
• Legitimate interests
• Consent

3. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent

4. Data Transfers

When we transfer data outside the EEA, we ensure appropriate safeguards are in place through:

• Standard contractual clauses
• Adequacy decisions
• Binding corporate rules

5. Data Retention

We retain personal data only for as long as necessary to:

• Provide our services
• Comply with legal obligations
• Resolve disputes
• Enforce agreements

6. Data Protection Officer

Our DPO can be contacted at dpo@swiftshift.com

7. Complaints

You have the right to lodge a complaint with your local supervisory authority.