GDPR Compliance

GDPR Compliance

ClearSite Systems is committed to protecting your personal data and respecting your privacy rights under the European Union's General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and your rights as a data subject.

Last Updated: January 2024

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018, strengthening and unifying data protection for individuals within the European Union (EU) and the European Economic Area (EEA). At ClearSite Systems, we take data protection seriously and have implemented appropriate technical and organizational measures to ensure full compliance with GDPR requirements. We process personal data lawfully, fairly, and transparently — and only for specified, explicit, and legitimate purposes. Whether you are a client, website visitor, or business partner, your privacy rights are respected and protected at every stage of our engagement.

Our Commitment to Data Protection

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It strengthens and unifies data protection for individuals within the European Union (EU) and the European Economic Area (EEA).

At ClearSite Systems, we take data protection seriously and have implemented appropriate technical and organizational measures to ensure compliance with GDPR requirements. We process personal data lawfully, fairly, and transparently, and only for specified, explicit, and legitimate purposes.

Data Controller Information

Company Name

ClearSite Systems

Contact Information

For any GDPR-related inquiries or to exercise your data protection rights, please contact us at:

  • Email: admin@clearsitesystems.com
  • Phone: Available on our Contact Page

Lawful Basis for Processing Personal Data

We process personal data only when we have a lawful basis to do so under GDPR Article 6. The lawful bases we rely on include:

1. Consent

You have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications or using cookies for analytics.

2. Contract Performance

Processing is necessary for the performance of a contract with you, such as providing web design services, SEO optimization, or other digital marketing solutions.

3. Legal Obligation

Processing is necessary to comply with legal obligations, such as tax reporting, record-keeping requirements, or responding to lawful requests from authorities.

4. Legitimate Interests

Processing is necessary for our legitimate interests or those of a third party, such as fraud prevention, network security, or improving our services, provided your rights do not override these interests.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request copies of your personal data and information about how we process it.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances (the "right to be forgotten").

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain conditions.

Right to Data Portability

You have the right to request transfer of your personal data to another organization or directly to you in a structured, commonly used format.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us using the following methods:

Email:

Send your request to admin@clearsitesystems.com with the subject line "GDPR Data Subject Request"

Written Request:

Submit a request through our Contact Form

Response Time: We will respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months and will inform you of any such extension.

Data Processing Activities

Service Delivery

Processing necessary to provide web design, SEO, blog management, and digital marketing services.

Data Types: Name, email, phone number, business information, project requirements

Retention: Duration of business relationship plus 7 years for legal compliance

Marketing Communications

Sending newsletters, promotional materials, and service updates with your consent.

Data Types: Name, email address, communication preferences

Retention: Until consent is withdrawn or 2 years of inactivity

Website Analytics

Analyzing website usage to improve user experience and service quality.

Data Types: IP address, browser type, pages visited, time spent, referring URLs

Retention: 26 months (Google Analytics default)

Customer Support

Responding to inquiries, providing technical support, and resolving issues.

Data Types: Name, email, phone number, support ticket details, communication history

Retention: 3 years after last interaction

Third-Party Data Processors

We work with trusted third-party service providers who process personal data on our behalf. All processors are carefully selected and bound by data processing agreements that ensure GDPR compliance:

Google Analytics

Website analytics and performance tracking

Privacy Policy
Supabase

Database and backend services

Privacy Policy
Email Service Providers

Marketing and transactional email delivery

GDPR Compliant

Right to Lodge a Complaint

If you believe that our processing of your personal data violates GDPR or other data protection laws, you have the right to lodge a complaint with a supervisory authority, particularly in the EU member state where you reside, work, or where the alleged infringement occurred.

European Data Protection Board - Supervisory Authorities

Questions About GDPR Compliance?

If you have questions about our GDPR compliance practices, want to exercise your data protection rights, or need assistance with a privacy matter, we're here to help.