1. Our GDPR approach
This page explains Europe Digital's current approach to GDPR and data protection.
Europe Digital considers applicable data protection requirements when designing and operating its website, products and business processes.
Where the GDPR applies to a processing activity, Europe Digital assesses and addresses the applicable requirements. Certain GDPR obligations depend on the nature, scope, context and purposes of the processing.
The following principles inform that approach:
- Transparency;
- Purpose limitation;
- Data minimisation;
- Accuracy;
- Appropriate retention;
- Security;
- Accountability; and
- Respect for individual rights.
This page does not claim that every processing activity has been independently audited or certified.
2. When GDPR may apply
The GDPR can apply to organisations established in the European Union and, in certain circumstances, to organisations established outside the European Union when they offer goods or services to individuals in the EU or monitor the behaviour of individuals in the EU.
Europe Digital is established in India. Whether the GDPR applies is assessed in relation to the relevant processing activity.
This page does not state that every Europe Digital processing activity is subject to the GDPR.
Europe Digital's approach reflects the territorial-scope principles described in Article 3 of the GDPR and related EDPB guidance.
3. Roles in data processing
Depending on the processing activity, Europe Digital may act as a data controller, a data processor, or potentially have another role recognised under applicable data protection law.
Where Europe Digital determines the purposes and means of processing personal information, it may act as a controller.
Where Europe Digital processes personal information on documented instructions from a business customer, it may act as a processor.
Roles depend on the specific processing activity and contractual arrangement. This page does not declare Europe Digital to be a processor for all product data, including Password Manager data, or a controller for all product data.
4. Personal information we process
The categories of personal information processed depend on how a person interacts with Europe Digital. Those categories are described in more detail in the Privacy Policy and may include:
- Contact information;
- Support information;
- Communication information;
- Device or technical information;
- Licensing and activation information;
- Website analytics information where consent or another lawful basis applies; and
- Product-related information where applicable.
The Europe Digital marketing website does not currently operate a Europe Digital user account system. Visitors may submit contact or support information through published contact channels.
Certain Europe Digital products may process personal information separately from the Europe Digital website. Product-specific processing is described in the applicable product documentation and Privacy Policy.
5. Your data protection rights
Where the GDPR applies, individuals may have rights including:
- Right of access;
- Right to rectification;
- Right to erasure;
- Right to restriction of processing;
- Right to data portability;
- Right to object;
- Rights relating to consent; and
- Rights concerning automated decision-making where applicable.
These rights are subject to the conditions and exceptions provided by applicable law. Not every right applies in every situation.
6. How to exercise your rights
To make a privacy or data protection request, contact us at:
Please provide enough information for Europe Digital to understand the request. Where reasonably necessary, Europe Digital may request information to verify identity and protect personal information from unauthorised disclosure.
Where the GDPR applies, Europe Digital will handle applicable rights requests within the periods required by law.
7. Privacy and transparency
The formal Privacy Policy contains more detailed information about categories of personal information, purposes, legal bases, cookies, analytics, third-party services, international transfers, retention, privacy rights, disclosures, product-specific processing and contact information.
This page is public data-protection information. It does not replace the Privacy Policy.
8. Data security
Europe Digital uses appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
This page does not describe a specific security architecture, encryption algorithm or certification.
9. Data retention
Europe Digital retains personal information for periods determined by the purpose of processing, applicable legal requirements, operational needs and other relevant circumstances.
Where specific retention information is available for a processing activity, it is described in the applicable Privacy Policy or other product documentation.
10. International data transfers
Europe Digital is based in India, and personal information may be processed in countries where Europe Digital or its service providers operate.
Where applicable data protection law requires safeguards for international transfers, Europe Digital assesses and applies appropriate mechanisms based on the relevant processing arrangement.
This page does not state that a specific transfer safeguard, adequacy decision, country list or data-residency arrangement has already been adopted.
11. Business customers and processor relationships
Europe Digital may process personal information on behalf of business customers when providing products or services.
Where Europe Digital acts as a processor, the applicable contractual relationship should define the subject matter, duration, nature and purposes of processing, the types of personal information involved, categories of individuals, and the respective responsibilities of the parties.
Not every business customer relationship is a processor relationship. Processor obligations may be addressed through contractual terms and, where applicable, a Data Processing Agreement.
12. Data Processing Agreements
Where required by applicable data protection law, Europe Digital may enter into appropriate data processing terms with business customers.
Our Data Processing Agreement documentation is currently under review and is not published on this website.
- Data Processing Agreement — document to be published
13. Data protection governance
Europe Digital uses internal processes to assess and document relevant processing activities. Those processes are intended to support:
- privacy reviews;
- data-flow identification;
- vendor and service-provider assessment;
- rights-request handling;
- security and privacy incident handling;
- retention considerations; and
- legal-document updates.
14. EU representative
Europe Digital is established in India. Whether an EU representative is required depends on the application of Article 27 of the GDPR to the relevant processing activities and any applicable exception.
Europe Digital has not identified an EU representative in this public document.
Any applicable representative information will be published or otherwise made available if and when such an appointment is required and completed.
15. Data Protection Officer
Europe Digital has not designated a Data Protection Officer for the purposes of this public notice.
Whether a formal Data Protection Officer appointment is required depends on the nature and scale of the relevant processing activities and the requirements of applicable law.
Privacy and data protection enquiries:
16. Personal data breach response
Europe Digital maintains processes for identifying, assessing and responding to information-security and personal-data incidents.
Where applicable law requires notification to a supervisory authority or affected individuals, Europe Digital will assess and respond according to the applicable legal requirements.
17. Records and accountability
Europe Digital uses internal documentation and review processes to understand relevant processing activities and responsibilities.
This page does not claim that a complete public processing register exists.
Internal records may include information about purposes, categories of personal information, data subjects, recipients, international transfers, retention considerations and security measures, as appropriate to the relevant processing activity.
19. Contact information
For questions about this page or Europe Digital's data protection approach, contact:
- Address
Europe Digital
Building No. NO-52
TYPE A SECTOR 24
ROHINI
New Delhi
North Delhi
Delhi – 110085
India