Our GDPR commitment

GoodOff is committed to protecting the rights of individuals in line with the General Data Protection Regulation (GDPR). We ensure that your personal data is:

• Processed lawfully, fairly, and transparently
• Collected for specified, explicit, and legitimate purposes
• Adequate, relevant, and limited to what is necessary
• Accurate and kept up to date
• Kept in a form that permits identification for no longer than necessary
• Processed securely with appropriate technical measures

Your rights under GDPR

If you use GoodOff from the European Economic Area, the UK or Switzerland, you have the following rights:

• Right to access: request a copy of your personal data
• Right to rectification: correct inaccurate personal data
• Right to erasure: request deletion of your data
• Right to restrict processing: limit how we use your data
• Right to data portability: receive your data in a portable format
• Right to object: object to certain types of processing
• Rights related to automated decision making: not be subject to decisions based solely on automated processing, and to have a person review an automated decision
• Right to withdraw consent: at any time, without affecting processing before you withdrew
• Right to complain: to the data protection authority where you live or work, or in the UK to the Information Commissioner's Office

Legal basis for processing

We process your personal data based on the following legal grounds. Our privacy policy at https://goodoff.co/privacy lists the legal basis for each use.

• Consent: you have given clear consent for processing
• Contract: processing is necessary for our contract with you
• Legal obligation: processing is necessary for compliance with law
• Legitimate interests: processing is necessary for our legitimate interests

Contact for data protection

Nexobe, Inc., 1839 Heather St, Bolingbrook, IL 60490, United States, is the controller of your personal data. For any GDPR question or request, email privacy@goodoff.co. We respond within one month; for complex requests we may extend that by up to two more months, and we will tell you why.

• Email: privacy@goodoff.co

International data transfers

We are based in the United States, and our main infrastructure is there. When our service providers process your data outside the EEA, the UK or Switzerland, the transfers rely on:

• The European Commission's Standard Contractual Clauses, with the UK Addendum and the Swiss adjustments where needed, which are part of our providers' data processing terms
• The EU–US Data Privacy Framework and its UK and Swiss extensions, where a provider is certified under them