GDPR Compliance

Expathia is fully committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR).

Your Rights Under GDPR

Right to Access

You can request a copy of all personal data we hold about you.

Right to Erasure

You can request deletion of your personal data under certain conditions.

Right to Portability

You can receive your data in a structured, machine-readable format.

Right to Restriction

You can request restriction of processing of your personal data.

Data Controller

Expathia Sp. z o.o. is the data controller for personal data collected through our platform. Our registered address is PPNT Gdynia, Al. Zwycięstwa 96/98, 81-451 Gdynia, Poland.

Legal Basis for Processing

We process your personal data based on: (1) your consent, (2) performance of a contract, (3) compliance with legal obligations, and (4) our legitimate interests in providing and improving our services.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Account data is retained for the duration of your account plus 3 years.

International Transfers

Your data is primarily stored within the European Economic Area (EEA). Any transfers outside the EEA are protected by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

Exercise Your Rights

To exercise any of your GDPR rights, please contact our Data Protection Officer:

dpo@expathia.com

We will respond to your request within 30 days.