As of May 25th, 2018 the new General Data Protection Regulation is enforced. It replaces the old, outdated 1995 Data Protection Directive. The GDPR will, unlike the old directive, not require national governments to pass any legislation. This means that the GDPR will be binding and applicable in itself.
First of all, no worries. By signing a contract with us you also sign to agree with our terms and conditions. In that document, we have an annex that outlines how exactly we comply with the GDPR. It states the way we process, store and handle your data in general.
Now we know, that annex is a lot of text to read. So let's summarise. We handle all your personal data that you store within Starred or that you send (via an integration) to Starred. If you ever decide to cancel your contract with us we keep your data for 30 (calendar) days. After that, we delete your account including all the data that was stored within your account. If you want data to be deleted earlier, you can do so by managing the Data Retention Period with the Privacy Settings.
For storing and handling your data we work with a third party called Amazon Web Services (AWS). AWS host their services in Europe and comply with the GDPR, which you can read about here.
If you have any other questions, get in touch with us and we'll help you out!
Updated about 1 year ago