GDPR Compliance
Your data protection rights under the General Data Protection Regulation
What is GDPR?
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It strengthens and unifies data protection for individuals within the European Union (EU) and addresses the export of personal data outside the EU.
Our Commitment to GDPR
At Opher, we are committed to protecting your personal data and respecting your privacy rights. We have implemented appropriate technical and organizational measures to ensure compliance with GDPR requirements:
- • Data protection by design and by default
- • Regular privacy impact assessments
- • Secure data processing and storage
- • Staff training on data protection
- • Clear data retention policies
Your Rights Under GDPR
Right to Access
You have the right to request access to your personal data and information about how we process it.
Right to Rectification
You can request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
You can request deletion of your personal data under certain circumstances.
Right to Data Portability
You can request your data in a structured, machine-readable format to transfer to another service.
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us using the information below. We will respond to your request within 30 days as required by law.
Data Protection Officer:
Email: dpo@opher.co.za
Subject: GDPR Data Subject Request
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- • Consent: When you have given clear consent for specific processing activities
- • Contract: When processing is necessary for the performance of a contract
- • Legal obligation: When we must process data to comply with legal requirements
- • Legitimate interests: When processing is necessary for our legitimate business interests
Complaints
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local data protection authority. However, we encourage you to contact us first so we can address your concerns directly.