GDPR Compliance Policy

01Introduction

This policy outlines:

• What personal data we collect from EU/EEA visitors and clients
• How we process, use, and securely store it
• Your statutory rights under GDPR
• How to contact our designated Data Protection Officer (DPO) for data requests

CodeBitel® is committed to privacy, ethical data practices, and strict compliance with global standards.

02Legal Basis for Processing (GDPR Article 6)

We process personal data based on one or more established legal grounds:

• Consent: Explicit permission given by the user (e.g. newsletter signups, cookie consent).
• Performance of a Contract: Processing necessary to deliver web development, hosting, or consulting agreements.
• Legitimate Interests: Necessary for fraud prevention, server infrastructure security, and service optimization.
• Legal Obligations: Compliance with statutory tax, invoicing, and corporate reporting mandates.

You may withdraw your consent at any time by notifying our compliance team.

03Personal Data We Collect

Depending on your interaction with CodeBitel®, we may collect the following categories of data:

Identity Data

• Full name
• Company name and designation

Contact Data

• Email address
• Telephone and WhatsApp contact number
• Billing address (where applicable)

Technical Data

• Internet Protocol (IP) address
• Device type, screen resolution, and operating system
• Browser type and version
• Interaction logs, time spent on pages, and referring URLs

Service Data

• Project scope, technical specifications, and documents shared voluntarily
• Administrative credentials provided for integration or server configuration work

Financial Data

• Payment confirmations and transaction IDs processed through secure third-party PCI-DSS compliant gateways

We do not store full credit or debit card details on our servers.

04How We Use Your Data

Personal data is processed strictly to:

• Deliver, build, configure, and maintain customized web solutions
• Communicate project milestones, technical support, and critical service notifications
• Generate official tax invoices and manage account records
• Enhance website performance, user experience, and server reliability
• Maintain cyber defense, prevent unauthorized intrusion, and detect fraudulent activity
• Comply with applicable legal, fiscal, and regulatory obligations

We never sell, rent, or monetize your personal data.

05Data Storage & Security

We implement robust, GDPR-aligned security protocols, including:

• High-grade 256-bit SSL/TLS encryption for all data in transit
• Encrypted disk volumes and secure remote backups
• Multi-layer firewalls, DDoS mitigation, and intrusion prevention
• Zero-Trust architecture and strict role-based access control (RBAC)
• Periodic internal vulnerability audits and penetration tests

Data is retained only as long as necessary for operational fulfillment, contract execution, or statutory legal requirements.

06International Data Transfers (GDPR Chapter V)

Since CodeBitel® is registered in India, data of EU/EEA citizens may be transferred and processed outside the European Economic Area.

To ensure rigorous GDPR compliance during international transfers:

• We ensure all international data flows follow adequate protection measures.
• Third-party providers we use (cloud hosts, email gateways, analytics) maintain verified GDPR compliance.
• We execute Standard Contractual Clauses (SCCs) and data processing agreements where required by law.

07Sharing of Data

We may share relevant data subsets strictly with authorized third parties:

• Enterprise cloud hosting and infrastructure partners
• Transactional email and communication gateways
• Regulated payment gateways for processing service fees
• Law enforcement or judicial authorities when legally mandated under court orders

All third parties are bound by enforceable non-disclosure and data protection agreements.

08User Rights Under GDPR

Residents of the EU and EEA are entitled to exercise the following statutory rights:

• Right of Access: Request a complete copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Erasure (Right to be Forgotten): Request permanent deletion of your personal data when no legal ground requires its retention.
• Right to Restrict Processing: Request temporary limitation of personal data processing under contested conditions.
• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
• Right to Object: Object at any time to data processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw previously granted consent without affecting prior lawful processing.

09Cookies & Tracking

We employ essential, functional, and analytical cookies to:

• Preserve user sessions and security preferences
• Analyze aggregate traffic metrics and optimize page responsiveness

You can adjust your browser preferences to decline non-essential cookies at any time.

10Data Breach Notification

In the unlikely event of a security incident affecting EU/EEA resident data:

• We will notify the relevant Data Protection Supervisory Authority within 72 hours of confirmation, in accordance with GDPR Article 33.
• High-risk affected individuals will be notified without undue delay with mitigation steps.

11Data Protection Officer (DPO)

12Updates to This Policy

This GDPR Policy may be reviewed and amended periodically to reflect evolving legal standards. The updated version will be posted here with a revised effective date.