But, to keep our lawyers happy, here is our GDPR policy and statement of GDPR compliance in full.
Yes, Wathe is fully GDPR compliant.
The General Data Protection Regulation (GDPR) is an European Union (EU) regulation (2016/679) that enhances current data protection laws and rights for EU citizens. This enhances data protection rights for data subjects and obligates companies to be more transparent and clear in their communications and policies pertaining to data processing.
By the definitions of GDPR, Wathe is a data controller and processor.
Wathe is a data analysis platform and as such any data uploaded into Wathe for data analysis and/or account creation and/or user management is considered business data and not personally identifiable information (PII).
Within the terms of GDPR, Wathe is a controller of such data and processor. In essence, Wathe stores and aggregates data in an anonymised fashion so that analysis can be performed on them.
Wathe is built using Amazon Web Services (AWS) and Google Cloud Platform (GCP) - an industry standard suite of data management, processing and controlling tools. You can find out more about AWS here and GCP here. Wathe does not have access to any PPI in AWS and GCP. We currently use AWS and CGP servers in the UK and EU.
When you cancel your account in Wathe, we’ll delete your account details from our records during the next data monitoring and update cycle (around every 3 months).
If you have any queries regarding any of your data you can contact us at firstname.lastname@example.org with your request. We’ll respond within 30 days of us receiving your message.