GDPR Compliance

1. Data Controller

Sahayy acts as the data controller for personal data collected through our application and website. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR).

2. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you create an account and agree to our terms.
• Contract: To provide the services you have requested.
• Legitimate Interest: To improve our services and ensure security.
• Legal Obligation: To comply with applicable laws and regulations.

3. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request a copy of your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten"). You can delete your account directly from the app under Settings.
• Right to Restriction: Request limitation of processing of your data.
• Right to Data Portability: Request your data in a machine-readable format.
• Right to Object: Object to processing based on legitimate interest.
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing.

4. Data We Collect

We collect and process the following categories of personal data:

• Account Data: Name, email address, phone number, nationality, city.
• Profile Data: Avatar, community preferences.
• Content Data: Events, services, groups, and marketplace listings you create.
• Usage Data: How you interact with the app (anonymized).
• Location Data: City-level location for community features (with your consent).

5. Data Storage and Transfer

Your data is stored on Amazon Web Services (AWS) servers located in the European Union (Ireland, London, Frankfurt). We do not transfer personal data outside the EU/EEA without appropriate safeguards.

6. Data Retention

We retain your personal data only for as long as necessary to provide our services. When you delete your account, your personal data is permanently removed within 30 days.

7. Data Protection Officer

For any GDPR-related inquiries or to exercise your rights, please contact us:

Email: care@sahayy.com

8. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.