Data Protection Policy

Effective Date: 30-August-2024

At smartt, we are committed to protecting the privacy and confidentiality of personal data that we collect, store, process, and transmit. This Data Protection Policy outlines our practices for ensuring the security and proper handling of personal data in accordance with applicable data protection laws and regulations.

Scope and Application:

This policy applies to all personal data processed by smartt-ai, including data collected through our website, mobile applications, offline interactions, and any other means. It applies to all employees, contractors, and third parties who process personal data on our behalf.

Principles of Data Protection

Lawfulness, Fairness, and Transparency:

We process personal data lawfully, fairly, and transparently. We provide individuals with clear and concise information about the purposes and legal basis for processing their personal data.

Purpose Limitation:

We collect and process personal data only for specified, explicit, and legitimate purposes. We do not process personal data in a manner that is incompatible with those purposes.

Data Minimization :

We collect and retain personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed. We regularly review the data we hold and securely dispose of any data that is no longer necessary.

Accuracy:

We take reasonable steps to ensure that personal data is accurate, complete, and up to date. We encourage individuals to notify us of any changes or inaccuracies in their personal data.

Storage Limitation:

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Security:

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. We regularly assess and enhance our security measures to mitigate risks.

Data Subject Rights

We respect the rights of individuals regarding their personal data. We provide mechanisms for individuals to exercise their rights, including the right to access, rectify, erase, restrict processing, object to processing, and data portability. We handle such requests promptly and in accordance with applicable laws.

International Data Transfers

If personal data is transferred to countries outside the jurisdiction where the data was originally collected, we ensure that appropriate safeguards are in place to protect the data in accordance with applicable laws.

Accountability

We maintain records of our data processing activities and take responsibility for complying with this Data Protection Policy. We conduct periodic reviews to assess our compliance and address any privacy risks or issues.

Data Breach Management

In the event of a data breach involving personal data, we have procedures in place to promptly assess and mitigate the impact of the breach. We notify affected individuals and relevant authorities as required by applicable laws.

Third-Party Data Processors

When we engage third-party service providers that process personal data on our behalf, we ensure they meet adequate data protection standards and enter into appropriate agreements to protect the data.

Privacy by Design and Data Protection Impact Assessments

We integrate privacy considerations into our processes, systems, and services from the early stages of development. We conduct data protection impact assessments when necessary to identify and mitigate privacy risks associated with our data processing activities.

Training and Awareness

We provide training and ongoing awareness programs to employees and relevant third parties to ensure their understanding of data protection obligations and best practices.

Updates to this Data Protection Policy

We may update this Data Protection Policy from time to time to reflect changes in our data processing practices or legal requirements. Any updates will be posted on our website or otherwise communicated to relevant individuals.

Contact Us

If you have any questions or concerns about our data protection practices or this Data Protection Policy, please contact us at info@smartt-ai.com. By accessing or using our services, you acknowledge that you have read and understood this Data Protection Policy.