GDPR Compliance

At YRUZ Domains, we are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR). This page outlines how we adhere to GDPR requirements and your rights under this regulation.

1. Our Commitment to GDPR Compliance

YRUZ Domains is fully committed to GDPR compliance. We have implemented various measures to ensure that we process personal data in accordance with GDPR principles, including:

• Lawfulness, fairness, and transparency in data processing
• Purpose limitation (collecting data for specified, explicit, and legitimate purposes)
• Data minimization (collecting only what is necessary)
• Accuracy of personal data
• Storage limitation (keeping data only as long as necessary)
• Integrity and confidentiality (ensuring appropriate security)
• Accountability (taking responsibility for how we handle personal data)

2. Legal Basis for Processing

Under GDPR, we process your personal data based on one or more of the following legal grounds:

2.1 Consent

Where you have given clear consent for us to process your personal data for a specific purpose. You can withdraw this consent at any time.

2.2 Contract

Where processing is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into a contract.

2.3 Legal Obligation

Where processing is necessary for compliance with a legal obligation to which we are subject.

2.4 Legitimate Interests

Where processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.

3. Your Rights Under GDPR

The GDPR provides you with several rights regarding your personal data. These include:

3.1 Right to Access

You have the right to request a copy of the personal data we hold about you and to check that we are lawfully processing it.

3.2 Right to Rectification

You have the right to request correction of any inaccurate personal data we hold about you.

3.3 Right to Erasure (Right to be Forgotten)

You have the right to request erasure of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected.

3.4 Right to Restriction of Processing

You have the right to request the restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

3.5 Right to Data Portability

You have the right to request the transfer of your personal data to you or to a third party in a structured, commonly used, machine-readable format.

3.6 Right to Object

You have the right to object to processing of your personal data in certain circumstances, including processing based on legitimate interests or for direct marketing purposes.

3.7 Rights Related to Automated Decision Making and Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

4. Data Protection Measures

We have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data where appropriate
• Regular testing, assessing, and evaluating the effectiveness of our security measures
• Ensuring the ongoing confidentiality, integrity, availability, and resilience of processing systems and services
• The ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident
• Regular staff training on data protection and security

5. International Data Transfers

YRUZ Domains may transfer personal data to countries outside the European Economic Area (EEA). When we do so, we ensure that appropriate safeguards are in place to protect your data, such as:

• Standard contractual clauses approved by the European Commission
• Binding corporate rules for transfers within a corporate group
• Compliance with approved codes of conduct or certification mechanisms
• Transfers to countries with an adequacy decision from the European Commission

6. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours after becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

7. Data Protection Officer

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this privacy notice and our GDPR compliance. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact our DPO using the details set out below:

Email: dpo@yruz.one

8. Complaints

You have the right to make a complaint at any time to the supervisory authority for data protection issues in your country. We would, however, appreciate the chance to deal with your concerns before you approach the supervisory authority, so please contact us in the first instance.

9. Changes to This GDPR Compliance Notice

We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date. If we make significant changes, we will notify you by email or by means of a notice on our website prior to the change becoming effective.