GDPR Compliance
How ARK Platforms ensures full compliance with the European Union's General Data Protection Regulation.
Our commitment to European data rights
ARK Platforms fully complies with the General Data Protection Regulation (GDPR), which provides comprehensive protection for the personal data of EU residents and other individuals. Our practices ensure lawful, fair, and transparent data processing.
GDPR compliance pillars
Lawfulness
All data processing activities are based on valid legal grounds: consent, contract, legal obligation, vital interests, public task, or legitimate interests with appropriate safeguards.
Fairness
We process data in ways that are not unreasonably detrimental to individuals and without misleading them about how their data will be used.
Transparency
Individuals are clearly informed about data processing through accessible privacy notices that explain purposes, recipients, retention, and individual rights.
Purpose Limitation
Data is collected only for specified, explicit, and legitimate purposes and not further processed in ways incompatible with those purposes without consent.
Data Minimization
We collect only the minimum personal data necessary to achieve the stated purposes, avoiding excessive or irrelevant processing.
Accuracy
Personal data is kept accurate and up-to-date, with mechanisms for individuals to correct or update their information.
Storage Limitation
Data is retained only for as long as necessary to fulfill the stated purposes, after which it is securely deleted or anonymized.
Integrity & Security
Personal data is protected through appropriate technical and organizational measures against unauthorized access, loss, disclosure, or destruction.
Accountability
We maintain comprehensive records and demonstrate compliance with GDPR through documentation, audits, and impact assessments.
Your GDPR rights
Under GDPR, you have the following rights regarding your personal data:
- Right of Access: Access your personal data and receive a copy in a portable format
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data ("right to be forgotten") with limited exceptions
- Right to Restrict Processing: Limit how your data is processed in specific circumstances
- Right to Data Portability: Receive your data in machine-readable format and transfer it elsewhere
- Right to Object: Object to processing for marketing, research, or profiling purposes
- Rights Related to Automated Decision Making: Not be subject to decisions based solely on automated processing
- Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing
International adequacy and safeguards
When personal data is transferred outside the EU/EEA, ARK Platforms ensures adequate protection through Standard Contractual Clauses (SCCs), Binding Corporate Rules (BCRs), or other mechanisms approved under GDPR. We evaluate transfer mechanisms regularly to ensure continued compliance with regulatory requirements.
Contact our Data Protection Officer
To exercise your GDPR rights or lodge a complaint, contact our Data Protection Officer at dpo@arkplatforms.eu or through our contact form.