Privacy Policy

1. Introduction

At GEDITOK, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, and protect your information in accordance with the EU General Data Protection Regulation (GDPR).

By using our services, you agree to the practices described in this policy.

2. Information We Collect

Personal Data

  • Email address
  • Full name (when provided)

Technical Data

  • Authentication session tokens (stored in localStorage)
  • Language preferences and settings
  • Browser and device information

3. How We Use Your Data

  • Provide and maintain our blockchain traceability services
  • Communicate with you about updates and service changes
  • Improve and personalize your user experience
  • Ensure the security of our platform
  • Comply with legal and regulatory obligations

4. Data Storage

We use browser local storage technologies:

  • localStorage: To keep your session active and save preferences (persists between sessions)
  • sessionStorage: For temporary browsing data (cleared when browser is closed)

We do not use third-party cookies or advertising tracking systems.

5. Your Rights under GDPR

As a user in the European Union, you have the following rights:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restriction: Restrict the processing of your data
  • Right to Data Portability: Receive your data in a structured, readable format
  • Right to Object: Object to the processing of your personal data

6. Data Security

We implement appropriate technical and organizational security measures:

  • Data encryption in transit and at rest
  • Immutable blockchain storage for traceability data
  • Secure authentication with JWT tokens
  • Continuous security monitoring and regular audits

7. Third-Party Services

We use trusted third-party services:

  • For authentication and database storage (GDPR compliant)
  • For immutable traceability records (pseudonymized data)

8. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by law. Blockchain data is immutable by design but does not contain personally identifiable information.

9. Contact

To exercise your rights or make inquiries about this policy, contact us at:

admin@geditok.eu

10. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes by posting the new policy on our website with a revised update date.