GDPR & International Compliance 🇪🇺

1. Commitment to Data Protection

THINKSim™ complies with international data protection standards, including the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA).

2. Lawful Basis for Processing

We process personal data based on the following lawful bases:

• User Consent - When you voluntarily provide information or agree to our cookie policy
• Contractual Necessity - To fulfill subscription services and provide access to THINKSim™
• Legitimate Interest - For platform improvement, security, and fraud prevention

3. Your Rights Under GDPR

As a data subject, you have the following rights under GDPR:

• Right to Access - Request a copy of your personal daty
• Right to Rectification - Correct inaccurate or incomplete information
• Right to Erasure - "Right to be Forgotten" - Request data deletion
• Right to Restrict Processing - Limit how we use your data
• Right to Data Portability - Receive your data in a machine-readable format
• Right to Object - Object to processing based on legitimate interestst

4. Data Transfers

Your data may be processed in the United States or other jurisdictions where our servers and service providers are located. We ensure that appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements (DPAs) with all third-party service providers
• Adequacy decisions where applicable
• Additional safeguards for international data transfers

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption - Data encrypted in transit (TLS/SSL) and at rest
• Secure Servers - Hosted in ISO 27001 certified data centers
• Access Controls - Strict role-based access to personal data
• Multi-Factor Authentication - For administrative access

6. Data Retention

Data is retained only as long as necessary for:

• Service Delivery - Active subscription and platform access
• Legal Compliance - Tax, accounting, and regulatory requirements

We retain user data for a maximum of 1 months after account inactivity, after which data is anonymized or securely deleted.

Requests will be processed within legally required timeframes.

9. Children's Data

THINKSim™ is not intended for children under the age of 18 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from minors. If we become aware of such data collection, we will take immediate steps to delete it.

10. Updates to This Policy

We may update this GDPR & International Compliance Clause from time to time. Users will be notified of significant changes via:

• Email notification to registered users
• Platform notification upon login
• Updated policy posted on this page with a new "Last Updated" date

We encourage you to review this policy periodically.