GDPR Compliance

What is GDPR?

The General Data Protection Regulation (GDPR) is a European Union law that governs data protection and privacy. It gives individuals control over their personal data and requires organizations to be transparent about data collection and usage.

Our Data Processing Principles

As a student project, we follow these GDPR principles to the best of our ability:

• Lawfulness: We process data only for educational and research purposes
• Fairness: We are transparent about our data practices
• Transparency: We clearly explain what data we collect and why
• Purpose Limitation: We only use data for stated educational purposes
• Data Minimization: We collect only the minimum data necessary
• Accuracy: We strive to keep data accurate and up-to-date
• Storage Limitation: We delete data within 24 hours
• Security: We implement basic security measures appropriate for student projects

Your Rights Under GDPR

As a student project, we have limited resources to handle all GDPR requests, but you have the right to:

Right to Information

You have the right to know what personal data we process about you and why.

Right of Access

You can request a copy of the personal data we hold about you.Note: As a student project, response times may be longer than commercial services.

Right to Rectification

You can request correction of inaccurate personal data. However, since we automatically delete data within 24 hours, this may not be applicable.

Right to Erasure

You can request deletion of your personal data.Note: Data is automatically deleted within 24 hours of processing.

Right to Restrict Processing

You can request that we limit how we process your data. This may affect the functionality of our student project.

Right to Data Portability

You can request your data in a structured, machine-readable format.Note: As a student project, we may not have advanced data export capabilities.

Right to Object

You can object to processing of your personal data for research purposes. This may limit your ability to use our student project.

Data We Process

As a student project, we process minimal personal data:

• PDF Files: Temporarily processed for AI analysis
• Usage Data: Basic analytics for educational research
• Technical Data: IP addresses and browser information
• Error Logs: For debugging and improvement purposes

Legal Basis for Processing

We process data based on:

• Legitimate Interest: Educational research and project development
• Consent: Implied consent through use of our student project
• Research Purposes: Academic research and learning

Data Retention

Important: As a student project, we automatically delete all personal data within 24 hours of processing. This exceeds GDPR requirements for data minimization.

Data Security

We implement basic security measures appropriate for student projects:

• HTTPS encryption for data transmission
• Basic access controls
• Automatic data deletion
• Secure hosting through Cloudflare

International Transfers

Our student project uses services that may transfer data internationally:

• Cloudflare: Global hosting and CDN service with appropriate safeguards
• Google Gemini: AI processing with data protection measures

Student Project Limitations

Important: As a student project, we cannot provide:

• 24/7 support for GDPR requests
• Enterprise-level data protection measures
• Guaranteed response times for data requests
• Advanced data management tools

How to Exercise Your Rights

To exercise your GDPR rights, contact us at:

Email: mliudev@proton.me
Subject Line: "GDPR Request - [Your Request Type]"
Response Time: We will respond within 30 days (student project limitations may apply)

Complaints

If you have concerns about our data processing, you can:

• Contact us directly at mliudev@proton.me
• Contact your local data protection authority
• Note that this is a student project with limited resources