GDPR Compliance

CourtzApp is fully compliant with the General Data Protection Regulation (GDPR), ensuring your data rights are protected.

GDPR Compliant | Data Rights Protected | EU Standards
GDPR Commitment: Even though CourtzApp is based in India, we recognize the importance of data protection and have implemented GDPR-compliant practices to protect all users' privacy rights.

What is GDPR?

The General Data Protection Regulation (GDPR) is a European Union law that came into effect on May 25, 2018. It strengthens and unifies data protection for all individuals within the EU and addresses the export of personal data outside the EU.

Key Principles
  • Lawfulness, fairness, and transparency
  • Purpose limitation
  • Data minimization
  • Storage limitation
Your Rights
  • Right to be informed
  • Right of access
  • Right to rectification
  • Right to erasure

Your Data Protection Rights

Under GDPR, you have several rights regarding your personal data. Here's how you can exercise these rights with CourtzApp:

Right to Access

You can request copies of your personal data from us.

Available via data export tool in your academy dashboard
Right to Rectification

You can request correction of inaccurate or incomplete data.

Update data directly in your account settings
Right to Erasure

You can request deletion of your personal data.

Contact our DPO at dpo@courtz.app
Right to Restrict Processing

You can request limitation of how we process your data.

Email your request to dpo@courtz.app
Right to Data Portability

You can obtain and reuse your data for your own purposes.

Export in JSON/CSV format from dashboard
Right to Object

You can object to processing of your personal data.

Manage preferences in privacy settings

How CourtzApp Ensures GDPR Compliance

Data Processing
  • Lawful basis for all processing
  • Purpose limitation enforced
  • Data minimization practiced
  • Regular data audits
Security Measures
  • Encryption at rest and in transit
  • Access controls and authentication
  • Regular security assessments
  • Incident response procedures
Documentation
  • Records of processing activities
  • Data protection impact assessments
  • Privacy policies and notices
  • Consent management
Training & Awareness
  • Staff GDPR training programs
  • Regular compliance updates
  • Data protection officer (DPO)
  • Continuous monitoring

Data Processing Information

Purpose Data Collected Legal Basis Retention Period
Academy Registration Name, email, phone, academy details Contract performance Duration of service + 7 years
Service Provision Usage data, preferences, support tickets Legitimate interest Duration of service + 3 years
Payment Processing Billing information, payment methods Contract performance Duration of service + 10 years
Marketing Communications Email, preferences, interaction data Consent Until consent withdrawn
Security & Compliance IP addresses, access logs, security events Legitimate interest 2 years

International Data Transfers

Data Localization

Your data is primarily stored and processed in India. When we do transfer data internationally, we ensure adequate protection through:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions where applicable
  • Additional safeguards as required

Data Protection Officer (DPO)

We have appointed a Data Protection Officer to monitor our compliance with data protection laws and act as a point of contact for data protection matters.

Contact Our DPO

Email: dpo@courtz.app

Response: Within 30 days

Address: CourtzApp DPO, Chennai, Tamil Nadu, India

DPO Responsibilities
• Monitor compliance
• Conduct impact assessments
• Train staff
• Handle data subject requests
• Liaise with supervisory authorities

How to Exercise Your Rights

Online Methods
  • Account Settings Dashboard
  • Data Export Tool
  • Privacy Preferences Center
  • In-app Support Chat
Contact Methods
  • Email: dpo@courtz.app
  • Support: mail2naren.n@gmail.com
  • Post: CourtzApp DPO Office
  • Dedicated GDPR Helpline
Processing Timeline

We will respond to your request within 30 days (extendable to 60 days for complex requests). You will be notified if additional time is needed and the reasons why.

Supervisory Authority

If you're not satisfied with how we've handled your data protection concerns, you have the right to lodge a complaint with the relevant supervisory authority:

For EU Residents

Contact your local Data Protection Authority

Find your DPA: ec.europa.eu/justice/data-protection

They will investigate and respond to your complaint

For Indian Residents

Data Protection Board of India

Contact through official channels

As per Indian data protection laws

Updates to GDPR Compliance

Stay Informed

We regularly review and update our GDPR compliance measures. Any significant changes will be communicated through:

  • Email notifications to registered academies
  • Updates on this page with revision dates
  • In-app notifications for major changes
  • Annual transparency reports