GDPR Compliance
AutoSizer is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR). Learn about your rights and how we protect your data.
Last updated: 10/6/2025
What is GDPR?
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It applies to all organizations that process personal data of individuals in the European Union (EU), regardless of where the organization is located.
GDPR gives EU residents enhanced rights over their personal data and requires organizations to implement strong data protection measures.
Your Data Protection Rights
Right of Access
You have the right to know what personal data we hold about you and how we use it.
Right to Data Portability
You can request a copy of your data in a structured, machine-readable format.
Right to Rectification
You can request correction of inaccurate or incomplete personal data.
Right to Erasure
You can request deletion of your personal data in certain circumstances.
Right to Restrict Processing
You can request that we limit how we use your personal data.
Right to Object
You can object to processing of your data for certain purposes.
How to Exercise Your Rights
Making a Request
To exercise any of your GDPR rights, you can:
- Email us at connect@alphesda.com
- Use the data request form in your account settings
- Contact our Data Protection Officer at connect@alphesda.com
Response Time
We will respond to your request within 30 days of receipt. For complex requests, we may extend this period by up to 60 days, and we will inform you of any delay.
Identity Verification
To protect your privacy, we may need to verify your identity before processing your request. This may involve asking for additional information or documentation.
Lawful Basis for Processing
Under GDPR, we must have a lawful basis for processing your personal data. Our lawful bases include:
Contract Performance
Processing necessary to provide our image processing services to you.
Legitimate Interests
Processing for our legitimate business interests, such as improving our services, security, and fraud prevention.
Consent
Processing based on your explicit consent, such as marketing communications.
Legal Obligation
Processing required to comply with legal obligations, such as tax and accounting requirements.
International Data Transfers
AutoSizer is based in the United States, which means your personal data may be transferred outside the European Economic Area (EEA). We ensure appropriate safeguards are in place for such transfers:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions by the European Commission
- Certification schemes and codes of conduct
- Binding corporate rules for intra-group transfers
Data Breach Notification
In the unlikely event of a data breach that affects your personal data, we will:
- Notify the relevant supervisory authority within 72 hours
- Inform affected individuals without undue delay if the breach poses a high risk
- Provide clear information about the nature of the breach
- Explain the measures we are taking to address the breach
- Advise on steps you can take to protect yourself
Data Protection Officer
We have appointed a Data Protection Officer (DPO) to oversee our GDPR compliance and handle data protection matters:
Email: connect@alphesda.com
Role: Data Protection Officer
Responsibilities: GDPR compliance, data protection advice, privacy impact assessments
Right to Lodge a Complaint
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority. You can find your local authority at:
Contact Us
For any GDPR-related questions or to exercise your rights, please contact us:
Data Protection Officer: connect@alphesda.com
Privacy Questions: connect@alphesda.com
General Support: connect@alphesda.com