GDPR Compliance

Last updated: November 29, 2024

Apollyx is committed to protecting and respecting your privacy. This page explains how we comply with the General Data Protection Regulation (GDPR) and outlines your rights as a data subject.

The GDPR is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. It also addresses the transfer of personal data outside the EU and EEA areas.

Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

Right to Access

You have the right to request copies of your personal data. We will provide this within 30 days.

Right to Rectification

You have the right to request correction of any information you believe is inaccurate or incomplete.

Right to Erasure

You have the right to request that we erase your personal data under certain conditions.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain conditions.

Right to Data Portability

You have the right to request that we transfer your data to another organization or directly to you.

Right to Object

You have the right to object to our processing of your personal data under certain conditions.

Legal Bases for Processing

Contract Performance

Processing necessary for the performance of a contract with you or to take steps at your request before entering into a contract.

Legitimate Interests

Processing necessary for our legitimate interests or those of a third party, where those interests are not overridden by your rights.

Consent

Where you have given clear consent for us to process your personal data for a specific purpose.

Legal Obligation

Processing necessary for compliance with a legal obligation to which we are subject.

International Data Transfers

Apollyx is headquartered in the United States. When you use our services, your data may be transferred to and processed in the United States or other countries where our service providers operate.

We ensure that such transfers comply with GDPR requirements by implementing appropriate safeguards, including:

  • Standard Contractual Clauses approved by the European Commission
  • Binding Corporate Rules where applicable
  • Additional technical and organizational measures to protect your data

Data Protection Officer

If you have any questions about our data protection practices or would like to exercise your rights under GDPR, you can contact our Data Protection Officer:

4539 N 22ND ST, STE N, PHOENIX, AZ 85016, United States

Exercise Your Rights

To exercise any of your GDPR rights, you can submit a request through our secure portal or contact us directly. We will respond to your request within 30 days.

Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU member state where you live, work, or where the alleged infringement took place.