Data Processing Agreement (DPA): We offer a comprehensive DPA outlining our commitments and responsibilities in processing personal data. This agreement is incorporated into our standard terms but can also be reviewed and signed.

Data subject rights: We respect your rights under GDPR, including the right to access, correct, delete, and restrict the processing of your personal data. You can manage your data preferences through your account settings or by contacting us directly.

Data security: We implement robust security measures to protect your data, including encryption, regular security assessments, and strict access controls.

Data breach notification: In the event of a data breach, we have protocols in place to notify affected individuals and the relevant authorities within the timeframe required by GDPR.

Data minimization and retention: We collect only the necessary data and retain it for no longer than required for the purposes for which it is processed. Our data retention policies ensure compliance with GDPR’s data minimization principles.

International data transfers: For international data transfers, Waitwhile relies on the Standard Contractual Clauses (SCCs) approved by the European Commission. These clauses ensure appropriate safeguards are in place to protect your data when transferred outside the European Economic Area (EEA).