GDPR Compliance

1. Introduction to GDPR

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It applies to all organizations that process personal data of individuals residing in the European Union (EU), regardless of where the organization is located.

IMG2WEBP is committed to protecting your privacy and ensuring compliance with GDPR requirements. This page outlines your rights under GDPR and how we handle your personal data.

2. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

Right to Information

You have the right to be informed about how your personal data is collected, used, and processed. We provide this information through our Privacy Policy and this GDPR compliance page.

Right of Access

You have the right to request access to your personal data and receive information about how we process it. You can request a copy of your personal data we hold.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the original purpose.

Right to Restrict Processing

You have the right to request restriction of processing your personal data in certain situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

Right to Object

You have the right to object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or significantly affects you.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: When processing is necessary to provide our image conversion services
• Legal Obligation: When we must process data to comply with legal requirements
• Legitimate Interest: When processing is necessary for our legitimate business interests, balanced against your rights

4. Data We Collect

We collect and process the following types of personal data:

Technical Data

• IP address and location data
• Browser type and version
• Device information and operating system
• Usage data and website interactions

Service Data

• Images uploaded for conversion (temporarily processed)
• Conversion preferences and settings
• Service usage statistics

Communication Data

• Contact information when you reach out to us
• Feedback and support communications

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Uploaded Images: Deleted within 24 hours after conversion process completion
• Technical Logs: Retained for up to 12 months for security and performance monitoring
• Analytics Data: Anonymized and retained for up to 24 months
• Communication Records: Retained for up to 3 years for support purposes

6. Data Security Measures

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Staff training on data protection principles
• Incident response and breach notification procedures

7. International Data Transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules (BCRs) where applicable
• Certification schemes and codes of conduct

8. Third-Party Processors

We work with carefully selected third-party processors who assist us in providing our services. All processors are required to:

• Process personal data only on our documented instructions
• Implement appropriate technical and organizational measures
• Maintain confidentiality of personal data
• Assist with data subject rights requests
• Notify us of any data breaches

9. Data Protection Officer

While we are not required to appoint a Data Protection Officer (DPO) under GDPR, we have designated a privacy contact person responsible for:

• Monitoring GDPR compliance
• Conducting privacy impact assessments
• Serving as a contact point for data subjects and supervisory authorities
• Providing data protection training and advice

10. How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us using the information below. We will respond to your request within one month (extendable by two additional months for complex requests).

Required Information for Requests

To process your request efficiently, please provide:

• Your full name and contact information
• Description of your request and the right you wish to exercise
• Any relevant details to help us locate your data
• Proof of identity (to prevent unauthorized access)

11. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe we have not handled your personal data in accordance with GDPR. You can contact:

• The supervisory authority in your EU member state
• The supervisory authority where you work
• The supervisory authority where the alleged infringement occurred

However, we encourage you to contact us first so we can address your concerns directly.

12. Updates to GDPR Compliance

We regularly review and update our GDPR compliance measures to ensure continued protection of your personal data. Any material changes to our data processing practices will be communicated through updates to this page and our Privacy Policy.

13. Contact Information

For any questions about GDPR compliance or to exercise your rights, please contact us:

For more information about our data practices, please also review ourPrivacy Policy, Terms of Service, andCookie Policy.