GDPR Compliance

1. Introduction

WaxForward is committed to compliance with the EU General Data Protection Regulation (GDPR). We handle your personal data responsibly and in accordance with applicable data protection laws.

2. Data Controller

WaxForward Ltd.
Paseo de Marina, 142
08302 Mataró, Barcelona, Spain

3. Lawful Basis for Processing

We process your data only when we have a valid legal basis, such as:

4. Data Subject Rights

You have the following rights under GDPR:

5. Data Retention

We retain personal data only as long as necessary to provide our Services or meet legal requirements. When no longer needed, data is securely deleted or anonymized.

6. International Transfers

Personal data may be transferred to countries outside the European Economic Area (EEA). We ensure appropriate safeguards such as standard contractual clauses to protect your data.

7. Security Measures

We implement technical and organizational measures—including encryption in transit (TLS) and at rest (AES-256)—to safeguard personal data against unauthorized access and breaches.

8. Data Breach Notification

In case of a personal data breach, we will notify the relevant supervisory authority within 72 hours, and affected data subjects if the breach poses a high risk to their rights and freedoms.

9. Contact & Complaints

If you wish to exercise your GDPR rights or lodge a complaint, please contact our Data Protection Officer at privacy@waxforward.com. You also have the right to lodge a complaint with an EU supervisory authority.