This GDPR Compliance Notice is intended to provide users located in the European Union (EU) with information about how KFMI.pk (“we,” “our,” or “us”) complies with the General Data Protection Regulation (GDPR).
1. Data Controller
KFMI.pk acts as the data controller for the personal information it collects from users in the EU. If you have any questions or concerns regarding the processing of your personal information, you can contact us.
2. Lawful Basis for Processing
Under the GDPR, we process personal information based on one or more lawful bases, including:
- The necessity of processing for the performance of a contract to which you are a party or to take steps at your request before entering into a contract.
- Compliance with legal obligations to which we are subject.
- Consent is provided by you for specific purposes.
- Legitimate interests pursued by us or a third party provided that such interests are not overridden by your interests or fundamental rights and freedoms.
3. Your Rights under the GDPR
The GDPR provides certain rights to individuals concerning their personal information. If you are an EU user, you have the following rights:
a. Right to Access: You can request access to the personal information we hold about you and receive details about how we process it.
b. Right to Rectification: You have the right to request the correction of inaccurate personal information and to have incomplete data completed.
c. Right to Erasure (Right to Be Forgotten): You may request the deletion of your personal information under certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.
d. Right to Restriction of Processing: You have the right to limit the processing of your personal information in certain situations.
e. Right to Data Portability: You can request a copy of your personal information in a structured, commonly used, and machine-readable format.
f. Right to Object: You have the right to object to the processing of your personal information for certain purposes, including direct marketing.
g. Right to Withdraw Consent: If we process your personal information based on your consent, you have the right to withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
h. Right to Lodge a Complaint: If you believe that we have violated your rights under the GDPR, you have the right to lodge a complaint with the relevant supervisory authority.
4. International Data Transfers
As outlined in our Privacy Policy, we may transfer your personal information to countries outside the EU. We take measures to ensure that such transfers are made in compliance with applicable data protection laws, including the use of appropriate safeguards.
5. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected unless a longer retention period is required by law.
