GDPR Data Protection

Our Commitment to Data Protection

Inscriben is committed to protecting your personal data and respecting your privacy. Operated by NXFIN TECHNOLOGIES PRIVATE LIMITED, we serve global users and organizations, maintaining rigorous compliance with the General Data Protection Regulation (GDPR) for all data subjects in the European Economic Area (EEA) and the UK. We have architected our platform with data protection by design and default, ensuring security, transparency, and non-repudiation.

Your Rights Under GDPR

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at:

We will acknowledge your request within 48 hours and provide a substantive response within 30 days. In complex cases, this period may be extended by an additional 60 days, and we will inform you of any such extension and the reasons for it.

Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our data protection practices. You can contact our DPO directly for any data protection inquiries:

Our Data Processing Practices

• Lawful Bases: We always identify and document a lawful basis before processing personal data, whether consent, contractual necessity, or legitimate interest.
• Data Minimization: We only collect personal data that is necessary for the specific purpose. We do not collect data "just in case."
• Purpose Limitation: Personal data is collected for specified, explicit, and legitimate purposes and is not further processed in a manner incompatible with those purposes.
• Accuracy: We take reasonable steps to ensure personal data is accurate and up to date.
• Storage Limitation: Personal data is kept only for as long as necessary for the purposes for which it was collected.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we commit to:

• Notifying the relevant supervisory authority (Autoriteit Persoonsgegevens) within 72 hours of becoming aware of the breach.
• Notifying affected individuals without undue delay when the breach is likely to result in a high risk to their rights and freedoms.
• Documenting all breaches, including their effects and the remedial actions taken.

International Transfers

Our primary data infrastructure is located within the European Union. Where international transfers are necessary, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other lawful transfer mechanisms under GDPR Chapter V.

Complaints & Supervisory Authorities

If you are located in the European Union or United Kingdom and believe that your data protection rights have been infringed, you have the right under GDPR Article 77 to lodge a complaint with a supervisory authority, in particular in the EU/EEA Member State of your habitual residence, place of work, or place of the alleged infringement (such as the Dutch Autoriteit Persoonsgegevens, the Irish DPC, or the UK Information Commissioner's Office). Residents of India may submit grievances under the DPDPA 2023 to our Grievance Officer and escalate to the Data Protection Board of India.

We encourage you to contact our Data Protection Team at privacy@inscriben.com first so that we can promptly resolve your concern.

Contact

For any questions about our data protection practices: