Smart Files is fully committed to the General Data Protection Regulation (GDPR) and protecting the privacy rights of individuals in the European Union and European Economic Area.
Our Commitment
We process personal data lawfully, fairly, and transparently. We have implemented appropriate technical and organizational measures to ensure data protection by design and by default.
As a data subject in the EU/EEA, you have the following rights regarding your personal data. Smart Files is committed to enabling you to exercise these rights freely and promptly.
You have the right to request confirmation of whether we process your personal data and, if so, to access that data along with information about how it is processed. We will provide a copy within 30 days of your verified request.
If your personal data is inaccurate or incomplete, you have the right to have it corrected without undue delay. You can update most information directly through your account settings.
You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent. We will honor deletion requests within 30 days, subject to legal retention obligations.
You have the right to restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance.
You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests. We will comply unless we have compelling legitimate grounds.
Smart Files acts as a data processor for the documents you upload and a data controller for your account information. We process personal data only for the specific purposes outlined in our Privacy Policy. We do not use your document contents for any purpose other than providing the service you request. Our sub-processors (cloud infrastructure providers) are contractually bound to comply with GDPR requirements.
Your data may be processed on servers located outside the EU/EEA. In such cases, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to ensure your data receives an equivalent level of protection.
In the unlikely event of a data breach affecting your personal data, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33.
For any GDPR-related inquiries, to exercise your rights, or to file a complaint, please contact our Data Protection Officer:
You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated.