Last Updated: June 9, 2025
This GDPR Policy outlines the rights of individuals in the European Economic Area (EEA) and our commitment to ensuring compliance with the General Data Protection Regulation (GDPR). This policy should be read in conjunction with our main Privacy Policy.
1. Lawful Basis for Processing
We process personal data from individuals in the EEA based on one of the following legal grounds:
Consent: Where you have given us clear consent to process your personal data for a specific purpose.
Contract: Where processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
Legitimate Interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.
2. Your Rights Under GDPR
If you are a resident of the EEA, you have the following data protection rights:
The right to access: You have the right to request copies of your personal data.
The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
The right to erasure (The right to be forgotten): You have the right to request that we erase your personal data, under certain conditions.
The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
3. Exercising Your Rights
To exercise any of these rights, please contact our Data Protection Officer at dpo@yallabeena.com. We will respond to your request within one month.
4. International Data Transfers
Your information may be transferred to—and maintained on—computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
5. Contacting the Appropriate Authority
Should you wish to report a complaint or if you feel that we have not addressed your concern in a satisfactory manner, you may contact the relevant Data Protection Authority in your jurisdiction.
