The Everbuild Clients Application Form

Introduction 1.1. This GDPR Policy outlines Everbuild’s commitment to data protection and compliance with the General Data Protection Regulation (GDPR) in the handling and processing of personal data. 1.2. Everbuild is committed to safeguarding the privacy and rights of individuals whose personal data is collected and processed during its operations. Scope 2.1. This policy applies to all employees, contractors, and third parties who process personal data on behalf of Everbuild. Principles of Data Protection 3.1. Everbuild adheres to the following key principles of data protection: a. Lawfulness, fairness, and transparency: Personal data is processed lawfully, fairly, and in a transparent manner. b. Purpose limitation: Personal data is collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes. c. Data minimization: Only necessary and relevant personal data is collected and processed. d. Accuracy: Personal data is accurate, kept up to date, and corrected without delay when inaccuracies are identified. e. Storage limitation: Personal data is retained only for the necessary duration and in accordance with applicable legal requirements. f. Integrity and confidentiality: Personal data is processed securely, protected against unauthorized access, disclosure, or loss. Legal Basis for Processing Personal Data 4.1. Everbuild ensures that personal data is processed based on a lawful basis as defined in the GDPR, such as: a. The data subject’s consent. b. The necessity of processing for the performance of a contract. c. Compliance with a legal obligation. d. Protection of vital interests. e. Legitimate interests pursued by Everbuild or a third party. Rights of Data Subjects 5.1. Everbuild acknowledges and respects the rights of data subjects as outlined in the GDPR, including: a. The right to be informed. b. The right of access. c. The right to rectification. d. The right to erasure. e. The right to restrict processing. f. The right to data portability. g. The right to object. h. Rights related to automated decision-making, including profiling. Data Security and Confidentiality 6.1. Everbuild implements appropriate technical and organizational measures to ensure the security and confidentiality of personal data, including: a. Encryption and pseudonymization. b. Access controls and user authentication. c. Regular data backups. d. Incident response and breach notification procedures. Data Transfers 7.1. Everbuild ensures that any international transfers of personal data comply with the requirements of the GDPR, including the use of appropriate safeguards such as Standard Contractual Clauses or ensuring the recipient country has an adequate level of data protection. Data Protection Officer 8.1. Everbuild has appointed a Data Protection Officer (DPO) responsible for overseeing data protection activities, ensuring compliance with the GDPR, and acting as the point of contact for data subjects and supervisory authorities. Data Breach Notification 9.1. Everbuild has implemented procedures for detecting, reporting, and managing personal data breaches. In the event of a data breach, Everbuild will promptly notify the appropriate supervisory authority and affected data subjects as required by law.