GDPR Compliance

Effective Date: May 25, 2018

Rezerv and the GDPR

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It strengthens the protection of personal data for individuals within the European Union (EU) and provides them with greater control over their data. Rezerv is committed to GDPR compliance (alongside our Privacy Policy) and supporting our customers in their compliance journey.

Our Role as a Data Processor

When you use Rezerv to manage your gym members' data, you are the Data Controller, and Rezerv acts as the Data Processor. We process personal data on your behalf and in accordance with your instructions (see our Terms of Service). We have updated our Data Processing Agreement (DPA) to reflect GDPR requirements.

International Data Transfers

PROCESS IN LLC operates REZERV.mk from North Macedonia. Cross-border transfers, if any, will be described after legal review of the full Privacy Policy rewrite. To ensure lawful transfer of personal data to a third country, we rely on the European Commission's Standard Contractual Clauses (SCCs), which form part of our Data Processing Agreement. These clauses act as a safeguard to ensure your data protection rights are respected.

Data Subject Rights

We have implemented features to help you fulfil requests from your members (Data Subjects) regarding their rights under GDPR, including:

• Right to Access: Ability to export member data.
• Right to Rectification: Easy editing of member profiles.
• Right to Erasure (Right to be Forgotten): Tools to permanently delete member data upon request.
• Right to Data Portability: Export data in a machine-readable format.

Data Security Measures

We employ robust technical and organisational measures to ensure the security of personal data (detailed in our Security Policy), including:

• Encryption of data in transit and at rest.
• Regular security audits and vulnerability assessments.
• Access controls and authentication mechanisms.
• Staff training on data privacy and security.

Sub-processors

We use trusted third-party service providers (sub-processors) to deliver our services (e.g., cloud hosting, payment processing). We maintain a list of these sub-processors and ensure they meet GDPR standards.

Contact Us

If you have any questions about our GDPR compliance or need assistance with a data subject request, please contact our Data Protection Officer at: contact@processin.mk.

PROCESS IN LLC
Nikola Rusinski 29, North Macedonia
North Macedonia