GDPR Compliance

Expathia is fully committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR).

Your Rights Under GDPR

Right to Access

You can request a copy of all personal data we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data under certain conditions.

Right to Portability

You can receive your data in a structured, machine-readable format.

Right to Restriction

You can request restriction of processing of your personal data.

Right to Object

You can object to processing based on legitimate interests or direct marketing.

Right to Withdraw Consent

You can withdraw your consent at any time, without affecting prior processing.

Data Controller

Expathia Sp. z o.o. is the data controller for personal data collected through our platform. Our office is in Gdynia (postal code 81-035) at ul. Bolesława Krzywoustego 8, Poland.

Legal Basis for Processing

We process your personal data based on: (1) your consent, (2) performance of a contract, (3) compliance with legal obligations, and (4) our legitimate interests in providing and improving our services.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Account data is retained for the duration of your account plus 3 years.

International Transfers

Your data is primarily stored within the European Economic Area (EEA). Any transfers outside the EEA are protected by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

How to Exercise Your Rights

Follow these simple steps to exercise any of your GDPR rights:

  1. 1Send an email to our Data Protection Officer at dpo@expathia.com
  2. 2Clearly state which right you wish to exercise (e.g., access, erasure, rectification)
  3. 3Provide your full name and the email address associated with your account
  4. 4Include any additional details that help us identify and process your request

We will respond to your request within 30 days. In complex cases, we may extend this by an additional 60 days, and we will inform you of any such extension.

Contact Our Data Protection Officer

For any privacy-related questions or to exercise your rights:

dpo@expathia.com

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Poland, the supervisory authority is:

UODO (Urzad Ochrony Danych Osobowych)

ul. Stawki 2, 00-193 Warszawa, Poland

Visit UODO Website