GDPR Compliance Statement

1. Commitment to GDPR

susoTech is committed to ensuring the security and protection of the personal information that we process, and to provide a compliant and consistent approach to data protection. We have always had a robust and effective data protection program in place which complies with existing law and abides by the data protection principles. However, we recognize our obligations in updating and expanding this program to meet the demands of the GDPR.

2. Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. susoTech aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data. Your rights include:

• The right to access: You have the right to request copies of your personal data.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate.
• The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

3. Data Transfer

We may transfer data that we collect from you to locations outside of headquarters for processing and storing. In such cases, we ensure that appropriate safeguards are in place to protect your personal data in accordance with this GDPR Statement and applicable laws.

4. Data Breach Notification

In the unlikely event of a data breach, susoTech will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals. If the breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.

5. Data Controller Contact

If you wish to exercise any of the rights set out above, or have questions about our GDPR compliance, please contact our Data Protection Officer at: privacy@susotech.example.