GDPR Compliance

Last updated: April 7, 2025

1. Introduction

At ReputaCore, we are committed to ensuring the highest standards of data protection and privacy. As an Austrian company, we are subject to the European General Data Protection Regulation (GDPR) and take our obligations seriously.

2. Our Role Under GDPR

When you use ReputaCore to collect testimonials from your customers, we act as a data processor, processing personal data on your behalf. You, as our customer, are the data controller responsible for ensuring that you have a lawful basis for collecting and processing this personal data.

3. Data Processing

As a data processor under Article 28 of the GDPR, we process personal data only in accordance with our Terms of Service and Privacy Policy. Enterprise customers who require a custom Data Processing Agreement (DPA) can contact our support team to request one.

4. Data Protection Measures

We implement the following technical and organizational measures to protect personal data:

• Encryption of personal data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Regular backups and disaster recovery procedures
• Staff training on data protection and security
• EU-based hosting with ISO 27001 certified providers

5. Data Subject Rights

We provide tools and features to help you fulfill data subject rights requests, including:

• Access to personal data
• Rectification of inaccurate data
• Erasure of personal data
• Restriction of processing
• Data portability
• Objection to processing

6. International Data Transfers

All personal data is stored on servers located in the European Union. If we need to transfer personal data outside the EU, we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR.

7. Data Breach Notification

In the event of a personal data breach, we will notify you without undue delay after becoming aware of the breach, in accordance with Article 33 of the GDPR.

8. GDPR Documentation

We maintain records of processing activities in accordance with Article 30 of the GDPR and conduct Data Protection Impact Assessments (DPIAs) where required.

9. Contact Us

If you have any questions about our GDPR compliance or data protection practices, please contact us at:

Email: contact@reputacore.eu
Address: Hauptstraße 43, 2563 Pottenstein, Niederösterreich