General Data Protection Regulation (GDPR) Compliance Policy

Effective Date: 12/25/24
Last Updated: 12/25/24

---

1. Introduction

Frnded (“the Platform”) is committed to protecting the privacy and personal data of its users in accordance with the General Data Protection Regulation (GDPR). This policy outlines how Frnded collects, processes, stores, and protects personal data to ensure compliance with GDPR requirements.

---

2. Scope

This policy applies to all personal data processed by Frnded, including but not limited to the data of users, employees, contractors, and third-party service providers. It covers data collected through our platform, mobile applications, and any associated services.

---

3. Principles of Data Processing

Frnded adheres to the following GDPR principles when processing personal data:

1. Lawfulness, Fairness, and Transparency: Personal data is processed lawfully, fairly, and transparently.
2. Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
3. Data Minimization: Data collected is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
4. Accuracy: Personal data is accurate and, where necessary, kept up to date.
5. Storage Limitation: Data is kept in a form that permits identification of individuals for no longer than necessary.
6. Integrity and Confidentiality: Data is processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

---

4. Legal Basis for Processing Personal Data

Frnded processes personal data based on one or more of the following legal grounds:

1. Consent: Users have provided clear consent for the processing of their data for specific purposes.
2. Contractual Obligation: Processing is necessary for the performance of a contract with the user or to take steps at their request before entering into a contract.
3. Legal Obligation: Processing is necessary to comply with a legal obligation.
4. Legitimate Interests: Processing is necessary for the purposes of legitimate interests pursued by Frnded, provided such interests are not overridden by the rights and freedoms of users.

---

5. Data Collection and Use

Frnded collects personal data for the following purposes:

1. Account Creation and Management: To enable users to create and manage their profiles.
2. Platform Features: To facilitate interactions, content sharing, and other social networking functionalities.
3. Service Improvement: To analyze user behavior and improve the Platform’s performance and user experience.
4. Communication: To send users important updates, promotional offers, and other notifications.
5. Legal Compliance: To comply with legal and regulatory requirements.

---

6. User Rights

Under GDPR, users have the following rights concerning their personal data:

1. Right to Access: Users can request access to their personal data held by Frnded.
2. Right to Rectification: Users can request corrections to inaccurate or incomplete personal data.
3. Right to Erasure (“Right to be Forgotten”): Users can request the deletion of their personal data, subject to legal and contractual obligations.
4. Right to Restriction: Users can request the restriction of processing their data in certain circumstances.
5. Right to Data Portability: Users can request a copy of their personal data in a structured, commonly used, and machine-readable format.
6. Right to Object: Users can object to the processing of their personal data for specific purposes, such as direct marketing.
7. Right to Withdraw Consent: Users can withdraw consent for data processing at any time.
8. Right to Lodge a Complaint: Users can lodge a complaint with a supervisory authority if they believe their rights under GDPR have been violated.

---

7. Data Retention

Frnded retains personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Upon expiration of the retention period, data is securely deleted or anonymized.

---

8. Data Security

Frnded implements appropriate technical and organizational measures to protect personal data, including:

1. Data encryption during storage and transmission.
2. Access controls to limit data access to authorized personnel only.
3. Regular security audits and vulnerability assessments.
4. Incident response plans to address potential data breaches.

---

9. Data Sharing and Transfers

Frnded may share personal data with third parties only under the following circumstances:

1. Service Providers: To provide services on our behalf, subject to strict confidentiality agreements.
2. Legal Requirements: To comply with legal obligations or respond to lawful requests from public authorities.
3. Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the new entity.

For data transfers outside the European Economic Area (EEA), Frnded ensures appropriate safeguards are in place, such as Standard Contractual Clauses or other lawful mechanisms.

---

10. Cookies and Tracking Technologies

Frnded uses cookies and similar tracking technologies to enhance the user experience and collect usage data. Users can manage their cookie preferences through their browser settings or the Platform’s cookie management tool.

---

11. Data Breach Notification

In the event of a data breach, Frnded will notify the appropriate supervisory authority within 72 hours, unless the breach is unlikely to result in a risk to user rights and freedoms. If the breach poses a high risk, affected users will also be informed promptly.

---

12. Training and Awareness

Frnded provides regular GDPR training to employees and stakeholders to ensure awareness and compliance with data protection requirements.

---

13. Policy Updates

Frnded reserves the right to update this policy to reflect changes in legal requirements or business practices. Users will be notified of significant updates through the Platform or other communication channels.

---

14. Contact Information

For questions, concerns, or to exercise your rights under GDPR, please contact us at:

Data Protection Officer Alexis Taylor
Email: Alexis.Taylor@frnded.com

---

15. Supervisory Authority

If you wish to lodge a complaint, you may contact your local supervisory authority. For users in the EU, please refer to the relevant Data Protection Authority in your country.

---

Frnded is committed to upholding the highest standards of data protection and privacy. Thank you for trusting us with your personal data.