GDPR Compliance

Last updated: May 15, 2025

1. Introduction

World Wide Uptime is committed to protecting and respecting your privacy and complying with applicable data protection laws, including the European Union's General Data Protection Regulation (GDPR). This GDPR Compliance statement explains how we handle personal data in accordance with these regulations.

As both a data controller and processor, we've implemented appropriate technical and organizational measures to ensure the protection of your personal data.

2. Data Protection Principles

Under the GDPR, we adhere to the following data protection principles:

  • Lawfulness, fairness, and transparency: We process data lawfully, fairly, and transparently.
  • Purpose limitation: We collect data for specified, explicit, and legitimate purposes.
  • Data minimization: We limit data collection to what's necessary for our purposes.
  • Accuracy: We keep personal data accurate and up to date.
  • Storage limitation: We retain data only as long as necessary.
  • Integrity and confidentiality: We process data securely, protecting against unauthorized processing and accidental loss.
  • Accountability: We take responsibility for complying with these principles and can demonstrate this compliance.

3. Legal Basis for Processing

We process your personal data only when we have a legal basis to do so. Under the GDPR, these bases include:

  • Consent: You have given clear consent for us to process your personal data for a specific purpose.
  • Contract: Processing is necessary for a contract we have with you or because you have asked us to take specific steps before entering into a contract.
  • Legal obligation: Processing is necessary to comply with the law.
  • Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided these interests don't override your rights and freedoms.

4. Your Data Subject Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right to information: You have the right to know how we collect and process your personal data.
  • Right of access: You have the right to request copies of your personal data.
  • Right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
  • Right to erasure: You have the right to request that we erase your personal data, under certain conditions.
  • Right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • Right to data portability: You have the right to request that we transfer the data we've collected to another organization, or directly to you, under certain conditions.
  • Right to object: You have the right to object to our processing of your personal data, under certain conditions.
  • Rights related to automated decision making and profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

5. How to Exercise Your Rights

To exercise any of your rights under the GDPR, please contact us at gdpr@worldwideuptime.com. We will respond to your request within 30 days. If we need more time to respond to a complex request, we will let you know and may take up to an additional two months to respond.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

6. International Data Transfers

Our operations are primarily based in the United States, but we may transfer personal data to countries outside the European Economic Area (EEA). When we do, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • We will only transfer data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
  • Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.
  • Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield, which requires them to provide similar protection to personal data shared between Europe and the US.

7. Data Breach Notification

In the case of a personal data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you without undue delay.

8. Data Protection Officer

We have appointed a Data Protection Officer (DPO) responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the DPO at:

Email: dpo@worldwideuptime.com
Postal address: [Postal Address]

9. Lodging a Complaint

You have the right to make a complaint at any time to your local supervisory authority for data protection issues. However, we would appreciate the chance to deal with your concerns before you approach the supervisory authority, so please contact us in the first instance.

10. Changes to This GDPR Compliance Statement

We may update our GDPR Compliance Statement from time to time. We will notify you of any changes by posting the new statement on this page and updating the "last updated" date at the top.

You are advised to review this statement periodically for any changes. Changes to this statement are effective when they are posted on this page.