GDPR Compliance

1. Introduction

The General Data Protection Regulation (GDPR) is a European Union regulation that governs data protection and privacy. This page explains how InsRoom VR complies with GDPR requirements and your rights as a data subject.

2. Legal Basis for Processing

We process your personal data based on the following legal bases under GDPR:

2.1 Consent (Article 6(1)(a))

When you create an account or use certain features, you provide consent for us to process your data. You can withdraw consent at any time.

2.2 Legitimate Interests (Article 6(1)(f))

We process data for legitimate interests including:

• Providing and improving our free service
• Ensuring platform security and preventing abuse
• Analyzing usage patterns to enhance user experience
• Maintaining service functionality and performance

2.3 Contract Performance (Article 6(1)(b))

Processing necessary to provide the Service you have requested (even though the service is free, we have a contractual relationship with users).

3. Your GDPR Rights

As a data subject under GDPR, you have the following rights:

4. Exercising Your Rights

To exercise any of your GDPR rights, please:

1. Contact us at privacy@insroomvr.com
2. Clearly specify which right you wish to exercise
3. Provide sufficient information to verify your identity
4. Describe your request in detail

5. Data We Collect

For GDPR purposes, we collect and process the following categories of personal data:

5.1 Identity Data

• Username (may be pseudonymous)
• Email address (if provided)
• Account creation date

5.2 Usage Data

• Session information
• Feature usage
• Interactions with the platform
• Device and browser information

5.3 Content Data

5.4 Technical Data

• IP address (may be considered personal data)
• Device identifiers
• Browser type and version
• Operating system

6. Data Retention

We retain personal data only for as long as necessary to:

• Provide the Service
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal purposes.

7. Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the European Commission
• Other appropriate safeguards as required by GDPR

8. Data Protection Officer

As a free service, we may not be required to appoint a Data Protection Officer (DPO) under GDPR Article 37. However, for privacy inquiries and GDPR-related requests, please contact:

9. Right to Lodge a Complaint

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection authority (supervisory authority). You can find your local authority at:

10. Automated Decision-Making

We do not use automated decision-making, including profiling, that produces legal effects or significantly affects you, except where:

• It is necessary for entering into or performing a contract
• You have given explicit consent
• It is authorized by EU or Member State law

11. Children's Data

InsRoom VR is not intended for users under the age of 16 (or the age of consent in your Member State). We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

12. Updates to This GDPR Information

We may update this GDPR information page from time to time to reflect changes in our practices or legal requirements. We will notify users of material changes by updating the "Last Updated" date.

13. Contact Information