GDPR Compliance Statement
Last Updated: June 15, 2025
DirectoryNest Blog ("we," "our," or "us") is committed to complying with the General Data Protection Regulation (GDPR) (EU) 2016/679. This statement outlines our approach to GDPR compliance for our website directorynest.biz (the "Site").
1. Data Controller
DirectoryNest Blog is the data controller for personal data processed through our Site. Our contact details are:
Email: privacy@directorynest.biz
Address: 1092, Jody Road, Ridley Park, PA 19078
2. Lawful Basis for Processing
We process personal data under the following lawful bases:
- Consent: For marketing communications and non-essential cookies
- Contract: To provide our services to users
- Legitimate interests: For website security and improvement
- Legal obligation: When required by applicable laws
3. Data Subject Rights
Under GDPR, EU residents have the following rights regarding their personal data:
Right to Access
You may request a copy of your personal data we hold.
Right to Rectification
You may request correction of inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten")
You may request deletion of your personal data under certain circumstances.
Right to Restriction of Processing
You may request we limit how we use your personal data.
Right to Data Portability
You may request a copy of your data in a structured, machine-readable format.
Right to Object
You may object to certain types of processing, such as direct marketing.
Right Not to be Subject to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing.
To exercise these rights, please contact us at privacy@directorynest.biz.
4. Data Protection Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit and at rest
- Regular security assessments
- Access controls and authentication mechanisms
- Data minimization principles
5. Data Transfers Outside the EU
We may transfer personal data outside the European Economic Area (EEA). When we do, we ensure appropriate safeguards are in place, such as:
- EU Standard Contractual Clauses
- Privacy Shield certification (for US-based providers)
- Binding Corporate Rules
6. Data Protection Officer
We have appointed a Data Protection Officer (DPO) who can be contacted at:
Email: dpo@directorynest.biz
Address: 1092, Jody Road, Ridley Park, PA 19078
7. Data Breach Notification
In the event of a personal data breach that poses a risk to individuals' rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay.
8. Records of Processing Activities
We maintain records of our data processing activities as required by Article 30 of the GDPR.
9. Third-Party Processors
We use carefully selected third-party processors who meet GDPR requirements. Our agreements with processors include data protection clauses required by Article 28 of the GDPR.
10. Updates to This Statement
We may update this GDPR Compliance Statement from time to time. We will notify you of significant changes through the Site or by email.
11. Contact Us
If you have any questions about our GDPR compliance, please contact us at:
Email: privacy@directorynest.biz
Address: 1092, Jody Road, Ridley Park, PA 19078