GDPR Compliance

Your data rights under the General Data Protection Regulation

Last updated: March 2024

1. Introduction

ILLUSORY is fully committed to compliance with the General Data Protection Regulation (GDPR). This page explains how we protect your rights as a data subject and how we handle your personal data in accordance with GDPR.

2. Your Rights Under GDPR

If you are a resident of the European Union, you have the following rights regarding your personal data:

Right to Access

You have the right to request access to the personal data we hold about you at any time.

Right to Rectification

You can request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances (the "right to be forgotten").

Right to Restrict Processing

You can request that we limit how we use your personal data in certain situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You can object to our processing of your personal data for direct marketing or other legitimate interests.

Right to Lodge a Complaint

If you believe we have violated your GDPR rights, you can lodge a complaint with your local data protection authority.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Consent: Where you have explicitly agreed to specific processing
  • Contract: Where processing is necessary to perform our services to you
  • Legal Obligation: Where we are required by law to process your data
  • Legitimate Interests: Where we have a legitimate interest in processing your data

4. Data Protection Officer

ILLUSORY has appointed a Data Protection Officer (DPO) to oversee GDPR compliance. You can contact our DPO at: dpo@illusory.com

5. International Data Transfers

If you are based in the EU, please note that your data may be transferred to countries outside the EU. We ensure that such transfers are protected by appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs)
  • Binding Corporate Rules (BCRs)
  • Adequacy decisions

6. Data Retention

We retain your personal data for as long as necessary to provide our services and fulfill the purposes outlined in our Privacy Policy. When data is no longer needed, we securely delete or anonymize it.

7. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant data protection authority within 72 hours of becoming aware of the breach, in accordance with GDPR requirements.

8. Exercising Your Rights

To exercise any of your GDPR rights, please send a written request to:

We will respond to your request within 30 days (or up to 90 days for complex requests) in accordance with GDPR requirements.

9. GDPR Updates

This GDPR compliance page may be updated periodically to reflect changes in our practices or regulations. We encourage you to review it regularly to stay informed about your rights and our obligations.

10. Questions?

If you have any questions about our GDPR compliance or your data protection rights, please don't hesitate to contact us at: privacy@illusory.com