GDPR Compliance Statement – NxtEdge Technologies

NxtEdge Technologies has always respected and upheld its users’ rights to privacy and data protection. In alignment with this commitment, we have implemented comprehensive measures to ensure our operations and services comply with the General Data Protection Regulation (GDPR).

What is GDPR?

The General Data Protection Regulation (GDPR) is a European Union (EU) privacy and data protection law that governs the collection, processing, and storage of personal data of EU residents.

This regulation:

• Grants individuals more control over their personal data

• Imposes specific responsibilities on organizations that process such data

• Applies to all organizations handling EU personal data, regardless of location

What is Personal Data?

Personal data includes any information that relates to an identified or identifiable individual. This may include, but is not limited to:

• Names

• Email addresses

• Identification numbers

• Location data

• Any data that can be linked to a specific person

Our GDPR Readiness and Measures

To ensure compliance with GDPR, NxtEdge Technologies has taken the following actions:

• Organization-wide awareness and training programs on GDPR and data privacy

• Product-level GDPR assessments for all services and solutions

• Development of an internal Information Management Document (IMD) for compliance tracking

• Comprehensive evaluation of all sub-processors to ensure GDPR alignment

• Appointment of privacy champions across functional teams

• Adoption of the ‘privacy by design and default’ principle in software development

• Revision of our Data Processing Addendum (DPA) to reflect GDPR standards

• Execution of Data Protection Impact Assessments (DPIAs) for risk analysis

• Regular internal audits to monitor compliance across operations and products

• Upgrades to data security protocols based on audit findings

• Database hygiene including cleanup of outdated or unnecessary records

• Establishment of a Privacy Incident Response Policy for timely breach handling

• Updates to our Privacy Policy to fully reflect GDPR-aligned practices