GDPR Compliance

1. Introduction

Wilby.ai is committed to protecting the personal data of individuals in the European Union (EU) and European Economic Area (EEA) in accordance with the General Data Protection Regulation (GDPR). This page explains your rights and our obligations under GDPR.

2. Data Controller

Wilby.ai acts as the data controller for personal data collected through our services. We determine the purposes and means of processing your personal data and are responsible for ensuring compliance with GDPR.

3. Lawful Basis for Processing

Under GDPR Article 6, we process personal data based on:

• Consent: You have given clear consent for us to process your personal data
• Contract: Processing is necessary for a contract we have with you
• Legal Obligation: Processing is necessary to comply with the law
• Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party

4. Your Rights Under GDPR

As an EU/EEA resident, you have the following rights:

• Right of Access (Article 15): Request access to your personal data
• Right to Rectification (Article 16): Request correction of inaccurate data
• Right to Erasure (Article 17): Request deletion of your data ("right to be forgotten")
• Right to Restriction (Article 18): Request restriction of processing
• Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format
• Right to Object (Article 21): Object to processing based on legitimate interests
• Rights Related to Automated Decision-Making (Article 22): Not be subject to decisions based solely on automated processing

5. International Data Transfers

When we transfer personal data outside the EU/EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other legally recognized transfer mechanisms.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, it is securely deleted or anonymized.

7. Data Protection Officer

For GDPR-related inquiries, you may contact us using the details below. We are committed to responding to all legitimate requests within one month.

8. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your residence, place of work, or place of the alleged infringement.

9. Contact Us

To exercise your GDPR rights or for any data protection inquiries, please contact us: