Picaii GDPR Risk Policy

Picaii is committed to ensuring the security and protection of personal data that we process, and to provide a compliant and consistent approach to data protection. This policy covers the measures we take to protect personal data and our compliance with the General Data Protection Regulation (GDPR).

Data Protection Officer (DPO)

Picaii has appointed a Data Protection Officer (DPO) to oversee our data protection responsibilities. The DPO can be contacted at info@picaii.com.

Legal Basis for Processing Personal Data

We collect and process personal data only where we have a legal basis for doing so under GDPR. The legal basis for processing personal data is outlined in our Privacy Policy.

Data Security

Picaii takes the security of personal data seriously and has implemented appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of personal data. We use encryption and access controls to protect personal data, and our employees are trained on data protection and privacy.

Data Retention

We retain personal data for no longer than is necessary for the purposes for which it was collected. The retention period for personal data is outlined in our Privacy Policy.

Data Subject Rights

Individuals have rights under GDPR in relation to their personal data, including the right to access, rectify, erase, restrict, and object to processing of personal data. We have processes in place to handle data subject requests and have published information about these processes in our Privacy Policy.

Third Parties

We may share personal data with third-party service providers, including cloud service providers and payment processors. We require these providers to protect personal data and only use it for the purposes for which it was shared. We have entered into data processing agreements with these providers to ensure compliance with GDPR.


© 2023 Picaii. All rights reserved.