GDPR

GDPR Compliance

Your data, your rights. How Lither ensures full compliance with EU data protection regulations. Last updated: March 1, 2026.

Your Rights Under GDPR

Right to Access

Request a copy of all personal data we hold about you. We respond within 30 days.

Right to Rectification

Correct any inaccurate or incomplete personal data in your account.

Right to Erasure

Request deletion of your personal data (right to be forgotten). Completed within 30 days.

Right to Restrict Processing

Limit how we process your data while we address your concerns.

Right to Data Portability

Receive your data in a structured, machine-readable format (JSON/CSV).

Right to Object

Object to processing based on legitimate interest or for direct marketing purposes.

Right to Withdraw Consent

Withdraw consent at any time for processing that relies on your consent, such as marketing.

Right to Lodge a Complaint

Lodge a complaint with a supervisory authority if you believe your data rights have been infringed.

Our GDPR Measures

Data Protection Officer (DPO) appointed
Privacy Impact Assessments for new features
Data Processing Agreements with all sub-processors
72-hour breach notification process
Regular staff training on data protection
Data minimization and purpose limitation
Encryption at rest and in transit
EU-only data residency (Frankfurt, Amsterdam)

Data Protection Officer

Our DPO oversees all data protection activities and is your primary contact for GDPR-related inquiries.

winston.van.der.pol@fastlane.ee

Supervisory Authority

You have the right to lodge a complaint with your local data protection authority. Our lead authority is:

Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)
Tatari 39, 10134 Tallinn, Estonia
https://www.aki.ee/en

Exercise Your Rights

Contact our DPO to exercise any of your GDPR rights. We respond within 30 days.