GDPR Compliance Notice

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contractual Necessity — Processing required to fulfil diagnostic audit and consulting engagements.
• Legitimate Interest — Website analytics, security monitoring, and business development communications.
• Consent — Cookie placement (non-essential) and marketing communications, where applicable.

Your Rights Under GDPR

If you are in the European Economic Area (EEA), you have the right to:

• Access — Request a copy of the personal data we hold about you.
• Rectification — Request correction of inaccurate or incomplete data.
• Erasure — Request deletion of your personal data (“right to be forgotten”).
• Restriction — Request restriction of processing in certain circumstances.
• Portability — Receive your data in a structured, machine-readable format.
• Object — Object to processing based on legitimate interest.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 calendar days.

International Data Transfers

Adommo is based in the United States. When we process data from EEA residents, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate data protection during cross-border transfers.

Data Retention

We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy. Diagnostic audit data is purged within 14 calendar days of engagement completion. Contact form submissions are retained for up to 2 years unless deletion is requested.

Supervisory Authority

EEA residents have the right to lodge a complaint with their local data protection supervisory authority if they believe their data has been processed unlawfully.