>

GDPR Compliance Notice

Information about your data protection rights under GDPR

Your Rights Under GDPR

As a user in the European Economic Area (EEA), you have the following rights:

1. Right to Access

You can request access to all personal data we hold about you, including:

• Account information
• Transcripts and projects
• Usage logs

2. Right to Rectification

You can update your account information at any time through your account settings.

3. Right to Erasure ("Right to be Forgotten")

You can request complete deletion of your account and all associated data by contacting support.

4. Right to Restrict Processing

You can request that we limit how we process your data in certain circumstances.

5. Right to Data Portability

You can export your transcripts in machine-readable formats (DOCX) at any time.

6. Right to Object

You can object to certain types of data processing, such as automated decision-making.

7. Rights Related to Automated Decision-Making

We use AI for transcription, but you maintain control over the content and results. You can:

• Review and edit transcripts
• Delete results you don't want
• Choose whether to use speaker identification features

Legal Basis for Processing

We process your data based on:

• Contract Performance: To provide the transcription service you signed up for
• Legitimate Interest: To improve our service and prevent fraud
• Consent: For optional features like speaker identification

Data Protection Officer

For GDPR-related inquiries, please contact our Data Protection Officer at: support@qualscribe.com

Data Transfers

Our servers are located in the United Kingdom.

Your data may be transferred to:

• OpenAI (USA): For speaker identification services only
• We ensure appropriate safeguards are in place for international transfers

Data Breach Notification

In the event of a data breach that affects your rights, we will:

• Notify you within 72 hours
• Inform relevant supervisory authorities
• Provide details about the breach and mitigation steps

Data Minimization

We practice data minimization by:

• Only collecting necessary account information
• Automatically deleting uploaded media files after processing
• Not using tracking or advertising technologies

How to Exercise Your Rights

To exercise any of your GDPR rights:

1. Contact us at support@qualscribe.com
2. Specify which right you wish to exercise
3. Provide proof of identity
4. We will respond within 30 days

Supervisory Authority

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

Children's Data

We do not knowingly process data from individuals under 16 years of age without parental consent.

Updates to This Notice

We will notify you of any material changes to our GDPR compliance practices.