GDPR Compliance Statement

Ciotx Private Limited ensures that Proctorview complies with the EU General Data Protection Regulation (GDPR) for all users within the European Economic Area (EEA).

1. Roles under GDPR

Institutions (Clients) = Data Controllers

Ciotx Private Limited (Proctorview) = Data Processor

2. Lawful Basis of Processing

We process personal data under:

• Consent (users agreeing to monitoring).
• Contractual Necessity (service delivery).
• Legitimate Interest (exam security).
• Legal Obligation (compliance with law).

3. GDPR Data Subject Rights

Users have rights to:

• Access their personal data.
• Request rectification or deletion.
• Restrict or object to processing.
• Data portability (structured format).
• Withdraw consent at any time.

📧 Requests can be sent to: gdpr@ciotx.com

4. Data Retention

Data is retained only for the necessary period (maximum 90 days) before secure deletion.

5. Data Transfers

If data is transferred outside the EEA, we use Standard Contractual Clauses (SCCs) and GDPR-compliant hosting.

6. Breach Notification

In case of a data breach, we will notify institutions (controllers) within 72 hours.

7. Data Protection Officer (DPO)

A DPO oversees GDPR compliance. Contact: 📧 dpo@proctorview.com