GDPR Compliance

Last Updated: June 5, 2026

Our Commitment to GDPR

ridge-bear is committed to protecting the privacy and personal data of all individuals, including those protected under the General Data Protection Regulation (GDPR). This page outlines our GDPR compliance measures and your rights under this regulation.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
• Legal obligation: Processing is necessary for us to comply with the law
• Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those interests

Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right to be Informed

You have the right to be informed about the collection and use of your personal data. This includes information about purposes, retention periods, and who it will be shared with.

Right of Access

You have the right to access your personal data and receive information about how we process it. You can request a copy of the personal data we hold about you.

Right to Rectification

You have the right to have inaccurate personal data corrected or completed if it is incomplete.

Right to Erasure

Also known as the "right to be forgotten," you have the right to request deletion of your personal data in certain circumstances.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to obtain and reuse your personal data for your own purposes across different services. You can request that we transfer your data to another organization or directly to you in a structured, commonly used, and machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests or the performance of a task in the public interest, direct marketing, and processing for scientific or historical research purposes.

Rights Related to Automated Decision Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

We will respond to your request within one month, though this may be extended by two additional months if the request is complex or if we receive multiple requests. We will inform you if such an extension is necessary.

Data Protection Officer

For questions specifically related to data protection and GDPR compliance, you may contact our data protection contact at [email protected]

Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data
• Regular security assessments and testing
• Access controls and authentication procedures
• Staff training on data protection
• Confidentiality agreements with employees and contractors
• Secure backup and disaster recovery procedures

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible.

International Data Transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Transfers to countries with an adequacy decision
• Binding corporate rules

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the purpose for processing.

For legacy preservation services, retention periods are determined by the terms of your service agreement.

Children's Data

Our services are not directed at children under 16 years of age. We do not knowingly collect or process personal data from children. If we become aware that we have collected data from a child without appropriate consent, we will take steps to delete that information.

Right to Lodge a Complaint

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority, particularly in the EU member state where you reside, work, or where the alleged infringement occurred.

Changes to This Policy

We may update this GDPR compliance statement from time to time. We will notify you of any material changes by posting the updated statement on our website. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

For any questions regarding this GDPR compliance statement or to exercise your rights, please contact us: