This statement explains how Jasper Tech Labs handles the personal data of visitors and customers located in the European Union (EU) and European Economic Area (EEA) in accordance with the General Data Protection Regulation (GDPR). It supplements our main Privacy Policy.
1. Data controller
For personal data we determine the purposes and means of processing, the data controller is Jasper Tech Labs (India), the operator of RipeX. You can contact us at info@jaspertechlabs.com or +91 93265 24052. Where you use RipeX to process personal data of your own customers, you are the controller and we act as your processor.
2. Lawful bases for processing (Art. 6)
We process personal data of EU/EEA individuals on one or more of the following lawful bases:
- Contract — to provide the RipeX service you have subscribed to and to manage your account and billing;
- Consent — where you have given consent, for example to non-essential cookies or certain communications (you may withdraw it at any time);
- Legitimate interests — to secure, maintain and improve the platform and prevent fraud, balanced against your rights; and
- Legal obligation — where processing is necessary to comply with applicable law.
3. Your rights as a data subject
If you are in the EU/EEA, you have the right to:
- Access — obtain confirmation of, and a copy of, the personal data we hold about you;
- Rectification — have inaccurate or incomplete data corrected;
- Erasure — request deletion of your data ("right to be forgotten") where applicable;
- Restriction — ask us to limit processing in certain circumstances;
- Portability — receive your data in a structured, commonly used, machine-readable format;
- Objection — object to processing based on legitimate interests or for direct marketing; and
- Withdraw consent — at any time, without affecting processing carried out before withdrawal.
4. International transfers
RipeX is operated from India. Where personal data of EU/EEA individuals is transferred outside the EEA, we rely on appropriate safeguards recognised under the GDPR, such as the European Commission’s Standard Contractual Clauses (SCCs) or an applicable adequacy decision, together with additional technical and organisational measures where needed.
5. Data retention
We keep personal data only for as long as necessary for the purposes for which it was collected, to provide the service, and to meet legal, tax and accounting obligations. When it is no longer required, we delete or anonymise it.
6. Right to lodge a complaint
You have the right to lodge a complaint with your local supervisory authority (Data Protection Authority) if you believe our processing of your personal data infringes the GDPR. We would, however, appreciate the chance to address your concerns first — please contact us before you do.
7. How to exercise your rights
To exercise any of the rights above, contact us at info@jaspertechlabs.com. We may need to verify your identity before responding, and we will reply within the timeframes required by the GDPR (generally within one month). For full details of what we collect and why, please read our Privacy Policy.