GDPR Compliance
Your data protection rights under the General Data Protection Regulation
Last updated: July 5, 2025
Our Commitment to GDPR
AgilWave is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR). We have implemented appropriate technical and organizational measures to ensure compliance and protect your personal information.
GDPR Principles We Follow
Lawfulness, Fairness, and Transparency
We process personal data lawfully, fairly, and transparently.
Purpose Limitation
We collect data for specified, explicit, and legitimate purposes only.
Data Minimization
We process only the minimum amount of data necessary for our purposes.
Accuracy
We keep personal data accurate and up to date.
Storage Limitation
We retain personal data only as long as necessary.
Integrity and Confidentiality
We ensure appropriate security of personal data.
Accountability
We demonstrate compliance with GDPR principles.
Legal Bases for Processing
Consent
You have given clear consent for us to process your personal data for specific purposes (e.g., newsletter subscription).
Contract
Processing is necessary for the performance of a contract with you or to take steps to enter into a contract.
Legal Obligation
Processing is necessary for compliance with a legal obligation.
Legitimate Interests
Processing is necessary for our legitimate interests, provided your rights and freedoms are not overridden.
Your Rights Under GDPR
Right to be Informed
You have the right to know how your personal data is being collected, used, and processed.
- We provide clear and transparent information about our data processing activities
- This information is available in our Privacy Policy and data collection notices
- We inform you at the time of data collection about the purposes and legal basis for processing
Right of Access
You have the right to access your personal data and receive information about how it's being processed.
- Request a copy of the personal data we hold about you
- Receive information about the purposes of processing
- Know the categories of data we process and how long we retain it
- Learn about data recipients and international transfers
Right to Rectification
You have the right to have inaccurate or incomplete personal data corrected.
- Request correction of inaccurate personal data
- Request completion of incomplete personal data
- We will correct or complete your data without undue delay
- We will inform relevant third parties of any corrections made
Right to Erasure (Right to be Forgotten)
You have the right to have your personal data deleted in certain circumstances.
- Request deletion when data is no longer necessary for the original purpose
- Withdraw consent where processing was based on consent
- Object to processing and there are no overriding legitimate grounds
- Data has been unlawfully processed
Right to Restrict Processing
You have the right to limit how we use your personal data in certain circumstances.
- Contest the accuracy of personal data during verification
- Processing is unlawful but you prefer restriction over erasure
- We no longer need the data but you need it for legal claims
- You have objected to processing pending verification of legitimate grounds
Right to Data Portability
You have the right to receive your personal data in a machine-readable format.
- Receive your data in a structured, commonly used format
- Transmit your data to another controller where technically feasible
- Applies when processing is based on consent or contract
- Only applies to data you have provided to us
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us using the information below. We will respond to your request within one month (or two months for complex requests).
When contacting us, please provide sufficient information to allow us to verify your identity and locate your personal data. This helps us protect your information from unauthorized access.
Required Information:
- • Full name and contact information
- • Specific right you wish to exercise
- • Details about the data or processing in question
- • Any relevant reference numbers or dates
International Data Transfers
When we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place to protect your data, including:
- Adequacy decisions by the European Commission
- Standard Contractual Clauses approved by the European Commission
- Binding Corporate Rules where applicable
Contact Our Data Protection Officer
For any questions about GDPR compliance, to exercise your rights, or to file a complaint, please contact us:
Data Protection Inquiries:
Email: dpo@agilwave.com
Privacy Email: privacy@agilwave.com
General Contact: info@agilwave.com
Contact Details:
Phone: +94 74 330 3318
Address: Sri Lanka
Response Time: Within 1 month
Right to Lodge a Complaint
If you believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with your local data protection supervisory authority. You can also contact us directly to resolve any concerns before escalating to a supervisory authority.