[back_to
_home] GDPR Compliance Statement
At Restapr, we are fully committed to protecting the privacy and personal data of our clients, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
1. Data Controller & Data Processor Roles
Restapr acts as a Data Processor when handling any images, files, or content submitted by clients that may include personal data (e.g., identifiable faces, interior spaces, staff members). The client, as the uploader and owner of the original data, acts as the Data Controller and is responsible for ensuring that they have the legal right to share and process such data with us.
2. Purpose and Legal Basis of Processing
We process visual data and any associated metadata solely for the purpose of delivering our image enhancement and content generation services. Our legal basis for processing is legitimate interest and contractual necessity, as this processing is essential to providing the agreed-upon services.
3. Data Minimization & Retention
Only the minimum data required to perform our services is collected and stored. Uploaded content and processed visuals are stored securely and retained only for as long as necessary to:
Provide active service to the client;
Comply with legal or contractual obligations;
Support quality assurance and content integrity.
Clients may request deletion of their original content or generated visuals at any time by contacting us at: support@restapr.com
4. Data Transfers
Restapr may process and store data on secure servers located in the EU or in countries recognized by the EU Commission as providing adequate levels of data protection. In the case of any third-country processing, standard contractual clauses (SCCs) or other approved safeguards will be in place.
5. Data Subject Rights
Under GDPR, clients and data subjects whose data may be included in the uploaded visuals have the right to:
Access, correct, or delete their personal data;
Object to processing or request restriction;
Data portability;
File a complaint with a supervisory authority.
Requests can be submitted to our Data Protection Officer (DPO) via support@restapr.com
6. Security Measures
We use industry-standard encryption, access controls, and audit logs to ensure that all data is handled securely and that unauthorized access is prevented.