GDPR Compliance Statement

Data Controller: Ponnuri Book Community Platform

Contact: gdpr@ponnuribook.com

Data Protection Officer: DPO, Ponnuri Book

We process personal data based on:

• Consent: When you explicitly agree to data processing
• Contract: To fulfill our services to you
• Legal Obligation: To comply with laws and regulations
• Legitimate Interests: For platform security and improvement

3.1 Right to Access

You can request copies of your personal data.

3.2 Right to Rectification

You can request correction of inaccurate data.

3.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data.

3.4 Right to Restrict Processing

You can request restriction of data processing.

3.5 Right to Data Portability

You can request transfer of your data to another organization.

3.6 Right to Object

You can object to certain types of processing.

3.7 Rights Related to Automated Decision Making

You have rights regarding automated processing and profiling.

Data Category	Purpose	Retention Period
Account Information	User identification and authentication	Until account deletion + 30 days
Profile Data	Community networking	Until account deletion
Payment Information	Transaction processing	7 years for tax purposes
Activity Logs	Security and analytics	1 year

We may transfer data outside the EU with appropriate safeguards:

• Standard Contractual Clauses
• Adequacy Decisions
• Consent for specific transfers

In case of a data breach, we will:

• Notify supervisory authorities within 72 hours
• Inform affected users without undue delay
• Take immediate remedial actions

To exercise your GDPR rights:

1. Submit a request through your account settings
2. Email us at gdpr@ponnuribook.com
3. Use our Data Subject Access Request form

We will respond within 30 days, free of charge.