Overview
Mijra is committed to compliance with the General Data Protection Regulation (GDPR). We process personal data in accordance with GDPR requirements and respect the rights of individuals regarding their personal data.
1Legal basis for processing
We process personal data under the following legal bases:
- Contract — processing necessary to fulfil our contractual obligations to provide services;
- Legitimate interests — such as improving services and preventing fraud;
- Consent — processing based on your explicit consent for specific purposes such as marketing communications;
- Legal obligation — processing required to comply with the law.
2Your rights under GDPR
As a data subject, you have the following rights:
- Right of access — you can request copies of your personal data.
- Right to rectification — you can request correction of inaccurate or incomplete data.
- Right to erasure — you can request deletion of your personal data under certain conditions.
- Right to restrict processing — you can request limitation of processing under certain circumstances.
- Right to data portability — you can request transfer of your data to another organization.
- Right to object — you can object to processing based on legitimate interests or direct marketing.
- Automated decision-making — you have rights regarding automated decision-making and profiling.
3How to exercise your rights
To exercise any of your GDPR rights, please:
- Send an email to [email protected] with your request;
- Include proof of identity (for security purposes);
- Clearly state which right(s) you wish to exercise.
We will respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months.
4International transfers
When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place:
- Standard Contractual Clauses approved by the European Commission;
- Adequacy decisions for certain countries;
- Binding Corporate Rules where applicable.
5Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:
| Data | Retention period |
|---|---|
| Account data | Retained while the account is active, plus 90 days after deletion. |
| Transaction records | Retained for 7 years for tax and accounting purposes. |
| Marketing data | Retained until consent is withdrawn. |
| Support tickets | Retained for 3 years for quality assurance. |
6Data Protection Officer
We have appointed a Data Protection Officer (DPO) to oversee our GDPR compliance. You can contact our DPO regarding any questions about our processing of your personal data.
7Supervisory authority
You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your residence, place of work, or place of alleged infringement.
8Contact us
For GDPR-related inquiries, please contact [email protected].