GDPR & Data Protection

1. Our Commitment

We process personal data lawfully, fairly, and transparently, collect it for specified purposes, keep it accurate and no longer than necessary, and protect it with appropriate security. Escoutly, operated by Grand Minds Technology, is the data controller.

2. Legal Bases for Processing

We rely on one or more of the following legal bases under Article 6 GDPR:

• performance of a contract with you;
• your consent (which you may withdraw at any time);
• our legitimate interests (e.g. security, fraud prevention, and service improvement), balanced against your rights; and
• compliance with a legal obligation.

3. Your Rights Under the GDPR

You have the right to:

• be informed about how your data is used;
• access your data and receive a copy;
• rectification of inaccurate or incomplete data;
• erasure of your data in certain circumstances;
• restrict processing in certain circumstances;
• data portability;
• object to processing based on legitimate interests or for direct marketing; and
• not be subject to a decision based solely on automated processing that produces legal or similarly significant effects.

4. How to Exercise Your Rights

You can manage much of your data directly in your dashboard (download your data, update your profile, delete your account), or contact dpo@escoutly.com. We will respond within one month, free of charge for reasonable requests; we may verify your identity before acting.

5. Automated Decision-Making & AI

We use AI to provide recommendations, search ranking, and price estimates. These are decision-support tools and do not produce legal or similarly significant effects without human involvement. AI outputs are informational and should be independently verified.

6. International Transfers

Where we transfer personal data outside the EEA, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses or transfers to countries with an adequacy decision.

7. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected and to meet legal obligations, after which it is deleted or anonymised.

8. Right to Complain

If you are in the EU/EEA, you have the right to lodge a complaint with your local supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD, www.aepd.es). We would, however, appreciate the chance to address your concerns first — please contact dpo@escoutly.com.

9. Contact

Data Protection Officer: dpo@escoutly.com. General privacy enquiries: privacy@escoutly.com.