Data Privacy Protection Act for Marketing, Consulting and Networking Company Leadaxels Inc

Preamble:

In recognition of the fundamental right to privacy and the protection of personal data enshrined in the European Union Charter of Fundamental Rights, LEADAXELS INC, herein referred to as "the Company," is committed to upholding the highest standards of data privacy and protection. This Act aims to establish clear guidelines and regulations for the responsible collection, processing, and management of personal data by the Company in its marketing, consulting, and networking activities within the European Union (EU).

Section 1: Definitions

• 1.1. Personal Data: Any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
• 1.2. Data Controller: The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
• 1.3. Data Processor: A natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
• 1.4. Consent: Any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
• 1.5. Processing: Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

Section 2: General Principles of Data Privacy

• 2.1. Lawfulness, Fairness, and Transparency: The processing of personal data by the Company shall be lawful, fair, and transparent to the data subject.
• 2.2. Purpose Limitation: Personal data shall be collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
• 2.3. Data Minimization: Personal data collected by the Company shall be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
• 2.4. Accuracy: Personal data shall be accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay.
• 2.5. Storage Limitation: Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
• 2.6. Integrity and Confidentiality: Personal data shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.

Section 3: Data Subject Rights and Consent

• 3.1. Right to Information: Data subjects shall have the right to be informed about the collection and use of their personal data.
• 3.2. Right of Access: Data subjects shall have the right to access their personal data and obtain information about how it is being processed.
• 3.3. Right to Rectification: Data subjects shall have the right to request the rectification of inaccurate or incomplete personal data.
• 3.4. Right to Erasure: Data subjects shall have the right to request the erasure of their personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
• 3.5. Right to Restriction of Processing: Data subjects shall have the right to request the restriction of processing of their personal data under certain circumstances, such as when the accuracy of the data is contested by the data subject.
• 3.6. Right to Data Portability: Data subjects shall have the right to receive their personal data in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.
• 3.7. Right to Object: Data subjects shall have the right to object to the processing of their personal data under certain circumstances, such as when the processing is based on legitimate interests or for direct marketing purposes.
• 3.8. Consent: The Company shall obtain explicit consent from data subjects before processing their personal data for any purpose, and such consent shall be freely given, specific, informed, and unambiguous.

Section 4: Data Processing Practices

• 4.1. Lawful Basis for Processing: The Company shall only process personal data if there is a lawful basis for doing so, such as the consent of the data subject, compliance with a legal obligation, the performance of a contract, or the protection of vital interests.
• 4.2. Data Security Measures: The Company shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
• 4.3. Data Breach Notification: In the event of a personal data breach, the Company shall notify the relevant supervisory authority without undue delay and, where feasible, not later than 72 hours after having become aware of it, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons.
• 4.4. Data Transfer: The transfer of personal data to third countries or international organizations shall only take place if the necessary safeguards are in place to ensure an adequate level of protection for the personal data.

Section 5: Accountability and Compliance

• 5.1. Data Protection Impact Assessments: The Company shall conduct data protection impact assessments for processing activities that are likely to result in a high risk to the rights and freedoms of data subjects.
• 5.2. Data Protection Officer: The Company shall appoint a Data Protection Officer (DPO) who shall oversee compliance with data protection laws and regulations and act as a point of contact for data subjects and supervisory authorities.
• 5.3. Record-Keeping: The Company shall maintain records of its processing activities, including the purposes of processing, categories of personal data processed, and data retention periods.
• 5.4. Training and Awareness: The Company shall provide regular training to employees involved in the processing of personal data and raise awareness about data protection issues.
• 5.5. Cooperation with Supervisory Authorities: The Company shall cooperate with supervisory authorities in the performance of their tasks and provide them with the information necessary for the exercise of their functions.

Section 6: Enforcement and Penalties

• 6.1. Supervisory Authority: The supervisory authority shall be responsible for monitoring and enforcing compliance with this Act and may impose administrative fines or other penalties for non-compliance.
• 6.2. Administrative Fines: The supervisory authority may impose administrative fines on the Company for infringements of this Act, depending on the nature, gravity, and duration of the infringement.
• 6.3. Judicial Remedies: Data subjects shall have the right to seek judicial remedies against the Company for violations of their rights under this Act.

Section 7: Final Provisions

• 7.1. Effective Date: This Act shall come into effect on 05/02/2024.
• 7.2. Review and Amendment: This Act shall be reviewed periodically and may be amended as necessary to ensure its effectiveness.

This Europe Data Privacy Protection Act for Marketing, Consulting, and Networking Company LEADAXELS INC is hereby enacted and shall be binding upon the Company from the Effective Date 05/02/2024.