GDPR

Effective Date: September 2025

Dr Greg Mahr (“Greg Mahr,” “we,” “our,” or “us”) is committed to protecting the privacy and personal data of individuals in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”). This page outlines how we collect, process, store, and protect personal data of individuals located in the European Economic Area (EEA).

Who We Are

Greg Mahr
Email: gregmahr@gmail.com
Website: [www.gregmahr.com]
Data Protection Officer: gregmahr@gmail.com

Lawful Basis for Processing

We collect and process personal data only when we have a lawful basis to do so under GDPR, including:

Consent – You have given clear consent for us to process your personal data for a specific purpose.
Contractual necessity – Processing is necessary for a contract we have with you.
Legal obligation – We must comply with a legal requirement.
Legitimate interests – We process your data in ways you would reasonably expect and which have minimal privacy impact.

Types of Personal Data Collected

We may collect the following categories of personal data:

Name, email address, phone number
Company and job title (if applicable)
Browser/device information
Communication preferences
Any personal data provided through forms or email correspondence

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

Right to access – You can request a copy of the personal data we hold about you.
Right to rectification – You can request correction of inaccurate or incomplete data.
Right to erasure (“right to be forgotten”) – You can request that we delete your personal data.
Right to restrict processing – You can request limited processing of your data.
Right to data portability – You can request that we transfer your data to another organization.
Right to object – You can object to processing based on our legitimate interests or direct marketing.

To exercise these rights, please contact us at gregmahr@gmail.com.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal, contractual, or regulatory obligations.

International Data Transfers

If personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place, such as:

Standard Contractual Clauses approved by the European Commission
Transfers to countries deemed to provide adequate levels of data protection

Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

Third-Party Processors

We may share data with trusted third-party service providers who act as data processors and assist us with business operations (e.g., web hosting, email marketing, analytics). All processors are bound by data protection agreements.

Cookies and Tracking

We use cookies and similar technologies to enhance user experience and analyze website usage. You can manage your cookie preferences via your browser settings.

Filing a Complaint

If you believe we have not adequately protected your data rights, you have the right to lodge a complaint with your local data protection authority. You can find your supervisory authority here: https://edpb.europa.eu/about-edpb/board/members_en

If you have questions about this GDPR Statement or your data, please contact:

Greg Mahr
Email: gregmah@gmail.com
Subject: GDPR Request