SIN-AUTO's Legal Framework for Data Protection: Lawful Bases and Cross-Border Compliance
Trust in international trade is built on clear rules, and the same applies to data. This update completes our privacy policy series by explaining the legal framework behind our data processing: the lawful bases we rely on, how we manage cross-border data handling in our global business, and where you can turn with questions. It complements our earlier updates on data transfers and data transparency.
The Lawful Bases We Rely On
We process personal information only where we have a proper legal basis under applicable law. Most of our processing falls into three categories: performing a contract - for example, responding to your inquiry, preparing quotes or processing an export order; legitimate interests - such as keeping our website secure, preventing fraud and improving our services; and consent, where we ask for it before sending marketing communications or using non-essential cookies. Where we rely on consent, you may withdraw it at any time without affecting the services we provide to you.
Cross-Border Data Handling in a Global Business
As an international exporter serving buyers across regions, some personal information may be processed across borders - for example, when our team responds to an inquiry from abroad or when data is stored with service providers in different jurisdictions. We handle such transfers in line with applicable data protection law, including appropriate safeguards and contractual protections, and we keep our service providers bound by confidentiality and security obligations. Where European or other specific data protection regimes apply, we follow the mechanisms those regimes require.
How We Respond to Authorities and Requests
We process requests from courts, regulators and law enforcement only where legally required and within the scope permitted by law. We review each request carefully, verify its legal basis, and disclose only the minimum information necessary. We do not sell personal information, and we do not share data for purposes incompatible with this policy.
Your Rights and How to Exercise Them
Under applicable law, you may have the right to access, correct, delete or restrict the processing of your personal information, to object to processing based on legitimate interests, and to data portability where it applies. To exercise any of these rights, or to ask a question about this policy, contact us at [email protected]. We will respond promptly and, where relevant, inform you of any right to lodge a complaint with a supervisory authority.
Key Takeaways
- We process data on clear lawful bases: contract, legitimate interests and consent.
- Cross-border data handling follows applicable law with appropriate safeguards.
- We respond to authorities only where legally required and disclose the minimum necessary.
- Your rights - access, correction, deletion, objection and portability - can be exercised at any time.
- Contact [email protected] for questions; complaints can be raised with supervisory authorities.
Questions about how your data is handled? Contact SIN-AUTO at [email protected] - we are here to help.
