GDPR Compliance
Data protection and regulatory compliance
Our Commitment
One Stone sp. z o.o., the company behind Zevlian, is registered in Poland and is committed to compliance with the General Data Protection Regulation (GDPR) and all applicable data protection laws.
As a fintech platform handling financial transactions and identity verification, we take data protection seriously and implement technical and organisational measures to safeguard your personal data.
Processing Records (Article 30)
Register of processing activities in preparation
Our Article 30 Register of Processing Activities is being prepared by legal counsel. This register will document all processing activities, including purposes, categories of data subjects and personal data, recipients, international transfers, and retention periods.
Data Protection Impact Assessment
DPIA under review
A Data Protection Impact Assessment is being conducted for high-risk processing activities, including:
- Biometric data processing for identity verification (Sumsub)
- Financial profiling and risk scoring for AML compliance
- Cross-border data transfers to third-party processors
Your Data Rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure of your data (subject to legal retention obligations)
- Restrict or object to processing
- Data portability
- Lodge a complaint with a supervisory authority (UODO in Poland)
To exercise any of these rights, contact us at [email protected].