GDPR Compliance Statement

Last Updated: 02-26-2026

Astaqc Consulting OPC Private Limited (“Astaqc”, “we”, “our”, “us”) is committed to protecting personal data and complying with applicable data protection and privacy regulations, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

Who We Are

Astaqc Consulting OPC Private Limited
D-62, Sanjay Colony, Sector-23
Faridabad, Haryana – 121002
India

📧 Contact: privacy@astaqc.com
🌐 Website: https://astaqc.com

Our Role Under GDPR

Depending on the nature of services provided:

✅ Data Processor – When processing personal data on behalf of clients
✅ Data Controller – For our own business operations (e.g., inquiries, recruitment, invoicing)

Nature of Services

Astaqc provides:

Software Development
Software Testing & Quality Assurance
Test Automation
IT Consulting
Security Testing
Accessibility & Performance Audits

Client Data Processing Position

Astaqc Consulting:

✔ Does not store or control client production data
✔ Accesses client environments only as contractually authorized
✔ Stores only limited project-related data such as:

Test data (synthetic/anonymized or client-approved)
Test scripts / automation assets
Project documentation
Business communications

✔ Applies data minimization principles

GDPR Compliance Commitments

Astaqc implements appropriate measures to ensure:

✔ Lawful, fair, and transparent processing
✔ Processing limited to defined purposes
✔ Data minimization
✔ Accuracy of data
✔ Storage limitation
✔ Integrity and confidentiality
✔ Accountability

Technical & Organisational Measures

We maintain reasonable safeguards including:

Role-based access controls
Least privilege principle
Secure authentication mechanisms
Use of trusted cloud service providers (Microsoft ecosystem)
Endpoint/device security
Confidentiality obligations
Secure communication protocols

Subprocessors

Astaqc may engage trusted subprocessors (e.g., Microsoft services such as Azure DevOps and Outlook) necessary for service delivery. Such providers maintain GDPR-compliant safeguards.

Details are available upon request.

International Data Transfers

Where personal data originating from the European Economic Area (EEA) is processed outside the EEA, appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent legal mechanisms are applied where required.

Data Subject Rights

Where applicable under GDPR, individuals may exercise rights including:

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object

Requests may be submitted to:

📧 privacy@astaqc.com

Data Protection Contact

For privacy or data protection inquiries:

📧 dpo@astaqc.com