GDPR Compliance

General Data Protection Regulation — Last updated: April 2, 2026

Our Commitment to GDPR

SalaryWindow Healthcare respects the privacy of visitors from the European Economic Area (EEA) and is committed to complying with the General Data Protection Regulation (GDPR). This page supplements our Privacy Policy with GDPR-specific information.

Data Controller

SalaryWindow is the data controller for personal data collected through healthcare.salarywindow.com. For data protection inquiries, contact our data protection contact at: mycreativelab26@gmail.com

Legal Basis for Processing

We process personal data under the following legal bases:

Processing Activity	Legal Basis
Essential website operation	Legitimate interest (website functionality)
Analytics (Google Analytics)	Consent (cookie banner)
Advertising (Google AdSense)	Consent (cookie banner)
Responding to inquiries	Legitimate interest (customer support)

Your Rights Under GDPR

As an EEA resident, you have the following rights:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate personal data.
Right to Erasure: Request deletion of your personal data ("right to be forgotten").
Right to Restrict Processing: Request that we limit how we use your data.
Right to Data Portability: Request a machine-readable copy of your data.
Right to Object: Object to processing based on legitimate interests, including profiling.
Right to Withdraw Consent: Withdraw consent for processing at any time where consent is the legal basis.

International Data Transfers

Our website is hosted in the United States. If you access our website from the EEA, your data may be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) and other appropriate safeguards to ensure adequate protection of your data during international transfers.

Cookie Consent

For EEA visitors, we obtain consent before placing non-essential cookies (analytics and advertising). You can manage your cookie preferences through our cookie banner or by adjusting your browser settings. Essential cookies required for website functionality do not require consent.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Analytics data is retained for up to 26 months. Contact correspondence is retained for up to 2 years. You may request earlier deletion at any time.

Filing a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority (supervisory authority) in your EU/EEA member state. We encourage you to contact us first at mycreativelab26@gmail.com so we can address your concerns directly.

How to Exercise Your Rights

To exercise any GDPR right, email mycreativelab26@gmail.com with the subject line "GDPR Request." Include your name, country of residence, and a description of your request. We will respond within 30 days.