GDPR Policy

Last Updated: June 11, 2025

At Name Bangla https://en.namebangla.com, we are committed to upholding the highest standards of data protection and privacy for all our users worldwide. This commitment extends to our users located within the European Union (EU) and the European Economic Area (EEA), for whom we strive to comply with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).

While Name Bangla operates from Bangladesh, we recognize that our website may be accessed by individuals from the EU/EEA. Therefore, we endeavor to process personal data in accordance with the principles and provisions of the GDPR, ensuring transparency, fairness, and security in our data handling practices.

This GDPR Policy provides detailed information regarding your rights and our obligations concerning your personal data under the GDPR.

1. Understanding Key GDPR Terms

To ensure clarity, let’s define some important terms as they are used in this policy and under GDPR:

  • Personal Data: Any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an ID number or to one or more factors specific to the physical, physiological, mental, economic, cultural or social identity of that natural person. Examples include names, email addresses, IP addresses, location data, online identifiers, etc.
  • Data Subject: The individual to whom the Personal Data relates (i.e., you, the user).
  • Processing: Any operation or set of operations performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
  • Controller: The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data. For the purposes of this policy, Name Bangla is the Data Controller of your Personal Data.
  • Processor: A natural or legal person, public authority, agency, or other body which processes Personal Data on behalf of the Controller. This could include third-party service providers like hosting companies or analytics platforms.

2. Principles for Processing Personal Data

Name Bangla adheres to the following core principles of personal data processing as outlined in Article 5 of the GDPR:

  • Lawfulness, Fairness, and Transparency: Personal data is processed lawfully, fairly, and in a transparent manner in relation to the data subject. This means we are clear about what data we collect, why we collect it, and how we use it.
  • Purpose Limitation: Personal data is collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
  • Data Minimization: Personal data collected is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed. We only collect the data we genuinely need.
  • Accuracy: Personal data is accurate and, where necessary, kept up to date. Every reasonable step is taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay.
  • Storage Limitation: Personal data is kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
  • Integrity and Confidentiality (Security): Personal data is processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.
  • Accountability: The Controller (Name Bangla) is responsible for, and must be able to demonstrate compliance with, the above principles.

3. Legal Basis for Processing Your Personal Data

Under GDPR, we must have a lawful basis to process your Personal Data. Name Bangla primarily relies on the following legal bases:

  • Consent (Article 6(1)(a) GDPR): We process your data when you have given us explicit consent for a specific purpose. For example, when you subscribe to our newsletter, you provide consent for us to send you email updates. You have the right to withdraw your consent at any time.
  • Legitimate Interests (Article 6(1)(f) GDPR): We may process your data where it is necessary for our legitimate interests, provided that these interests do not override your fundamental rights and freedoms. Our legitimate interests include:
    • Improving and optimizing our website and user experience.
    • Analyzing website traffic and user behavior to understand content preferences.
    • Ensuring the security and integrity of our Site.
    • Responding to your inquiries and providing customer support.
    • Protecting our legal rights and interests. Whenever we rely on legitimate interests, we conduct a balancing test to ensure your privacy rights are protected.
  • Performance of a Contract (Article 6(1)(b) GDPR): While Name Bangla primarily offers informational content, if we were to enter into a direct contract with you for a specific service (e.g., a premium subscription feature), processing your data necessary for fulfilling that contract would fall under this basis.
  • Compliance with a Legal Obligation (Article 6(1)(c) GDPR): We may process your data where it is necessary for compliance with a legal obligation to which Name Bangla is subject (e.g., responding to lawful requests from authorities).

4. Types of Personal Data We Collect and How We Use It

As detailed in our Privacy Policy, Name Bangla collects both Personal Identification Information and Non-Personal Identification Information. Here’s how this aligns with GDPR:

  • Contact Information (e.g., Name, Email Address):
    • Purpose: To send newsletters (if subscribed), respond to inquiries, manage comments.
    • Legal Basis: Consent (for newsletters), Legitimate Interests (for inquiries and comments).
  • Technical Data (e.g., IP address, browser type, device information, usage data via cookies):
    • Purpose: To improve website performance, understand user demographics (aggregated), analyze traffic, ensure site security.
    • Legal Basis: Legitimate Interests (for essential functionality and security), Consent (for non-essential cookies like analytics and advertising cookies – managed via our cookie consent mechanism).
  • User Contributions (e.g., Comments):
    • Purpose: To facilitate community engagement, respond to user feedback, publish content.
    • Legal Basis: Legitimate Interests (to provide interactive features), Consent (implied by voluntary submission, with clear terms).

5. Your Data Protection Rights Under GDPR

As a Data Subject under GDPR, you have significant rights regarding your Personal Data. Name Bangla is committed to facilitating the exercise of these rights:

  • 1. The Right to Be Informed (Articles 12, 13, 14 GDPR): You have the right to receive clear, transparent, and easily understandable information about how we process your Personal Data. This GDPR Policy and our Privacy Policy are designed to fulfill this right.
  • 2. The Right of Access (Article 15 GDPR): You have the right to obtain confirmation as to whether or not your Personal Data is being processed, and, where that is the case, access to the Personal Data and information regarding the purposes of the processing, the categories of data concerned, recipients, retention periods, and your rights.
  • 3. The Right to Rectification (Article 16 GDPR): You have the right to request that Name Bangla correct any inaccurate Personal Data we hold about you without undue delay. You also have the right to have incomplete Personal Data completed, including by providing a supplementary statement.
  • 4. The Right to Erasure (“Right to Be Forgotten”) (Article 17 GDPR): You have the right to request the deletion or removal of your Personal Data where there is no compelling reason for its continued processing. This right applies, for example, if the data is no longer necessary for the purposes for which it was collected, you withdraw consent, or you object to processing and there is no overriding legitimate interest for us to continue.
  • 5. The Right to Restrict Processing (Article 18 GDPR): You have the right to request that we restrict the processing of your Personal Data under certain conditions, such as:
    • You contest the accuracy of the Personal Data, for a period enabling us to verify the accuracy.
    • The processing is unlawful, and you oppose the erasure of the Personal Data and request the restriction of its use instead.
    • We no longer need the Personal Data for the purposes of the processing, but you require them for the establishment, exercise, or defense of legal claims.
    • You have objected to processing based on legitimate interests, pending the verification whether our legitimate grounds override yours.
  • 6. The Right to Data Portability (Article 20 GDPR): You have the right to receive the Personal Data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance from Name Bangla, where the processing is based on consent or contract and is carried out by automated means.
  • 7. The Right to Object (Article 21 GDPR): You have the right to object to the processing of your Personal Data where the processing is based on our legitimate interests or for direct marketing purposes (including profiling related to direct marketing). If you object to direct marketing, we will stop processing your Personal Data for that purpose.
  • 8. Rights in Relation to Automated Decision-Making and Profiling (Article 22 GDPR): You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless the decision is necessary for a contract, authorized by law, or based on your explicit consent, and appropriate safeguards are in place. Name Bangla does not currently engage in automated decision-making or profiling that would have such significant effects on you.

How to Exercise Your GDPR Rights:

To exercise any of these rights, please contact our Data Protection Point of Contact at [email protected]. We will respond to your request without undue delay and within one month of receipt, except in complex cases where an extension of up to two further months may be required, in which case we will inform you of the delay and the reasons for it. We may require specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights).

6. Data Security Measures

Name Bangla implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of data where appropriate.
  • Regular security assessments and updates.
  • Access controls to Personal Data.
  • Measures to ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems and services.
  • Procedures for regularly testing, assessing, and evaluating the effectiveness of technical and organizational measures for ensuring the security of the processing.

While we strive to use commercially acceptable means to protect your Personal Data, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

7. Data Retention

We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period may vary depending on the type of data and the purpose of processing. For example, your email address for newsletter subscriptions will be retained until you unsubscribe. Comment data may be retained as long as the relevant article is live, for contextual purposes, unless you request its deletion.

8. International Data Transfers

As Name Bangla operates from Bangladesh, your Personal Data may be transferred to, stored, and processed in Bangladesh or other countries where our service providers are located. These countries may have data protection laws that are different from the laws of your country of residence, particularly the EU/EEA.

When transferring Personal Data outside the EU/EEA, we implement appropriate safeguards to ensure that your Personal Data remains protected to a standard equivalent to that provided by GDPR. These safeguards may include:

  • Standard Contractual Clauses (SCCs): Implementing the European Commission’s approved Standard Contractual Clauses for the transfer of Personal Data to third countries.
  • Assessment of Third-Country Laws: Conducting assessments of the data protection laws and practices of the recipient country to ensure adequate protection, particularly regarding governmental access requests.
  • Technical and Organizational Measures: Applying additional technical and organizational measures (e.g., encryption, pseudonymization) to supplement the contractual safeguards.

By using our Site, you acknowledge and agree that your Personal Data may be transferred to and processed in countries outside the EU/EEA under these safeguards.

9. Third-Party Processors

We may engage third-party companies and individuals to facilitate our Site, provide the Site on our behalf, perform Site-related services, or assist us in analyzing how our Site is used. These third parties (“Processors”) have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. We enter into data processing agreements with these third parties to ensure they comply with GDPR requirements.

10. Children’s Privacy

Name Bangla does not knowingly collect or solicit Personal Data from anyone under the age of 16 within the EU/EEA without verifiable parental consent. If we become aware that we have collected Personal Data from a child under 16 without parental consent, we will take immediate steps to remove that information from our servers. If you believe that we may have collected Personal Data from a child under 16, please contact us immediately.

11. Changes to This GDPR Policy

We may update our GDPR Policy from time to time. We will notify you of any changes by posting the new GDPR Policy on this page and updating the “Last Updated” date at the top. We encourage you to review this GDPR Policy periodically for any changes. Your continued use of the Site after the posting of changes to this policy will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified GDPR Policy.

12. Contact Us and Your Right to Lodge a Complaint

If you have any questions, concerns, or requests regarding this GDPR Policy or our data processing practices, please contact our Data Protection Point of Contact:

Name Bangla Email: info@namebangla.com

If you are an EU/EEA resident and believe that Name Bangla has not adequately addressed your privacy concerns or processed your Personal Data in a manner inconsistent with GDPR, you have the right to lodge a complaint with a supervisory authority for data protection in your country of residence within the EU/EEA.