GDPR Compliance Statement

Your Rights as a Data Subject

Under the GDPR, you have comprehensive rights regarding your personal data. We are committed to honoring these rights promptly and transparently:

• Right of Access (Article 15): You may request confirmation of whether we process your personal data and obtain a copy of that data along with supplementary information about processing activities.
• Right to Rectification (Article 16): You have the right to request correction of inaccurate personal data or completion of incomplete data we hold about you.
• Right to Erasure (Article 17): Also known as the "right to be forgotten," you may request deletion of your personal data under certain circumstances, including when data is no longer necessary for its original purpose.
• Right to Restrict Processing (Article 18): You may request limitation of processing activities while we verify accuracy of data or assess legitimate grounds for processing.
• Right to Data Portability (Article 20): You can receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
• Right to Object (Article 21): You may object to processing based on legitimate interests, including profiling and direct marketing activities.
• Rights Related to Automated Decision-Making (Article 22): You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise any of these rights, please contact our Data Protection Officer using the details provided below. We will respond to your request within 30 days as required by law.

Legal Basis for Data Processing

We process personal data only when we have a lawful basis under Article 6 of the GDPR. Our processing activities rely on the following legal grounds:

• Consent (Article 6(1)(a)): Where you have given clear consent for us to process your personal data for specific purposes, such as receiving newsletters or marketing communications.
• Contractual Necessity (Article 6(1)(b)): Processing necessary to perform our services when you engage with dating platform reviews or request information through our contact forms.
• Legal Obligation (Article 6(1)(c)): Processing required to comply with legal obligations, including tax regulations, fraud prevention requirements, and responding to lawful governmental requests.
• Legitimate Interests (Article 6(1)(f)): Processing necessary for our legitimate business interests, such as website analytics, security measures, and service improvement, provided these interests are not overridden by your fundamental rights.

You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

International Data Transfers

As an organization operating internationally, we may transfer personal data outside the European Economic Area (EEA). When such transfers occur, we implement appropriate safeguards as required by Chapter V of the GDPR:

• Adequacy Decisions: We transfer data to countries recognized by the European Commission as providing adequate data protection levels.
• Standard Contractual Clauses: For transfers to countries without adequacy decisions, we utilize EU-approved Standard Contractual Clauses to ensure equivalent protection.
• Supplementary Measures: We implement additional technical and organizational measures where necessary, including encryption and access controls.

Our affiliate partners and third-party service providers are contractually bound to maintain equivalent data protection standards regardless of their geographic location.

Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, in accordance with Article 5(1)(e) of the GDPR:

• Contact Form Submissions: Retained for 2 years from date of submission, unless ongoing correspondence requires extended retention.
• Analytics Data: Aggregated and anonymized within 26 months; identifiable data deleted within 14 months.
• Cookie Consent Records: Retained for 12 months from date of consent provision.
• Marketing Preferences: Retained until consent withdrawal or 3 years of inactivity, whichever occurs first.
• Legal Compliance Records: Retained as required by applicable law, typically 7 years for financial records.

Upon expiration of retention periods, personal data is securely deleted or anonymized so that individuals can no longer be identified.

Data Protection Officer Contact

We have appointed a Data Protection Officer (DPO) to oversee GDPR compliance and serve as your point of contact for all data protection matters:

Our DPO is available to address your questions about data processing activities, assist with exercising your data subject rights, and provide information about our data protection practices.

Your Right to Lodge Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority under Article 77 of the GDPR. You may file a complaint with:

• The supervisory authority in your EU Member State of residence
• The supervisory authority in your place of work
• The supervisory authority where the alleged infringement occurred

We encourage you to contact our Data Protection Officer first to resolve any concerns directly. However, this does not affect your statutory right to approach supervisory authorities at any time.

A list of EU Data Protection Authorities is available on the European Data Protection Board website.

Updates to This Statement

We may update this GDPR Compliance Statement periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through our website, and we encourage you to review this statement regularly. The "Last Updated" date at the top indicates when the most recent revisions were made.