GDPR Compliance Statement

Our GDPR Commitments

What is GDPR? The General Data Protection Regulation (GDPR) is a comprehensive data protection law that governs how organizations process the personal data of individuals in the EU and EEA. According to Article 5 of GDPR, personal data must be processed lawfully, fairly, transparently, and for specified purposes only.

East Pointers respects your privacy rights and has implemented technical and organizational measures to ensure GDPR compliance. We are committed to:

• Transparency: Providing clear information about what data we collect and how we use it
• Data Minimization: Collecting only the data necessary for our legitimate purposes
• Purpose Limitation: Using your data only for the purposes we've disclosed
• Security: Implementing appropriate safeguards to protect your personal information
• Accountability: Demonstrating our compliance with GDPR principles and your rights
• User Rights: Honoring all data subject rights outlined in GDPR Articles 15-22

Data Controller Identity and Contact Information

Who is the Data Controller? For the purposes of GDPR, the data controller is the entity that determines the purposes and means of processing your personal data. East Pointers operates as the data controller for information collected through eastpointers.ca.

If you have questions about how we process your personal data, wish to exercise your data subject rights, or need clarification about our GDPR compliance practices, please contact us using the information above.

Legal Bases for Processing Personal Data

Why do we process your data? Under GDPR Article 6, we must have a lawful basis to process your personal data. We rely on the following legal bases:

1. Legitimate Interests (Article 6(1)(f))

We process certain data based on our legitimate interests in operating an informational website about Balkan dating platforms. These legitimate interests include:

• Analyzing website traffic and user behavior to improve content quality and user experience
• Measuring the effectiveness of our informational resources and dating platform recommendations
• Maintaining website security and preventing fraud or abuse
• Managing affiliate relationships with recommended dating platforms
• Improving our services and developing new educational content for international dating

We have conducted a Legitimate Interest Assessment (LIA) and determined that these interests do not override your fundamental rights and freedoms.

2. Consent (Article 6(1)(a))

For certain data processing activities, we ask for your explicit consent, including:

• Non-essential cookies and tracking technologies for analytics and personalization
• Marketing communications if you choose to subscribe to our newsletter
• Any data processing that goes beyond our core informational service

You have the right to withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal.

3. Legal Obligation (Article 6(1)(c))

We may process your data when necessary to comply with legal obligations, such as:

• Responding to lawful requests from courts, law enforcement, or regulatory authorities
• Complying with applicable tax, accounting, or anti-fraud regulations
• Maintaining records as required by applicable laws

Your Data Subject Rights Under GDPR

What are your rights? GDPR grants EU and EEA residents comprehensive rights regarding their personal data. East Pointers fully supports and honors these rights:

Right of Access (Article 15)

You have the right to obtain confirmation of whether we process your personal data and, if so, to access that data along with information about:

• The purposes of processing
• The categories of personal data involved
• The recipients or categories of recipients to whom data has been disclosed
• The retention period or criteria for determining that period
• Your rights to rectification, erasure, restriction, or objection
• The right to lodge a complaint with a supervisory authority

How to request: Email [email protected] with subject line "GDPR Access Request." We will provide a copy of your data within 30 days at no charge.

Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete data completed. If we have shared your data with third parties, we will inform them of the rectification where possible.

How to request: Contact us at [email protected] with details of the data requiring correction.

Right to Erasure / "Right to be Forgotten" (Article 17)

You have the right to request deletion of your personal data when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• Erasure is required to comply with a legal obligation

Limitations: This right is not absolute. We may retain data if necessary for legal compliance, establishing legal claims, or exercising freedom of expression.

Right to Restriction of Processing (Article 18)

You have the right to request that we limit how we use your data when:

• You contest the accuracy of the data (restriction during verification period)
• Processing is unlawful but you oppose erasure and request restriction instead
• We no longer need the data but you need it for legal claims
• You have objected to processing pending verification of our legitimate grounds

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller when:

• Processing is based on consent or contract performance
• Processing is carried out by automated means

We will provide data in CSV or JSON format for easy transfer to other services.

Right to Object (Article 21)

You have the right to object to processing of your personal data when:

• Processing is based on legitimate interests or performance of a task in the public interest
• Processing is for direct marketing purposes (we will cease immediately)
• Processing is for scientific, historical research, or statistical purposes

We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to decisions based solely on automated processing that produces legal or similarly significant effects. East Pointers does not engage in automated decision-making or profiling. We do not use algorithms to make consequential decisions about visitors.

International Data Transfers Outside the EU/EEA

Where is your data processed? East Pointers operates from the United States. When you visit our website from the EU or EEA, your personal data may be transferred to, stored, and processed in the United States or other countries outside the European Economic Area.

Safeguards for International Transfers

According to GDPR Chapter V, we implement appropriate safeguards to protect your data during international transfers:

• Standard Contractual Clauses (SCCs): We use EU-approved Standard Contractual Clauses when transferring data to third-party service providers in countries without adequacy decisions
• Data Processing Agreements: All third-party processors are bound by contracts requiring GDPR-level data protection
• Technical Measures: Encryption in transit (TLS/SSL) and at rest for all personal data transfers
• Vendor Assessment: We evaluate the data protection practices of all service providers before engagement

Third-Party Dating Platforms

When you click affiliate links to visit third-party dating platforms (SofiaDate, AmorPulse, Datempire, MySpecialDates, LoveForHeart), you leave our website and enter services operated by independent companies. These platforms have their own privacy policies and GDPR compliance practices.

Your responsibility: Before providing personal data to any external dating platform, review their privacy policy and GDPR compliance statement to understand how they process data and what safeguards they implement for EU/EEA users.

Security Measures to Protect Your Data

How do we protect your data? Under GDPR Article 32, we implement appropriate technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, or damage.

Technical Security Measures

• Encryption: All data transmissions use TLS/SSL encryption (HTTPS) to protect data in transit
• Secure Hosting: Our website is hosted on secure infrastructure with regular security updates and patches
• Access Controls: Strict authentication and authorization protocols limit data access to authorized personnel only
• Monitoring: Continuous monitoring for security threats, suspicious activity, and unauthorized access attempts
• Regular Backups: Encrypted backups to ensure data integrity and business continuity

Organizational Security Measures

• Staff Training: Regular GDPR and data protection training for all personnel with data access
• Data Minimization: We collect only the minimum data necessary for legitimate purposes
• Vendor Management: Due diligence and contractual safeguards with all data processors
• Incident Response Plan: Documented procedures for detecting, reporting, and responding to data breaches
• Privacy by Design: Data protection considerations integrated into all new projects and services

Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours of becoming aware (GDPR Article 33)
• Notify affected individuals without undue delay if the breach poses a high risk (GDPR Article 34)
• Provide clear information about the nature of the breach, likely consequences, and measures taken
• Document all breaches, including facts, effects, and remedial actions taken

How Long We Retain Your Data

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law:

• Analytics Data: Aggregated and anonymized after 26 months (Google Analytics standard)
• Cookie Consent Records: 12 months from last interaction
• Email Communications: Until you unsubscribe or request deletion
• Contact Inquiries: 3 years for customer service and legal compliance purposes
• Legal Obligations: As required by applicable law (e.g., tax records, legal claims)

After retention periods expire, we securely delete or anonymize data so it can no longer identify you.

Right to Lodge a Complaint with Supervisory Authority

Not satisfied with our response? You have the right under GDPR Article 77 to lodge a complaint with a data protection supervisory authority, particularly in your EU member state of residence, workplace, or where an alleged infringement occurred.

EU Supervisory Authorities

Each EU member state has a designated supervisory authority responsible for enforcing GDPR. You can find contact information for your local authority at the European Data Protection Board website: https://edpb.europa.eu/about-edpb/board/members_en

Before Filing a Complaint

While you have the absolute right to contact a supervisory authority at any time, we encourage you to contact us first at [email protected] so we can attempt to resolve your concern directly. We are committed to working with you and supervisory authorities to resolve any complaints fairly and promptly.

Updates to This GDPR Compliance Statement

We may update this GDPR Compliance Statement periodically to reflect changes in our data processing practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a notice on our homepage for 30 days following significant changes
• Notify registered email subscribers if changes materially affect their rights

We encourage you to review this statement periodically to stay informed about how we protect your data and your rights under GDPR.

Additional Privacy and Legal Resources

For more information about how we handle your data and our legal obligations:

• Privacy Policy - Comprehensive information about data collection and use
• Cookie Policy - Details about cookies and tracking technologies we use
• Terms of Service - Legal terms governing use of our website
• IMBRA Disclosure - Information for US citizens about international dating regulations
• Affiliate Disclosure - Transparency about our affiliate relationships and revenue model
• Contact Us - Get in touch with questions about privacy or data protection

Summary: Your Rights and Our Commitments

East Pointers is committed to full GDPR compliance and protecting the privacy rights of all EU and EEA visitors. We process your personal data lawfully, transparently, and securely, and we fully support your rights to access, rectify, erase, restrict, port, and object to processing of your data.

As an informational resource about Balkan dating platforms, we maintain minimal data collection practices and implement robust security measures. We are not a marriage broker or matchmaking agency, and we do not facilitate direct contact between individuals.

If you have questions about GDPR compliance, wish to exercise your data subject rights, or need assistance with privacy concerns, please contact our Data Protection Officer at [email protected]. We will respond to all requests within 30 days as required by law.