GDPR Compliance Statement

1. Introduction and Scope

What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018, throughout the European Union (EU) and European Economic Area (EEA). GDPR gives individuals greater control over their personal data and imposes strict obligations on organizations that process such data.

Who Does This Statement Apply To?

This GDPR Compliance Statement applies to all visitors and users of sv388s.us who are located in the EU or EEA. If you are visiting our website from within these regions, you have specific rights under GDPR, and we are committed to upholding those rights.

Important Note: sv388s.us is an informational website about international dating platforms. We are NOT a marriage broker, dating agency, or matchmaking service. We do not collect sensitive personal information such as marital status, background checks, or relationship preferences. We do not facilitate introductions or marriages.

2. Data Controller Details

Who Controls Your Data?

For the purposes of GDPR, the data controller for sv388s.us is:

3. Categories of Personal Data We Process

What Personal Data Do We Collect?

As an informational website, sv388s.us collects minimal personal data. The categories of personal data we may process include:

Analytics and Website Usage Data

• IP Address: Your device's Internet Protocol address (may be anonymized or pseudonymized)
• Browser Information: Browser type, version, and settings
• Device Information: Device type, operating system, screen resolution
• Usage Data: Pages viewed, time spent on pages, navigation paths, referral sources
• Geographic Location: Country or region based on IP address (not precise location)

Cookie Data

• Essential Cookies: Cookies necessary for website functionality (theme preferences, consent settings)
• Analytics Cookies: Cookies that help us understand how visitors use our website
• Affiliate Tracking: Cookies that track which external dating sites you click through to (for commission purposes)

For detailed information about our cookie practices, please see our Cookie Policy.

Affiliate Click Data

• Click-Through Events: Records of which dating site links you click on our website
• Click Timestamps: When you clicked on affiliate links
• Session Identifiers: Unique codes that link clicks to potential sign-ups on partner sites (assigned by third-party affiliate networks, not by us)

What We Do NOT Collect

We do NOT collect:

• Names, email addresses, or phone numbers (unless you voluntarily contact us)
• Dating profiles or relationship preferences
• Financial information or payment details
• Government identifiers (passport numbers, social security numbers)
• Sensitive personal data (racial origin, political opinions, religious beliefs, health data, sexual orientation) as defined in GDPR Article 9

4. Legal Bases for Processing

Why Are We Allowed to Process Your Data?

Under GDPR Article 6, we must have a lawful basis to process your personal data. We rely on the following legal bases:

Legitimate Interests (Article 6(1)(f))

We process analytics and usage data based on our legitimate interest in:

• Website Operation: Understanding how our website is used to improve content and user experience
• Security and Fraud Prevention: Detecting and preventing abuse, spam, and fraudulent activity
• Business Sustainability: Operating an affiliate-based informational website to provide free content to users

We have conducted a Legitimate Interest Assessment and determined that these interests are not overridden by your fundamental rights and freedoms.

Consent (Article 6(1)(a))

We rely on your consent for:

• Non-Essential Cookies: Analytics and affiliate tracking cookies (you can withdraw consent at any time via our cookie banner)
• Marketing Communications: If you voluntarily sign up for any newsletter or updates (which we currently do not offer)

You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

Legal Obligation (Article 6(1)(c))

In rare cases, we may process data to comply with legal obligations, such as:

• Responding to valid legal requests from law enforcement or regulatory authorities
• Complying with court orders or legal processes

5. Your Rights Under GDPR

What Rights Do You Have?

As an individual in the EU/EEA, GDPR grants you the following rights regarding your personal data:

Right of Access (Article 15)

You have the right to request confirmation of whether we are processing your personal data and, if so, to receive a copy of that data. This includes information about the purposes of processing, categories of data, recipients, and retention periods.

How to Exercise: Email [email protected] with the subject "Access Request" and provide sufficient information to verify your identity.

Right to Rectification (Article 16)

You have the right to request correction of inaccurate personal data or completion of incomplete data.

How to Exercise: Contact us at [email protected] with details of the inaccuracy and the correction you are requesting.

Right to Erasure / "Right to be Forgotten" (Article 17)

You have the right to request deletion of your personal data in certain circumstances, including:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent (where processing was based on consent)
• You object to processing and there are no overriding legitimate grounds
• The data was unlawfully processed

Limitations: We may refuse erasure if processing is necessary for compliance with legal obligations or establishment, exercise, or defense of legal claims.

How to Exercise: Email [email protected] with the subject "Erasure Request."

Right to Restriction of Processing (Article 18)

You have the right to request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.

How to Exercise: Contact [email protected] with your restriction request and the reasons for it.

Right to Data Portability (Article 20)

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Note: This right applies only to data you have provided to us. Given the minimal data we collect, portability requests may result in limited data exports.

How to Exercise: Email [email protected] with the subject "Portability Request."

Right to Object (Article 21)

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

• Legitimate Interests: You can object to processing based on our legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Direct Marketing: You have an absolute right to object to direct marketing at any time.

How to Exercise: Email [email protected] with the subject "Objection to Processing."

Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect you.

Our Practice: sv388s.us does NOT engage in automated decision-making or profiling that produces legal effects or significantly affects you.

Right to Lodge a Complaint

If you believe we have violated your GDPR rights, you have the right to lodge a complaint with a supervisory authority in your EU member state.

A list of EU Data Protection Authorities can be found at: https://edpb.europa.eu/about-edpb/board/members_en

6. International Data Transfers and Safeguards

Is Your Data Transferred Outside the EU/EEA?

Yes. Some of the third-party services we use to operate sv388s.us may transfer or store your personal data outside the European Union or European Economic Area, including in the United States.

Third-Party Services and Data Transfers

We use the following categories of third-party services that may involve international data transfers:

• Analytics Providers: Services that help us understand website traffic and usage patterns
• Hosting Providers: Cloud infrastructure services that host our website files and data
• Affiliate Networks: Platforms that manage our affiliate relationships with dating sites

Safeguards for International Transfers

When we transfer personal data outside the EU/EEA, we ensure appropriate safeguards are in place as required by GDPR Chapter V (Articles 44-50):

Adequacy Decisions

Where possible, we transfer data to countries that have been deemed by the European Commission to provide an adequate level of data protection (e.g., adequacy decisions under Article 45).

Standard Contractual Clauses (SCCs)

For transfers to countries without an adequacy decision, we rely on Standard Contractual Clauses approved by the European Commission. These are legally binding contracts that require the recipient to protect your personal data according to EU standards.

Third-Party Certifications

We work with service providers that participate in recognized data protection frameworks and certifications demonstrating their commitment to data protection.

Specific International Transfer Scenarios

• Analytics Services: May transfer anonymized or pseudonymized data to the United States under Standard Contractual Clauses
• Affiliate Click Data: When you click on a dating site link, your click data may be processed by the dating site or affiliate network, which may be based outside the EU. This transfer occurs because you initiated the action by clicking the link. The dating site's own privacy policy will govern further processing.

7. Data Retention

How Long Do We Keep Your Data?

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Our retention practices include:

Analytics and Usage Data

• Raw Log Data: Typically retained for 30-90 days, then deleted
• Aggregated Analytics: Anonymized and aggregated statistics may be retained indefinitely (these are not personal data under GDPR)
• IP Addresses: Anonymized or deleted within 90 days unless needed for security investigations

Cookie Data

• Essential Cookies: Stored for the duration of your session or as needed for functionality (e.g., theme preference)
• Analytics Cookies: Typically expire after 1-2 years unless you delete them earlier
• Affiliate Tracking Cookies: Typically expire after 30-90 days or when the affiliate commission period ends

Contact and Correspondence Data

If you contact us via email:

• Support Inquiries: Retained for up to 2 years to track issue resolution and improve service
• GDPR Requests: Retained for up to 3 years to demonstrate compliance with legal obligations

Legal Retention Obligations

In some cases, we may be required to retain data for longer periods to comply with legal obligations, such as:

• Tax and accounting records (typically 7 years)
• Records related to legal disputes or regulatory investigations

Secure Deletion

When personal data is no longer needed, we securely delete or anonymize it using industry-standard methods to prevent unauthorized access or recovery.

8. Data Security Measures

How Do We Protect Your Data?

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, as required by GDPR Article 32:

Technical Security Measures

• Encryption: HTTPS/TLS encryption for all data transmitted between your browser and our servers
• Access Controls: Restricted access to personal data on a need-to-know basis
• Secure Hosting: Use of reputable cloud hosting providers with robust security certifications (ISO 27001, SOC 2)
• Regular Updates: Timely application of security patches and software updates

Organizational Security Measures

• Data Minimization: We collect only the minimum data necessary for our purposes
• Privacy by Design: Privacy considerations are integrated into all website development and operations
• Vendor Due Diligence: We assess the security practices of third-party service providers
• Incident Response: We have procedures to detect, respond to, and report data breaches

Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, as required by GDPR Article 34. We will also notify the relevant supervisory authority within 72 hours as required by Article 33.

9. Children's Privacy

Age Restrictions

sv388s.us is intended for adults aged 18 and over. We do not knowingly collect personal data from children under 16 (the GDPR age of digital consent, though some EU member states have set a lower age).

If we become aware that we have inadvertently collected personal data from a child under 16 without parental consent, we will take steps to delete that data as quickly as possible.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at [email protected].

10. Changes to This GDPR Compliance Statement

How Will You Know if We Update This Statement?

We may update this GDPR Compliance Statement from time to time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons.

When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this statement periodically.

For significant changes that materially affect your rights, we may provide additional notice (such as a prominent website banner or, if we have your email address, direct notification).

11. Contact Us for GDPR Matters

How to Reach Us

If you have questions about this GDPR Compliance Statement, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us:

12. Additional Resources

Related Policies and Information

For more information about our data practices and legal compliance, please see:

• Privacy Policy - Our general privacy practices for all users
• Cookie Policy - Detailed information about cookies we use
• Terms of Service - Legal terms governing use of sv388s.us
• IMBRA Disclosure - Information about US marriage broker regulations (for context)

External GDPR Resources

• European Data Protection Board: https://edpb.europa.eu/
• EU GDPR Official Text: https://gdpr-info.eu/
• Your Data Protection Authority: Find your national authority

13. Summary of Key Points

For your convenience, here are the key takeaways about GDPR and sv388s.us:

• Minimal Data Collection: We collect only basic analytics, cookies, and affiliate click data - no names, emails, or sensitive information
• Your Rights: You have the right to access, rectify, erase, restrict, port, and object to processing of your data
• Legal Bases: We process data based on legitimate interests and consent (for cookies)
• International Transfers: Some data may be transferred to the US with appropriate safeguards (Standard Contractual Clauses)
• Retention: Analytics data deleted after 90 days; cookies expire after 1-2 years; aggregated data retained indefinitely
• Security: We use HTTPS encryption, access controls, and secure hosting to protect your data
• Contact: Email [email protected] to exercise your rights or ask questions - we respond within 30 days
• Not a Dating Service: We are an informational website, not a marriage broker or dating agency