1. What is GDPR?

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union (EU) and the European Economic Area (EEA).

🇪🇺 Our Commitment: 49R is committed to GDPR compliance. We process personal data lawfully, fairly, and transparently, regardless of where our users are located.

2. Data Controller

49R acts as the Data Controller for the personal data collected through our platform. This means we determine the purposes and means of processing your personal data.

Controller Details

Name: 49R
Email: support@49r.de
Website: https://49r.de

3. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

📝

Consent

You've given clear consent for processing

📄

Contract

Necessary to fulfill our service to you

⚖️

Legal Obligation

Required by law to process data

🎯

Legitimate Interest

Improving and securing our platform

4. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

🔍 Right of Access (Article 15)

You can request a copy of all personal data we hold about you. We will respond within 30 days.

✏️ Right to Rectification (Article 16)

You can request correction of inaccurate or incomplete personal data via your Account Settings.

🗑️ Right to Erasure (Article 17)

You can request deletion of all your personal data. This is also known as the "right to be forgotten."

📦 Right to Data Portability (Article 20)

You can request your data in a structured, commonly used, machine-readable format (e.g., JSON or CSV).

⏸️ Right to Restrict Processing (Article 18)

You can request that we limit the processing of your personal data under certain conditions.

🚫 Right to Object (Article 21)

You can object to processing of your personal data for direct marketing or based on legitimate interests.

⏱️ Response Time: We will respond to all GDPR requests within 30 days. In complex cases, this may be extended by an additional 60 days with notification.

5. Data We Collect

In the context of GDPR, here is the personal data we process:

Identity Data: Full name, username
Contact Data: Email address
Technical Data: IP address, browser type, device type, operating system
Usage Data: Links created, click analytics, pages visited
Financial Data: Coin balance, transaction history (no real currency)

For full details, see our Privacy Policy.

6. Data Retention

We retain personal data only as long as necessary for the purposes stated:

Account data: Retained while your account is active
Analytics data: Retained for the lifetime of the associated link
Transaction data: Retained for 12 months for audit purposes
Session data: Deleted when session expires or on logout

🗑️ Upon Deletion: When you request account deletion, all personal data is permanently erased within 30 days. Aggregated, anonymized analytics data may be retained.

7. International Data Transfers

If your data is transferred outside the EEA, we ensure adequate protection through:

Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions by the European Commission
Ensuring third-party processors comply with GDPR-equivalent standards

8. Data Security Measures

We implement appropriate technical and organizational measures as required by GDPR Article 32:

🔐

Encryption

Bcrypt password hashing

🛡️

Access Control

Role-based access management

🔍

Monitoring

Regular security audits

🧹

Input Validation

XSS & SQL injection prevention

9. Data Protection Officer

For any GDPR-related inquiries, you may contact our Data Protection Officer:

Email: support@49r.de
Response Time: Within 30 days of receiving your request

10. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.

📝 Before Filing: We encourage you to contact us first at support@49r.de so we can try to resolve your concern directly.

A list of EU supervisory authorities can be found on the European Data Protection Board website.

11. Contact Us

For GDPR-related questions, requests, or to exercise your rights, please contact us or email support@49r.de.

GDPR Compliance