GDPR Compliance

What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It applies to all organizations that process personal data of individuals in the European Union, regardless of where the organization is located.

GDPR establishes strict requirements for how personal data must be collected, stored, processed, and protected, and grants individuals significant rights over their personal data.

Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

Legal Bases for Processing

We process your personal data based on the following legal grounds:

Contractual Necessity (Article 6(1)(b))

Processing necessary for the performance of our contract with you, including:

• Account creation and management
• Providing access to testing campaigns
• Processing payments and distributing rewards
• Customer support and communication

Legitimate Interests (Article 6(1)(f))

Processing necessary for our legitimate interests, balanced against your rights:

• Improving and developing our services
• Fraud prevention and security
• Analytics to understand usage patterns
• Business communications about service updates

Consent (Article 6(1)(a))

Where we rely on your consent for processing:

• Marketing communications and newsletters
• Analytics cookies and tracking
• Optional profile information sharing with clients

You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Legal Obligation (Article 6(1)(c))

Processing required to comply with legal obligations:

• Tax and financial reporting requirements
• Responding to valid legal requests
• Anti-money laundering compliance

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place:

Transfer Mechanisms

• Adequacy Decisions: Transfers to countries with adequate data protection (e.g., UK, Switzerland)
• Standard Contractual Clauses: EU-approved contracts with service providers in other countries
• Binding Corporate Rules: For transfers within our corporate group

Sub-Processors

We use the following categories of sub-processors who may process your data:

• Cloud infrastructure providers (EU data centers)
• Payment processors (PCI DSS compliant)
• Email service providers (GDPR compliant)
• Analytics providers (anonymized data only, self-hosted)

A complete list of our sub-processors is available upon request.

Technical and Organizational Measures

We have implemented comprehensive measures to protect your personal data:

Data Retention Periods

We retain personal data only for as long as necessary for the purposes it was collected:

How to Exercise Your Rights

You can exercise your GDPR rights through the following methods:

Self-Service Options

• Access and download your data from your account settings
• Update your profile information directly in the app
• Manage your communication preferences
• Delete your account through the settings page

Submit a Request

For rights requests that cannot be handled through self-service:

1. Email dpo@testerpaykit.com with your request
2. Specify the right you wish to exercise
3. Provide sufficient information for us to verify your identity
4. We will respond within 30 days (extendable by 60 days for complex requests)

Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our data protection strategy and compliance. You can contact our DPO for any data protection inquiries:

Right to Lodge a Complaint

If you believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is:

You may also lodge a complaint with the supervisory authority in your country of residence or place of work.

Updates to This Page

We may update this GDPR compliance page from time to time. When we make significant changes, we will notify you via email or through our platform. We encourage you to review this page periodically.