GDPR Compliance Statement

Effective Date: May 21, 2026

The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. It also addresses the export of personal data outside the EU and EEA areas.

PromoStream Shoppings is committed to complying with the GDPR in relation to any visitor data collected from residents of the European Union. We treat all customer data with the highest standards of confidentiality, transparency, and digital safety.

1. Core Principles of Data Protection

We process all personal data in accordance with the strict guidelines of Article 5 of the GDPR:

  1. Lawfulness, fairness, and transparency: We only process your email and messages with your explicit consent or legitimate interest.
  2. Purpose limitation: We only collect email addresses for transmitting promo campaigns or resolving support tickets; we do not use the data for secondary unannounced purposes.
  3. Data minimization: We collect only the minimum required information (name, email, query text) to perform our services.
  4. Accuracy: We keep data up-to-date and permit direct rectifications.
  5. Storage limitation: We retain personal information only for as long as necessary to complete support cycles or until a subscriber opts out.
  6. Integrity and confidentiality: We employ robust firewalls, SSL encryptions, and token authentications to keep stored data safe.

2. Legal Bases for Processing Data

Under GDPR, we process personal data under two distinct legal justifications:

  • Consent (Article 6(1)(a) GDPR): When you voluntarily submit your email in our newsletter subscription form or check cookie approval banners, you give us explicit permission to process your data for that specified utility. You can withdraw your consent at any time.
  • Legitimate Interests (Article 6(1)(f) GDPR): When you submit a ticket in our Contact Form, we process your information to address your support concerns, troubleshoot bugs, and guarantee platform integrity.

3. Data Subjects' Rights under GDPR

If you are a resident of the European Union, you have the following rights regarding the personal data we hold:

  • Right of Access: You have the right to request a complete copy of any personal data we hold about you.
  • Right of Rectification: You have the right to request that we correct any inaccurate or incomplete personal information.
  • Right to Erasure (Right to be Forgotten): You have the right to request that we completely erase your email address and communication logs from our active databases and backup registers.
  • Right to Restrict Processing: You have the right to request that we temporarily or permanently limit the processing of your personal data.
  • Right to Data Portability: You can request that we export your personal data in a standard, machine-readable format (JSON or CSV) for transfer to another service.
  • Right to Object: You can object to your data being used for direct marketing/newsletter dispatches.

4. International Data Transfers

PromoStream Shoppings operates its secure web servers inside the United States of America. If you are accessing our site from the European Union, your data will be transferred across borders into the USA. To guarantee safety, we utilize standard contractual clauses approved by the European Commission and contract with hosting companies that adhere to rigorous data privacy rules.

5. How to Exercise Your GDPR Rights

If you wish to request a data review, edit, or a complete data deletion, please email us directly with the subject line "GDPR Data Request". We will verify your identity to prevent unauthorized transfers and complete your request completely free of charge within 30 days.

PromoStream Shoppings - DPO Desk
842 E. Streamline Way, Suite 400
Los Angeles, CA 90025
Phone: +1 (310) 555-0194
Email: [email protected]