GDPR Compliance

Our Commitment to GDPR

PrestaHub.eu is committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR). This page provides information about how we handle your data in accordance with GDPR requirements.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access (Article 15)

You have the right to obtain confirmation of whether we process your personal data and access to that data, including:

• The purposes of processing
• The categories of personal data concerned
• Recipients of the data
• Retention period

Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete data completed.

Right to Erasure (Article 17)

You have the right to request deletion of your personal data when:

• The data is no longer necessary for its original purpose
• You withdraw consent
• You object to processing
• The data was unlawfully processed

Note: We may retain certain data for legal compliance (e.g., tax records).

Right to Restrict Processing (Article 18)

You can request restriction of processing in certain circumstances, such as when you contest data accuracy or object to processing.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and transfer it to another controller.

Right to Object (Article 21)

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to decisions based solely on automated processing. We do not make automated decisions that significantly affect you.

How We Protect Your Data

• Data Minimization: We only collect data necessary for our services
• Purpose Limitation: Data is used only for stated purposes
• Storage Limitation: Data is retained only as long as necessary
• Security: We implement appropriate technical and organizational measures
• Accountability: We maintain records of processing activities

Data Processing Activities

Activity	Data Processed	Legal Basis	Retention
Purchase Processing	Email, billing info	Contract performance	7 years (legal requirement)
Product Delivery	Email	Contract performance	Until deletion request
Customer Support	Email, support content	Legitimate interest	2 years after last contact
Marketing Emails	Email, preferences	Consent	Until unsubscribe
Website Analytics	Anonymized usage data	Legitimate interest	14 months

Third-Party Processors

We use the following third-party services that process personal data:

• Stripe: Payment processing (USA, EU-US Data Privacy Framework)
• Email Service Provider: Transactional and marketing emails
• Hosting Provider: Website and data hosting (EU-based)

All processors are bound by Data Processing Agreements (DPAs) and comply with GDPR requirements.

International Data Transfers

When we transfer data outside the EU/EEA, we ensure appropriate safeguards such as:

• EU-US Data Privacy Framework
• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission

Data Breach Procedures

In the event of a personal data breach, we will:

• Notify the supervisory authority within 72 hours (if required)
• Notify affected individuals without undue delay (if high risk)
• Document the breach and our response

Exercising Your Rights

To exercise any of your GDPR rights, please contact us:

Supervisory Authority

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority. For a list of EU data protection authorities, visit: European Data Protection Board