GDPR & Data Protection
GDPR Compliant
ZapMinter is committed to compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. We respect your privacy rights and provide transparent information about our data practices.
Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR Article 6:
Contract Performance (Art. 6(1)(b))
Processing necessary to provide our token creation services, manage your account, and fulfill our contractual obligations.
Legitimate Interest (Art. 6(1)(f))
Improving our services, analytics, fraud prevention, and security monitoring, where our interests don't override your rights.
Consent (Art. 6(1)(a))
Marketing communications and optional features where you've given explicit consent.
Legal Obligation (Art. 6(1)(c))
Compliance with applicable laws, regulations, and legal requests.
Your Data Protection Rights
Under GDPR, you have the following rights regarding your personal data:
Right of Access (Art. 15)
Request a copy of all personal data we hold about you.
Right to Rectification (Art. 16)
Correct inaccurate or incomplete personal information.
Right to Erasure (Art. 17)
Request deletion of your personal data ("right to be forgotten").
Right to Portability (Art. 20)
Transfer your data to another service provider.
Right to Object (Art. 21)
Object to processing based on legitimate interests.
Right to Restriction (Art. 18)
Limit how we process your data in certain circumstances.
How We Process Your Data
Data Collection
We collect data through your interactions with our platform, including account creation, token configuration, and service usage. All collection is purpose-limited and transparent.
Data Storage
Personal data is stored securely using encryption and access controls. We use reputable cloud providers with GDPR compliance and appropriate data processing agreements.
Data Retention
We retain personal data only as long as necessary for the purposes collected or as required by law. Account data is typically retained for 7 years after account closure.
Data Sharing
We do not sell personal data. Sharing is limited to service providers with appropriate contracts, legal requirements, and explicit consent where required.
International Data Transfers
When transferring personal data outside the European Economic Area (EEA), we ensure adequate protection through:
- European Commission adequacy decisions
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules (where applicable)
- Explicit consent for specific transfers
Data Security Measures
We implement technical and organizational measures to ensure data security:
Technical Measures
- • End-to-end encryption
- • Secure authentication (2FA)
- • Regular security audits
- • Automated threat detection
Organizational Measures
- • Staff training programs
- • Access control policies
- • Incident response procedures
- • Regular compliance reviews
Data Breach Response
In the unlikely event of a personal data breach, we will:
- Contain and assess the breach within 24 hours
- Notify relevant supervisory authorities within 72 hours (where required)
- Inform affected individuals without undue delay (where high risk)
- Provide clear information about the breach and remedial actions
- Take measures to prevent future occurrences
Contact Our Data Protection Officer
For all data protection inquiries, to exercise your rights, or to lodge a complaint:
Data Protection Officer: ZapMinter DPO
Email: dpo@zapminter.com
Response Time: Within 30 days of receipt
Address: ZapMinter Data Protection Office, [Your Business Address]
Right to Lodge a Complaint: You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated.
Updates to This Policy
We may update this GDPR & Data Protection policy to reflect changes in law or our practices. Material changes will be communicated through email notification and prominent website notices at least 30 days before taking effect.