GDPR Compliance Statement

Our Commitment to Data Protection

Asian Mail Order Brides is committed to protecting the privacy and personal data of all our visitors, particularly those residing in the European Economic Area (EEA), United Kingdom, and Switzerland. This GDPR Compliance Statement outlines how we adhere to the General Data Protection Regulation (EU) 2016/679 and related data protection laws.

As an informational website providing reviews and educational content about international dating platforms, we operate with transparency regarding our data practices. We are not a dating service or marriage agency ourselves, which means our data processing activities are primarily limited to website analytics, communications, and affiliate tracking.

Your Rights Under GDPR

The GDPR grants individuals specific rights regarding their personal data. If you are a resident of the EEA, UK, or Switzerland, you are entitled to exercise the following rights at any time:

Right to Access (Article 15)

You have the right to request confirmation of whether we process your personal data and, if so, to obtain a copy of that data along with information about how it is being processed. This includes the purposes of processing, categories of data involved, recipients of the data, and the retention period.

Right to Rectification (Article 16)

If any of your personal data held by us is inaccurate or incomplete, you have the right to request its correction or completion without undue delay. We encourage you to contact us promptly if you notice any errors in your information.

Right to Erasure - "Right to Be Forgotten" (Article 17)

You may request the deletion of your personal data when:

• The data is no longer necessary for the purposes for which it was collected.
• You withdraw consent and there is no other legal basis for processing.
• You object to processing and there are no overriding legitimate grounds.
• The data has been unlawfully processed.
• The data must be erased to comply with a legal obligation.

Please note that this right is not absolute. We may retain data when necessary to comply with legal obligations, establish or defend legal claims, or exercise the right of freedom of expression and information.

Right to Restriction of Processing (Article 18)

You can request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data, when processing is unlawful but you prefer restriction over erasure, or when we no longer need the data but you require it for legal claims.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You may also request that we transmit this data directly to another controller where technically feasible. This right applies to data you have provided to us and that we process based on your consent or for contract performance.

Right to Object (Article 21)

You have the right to object to processing of your personal data:

• When we process data based on our legitimate interests, unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• At any time, when your data is processed for direct marketing purposes, including profiling related to such marketing.

Right to Withdraw Consent (Article 7)

Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal. You can withdraw consent by contacting us or using the unsubscribe option in marketing communications.

Right to Lodge a Complaint (Article 77)

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority. In the EU, this is typically the Data Protection Authority of the member state where you reside, work, or where the alleged infringement occurred.

How We Process Your Personal Data

Understanding how and why we process your data is essential for transparency. This section details our data processing activities and the legal bases we rely upon.

Categories of Personal Data We Process

We may process the following categories of personal data:

• Identity Data: Name (if provided through contact forms).
• Contact Data: Email address (for inquiries or newsletter subscriptions).
• Technical Data: IP address, browser type and version, device information, operating system, time zone, and general location data.
• Usage Data: Information about how you interact with our website, including pages visited, time spent, and navigation patterns.
• Marketing Data: Your preferences for receiving communications from us.

Lawful Bases for Processing

Under GDPR, we must have a valid legal basis to process your personal data. The legal bases we rely on include:

Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact form submissions: Up to 2 years from the last interaction.
• Newsletter subscription data: Until you unsubscribe, plus 30 days for processing.
• Analytics data: Typically anonymized or deleted after 26 months.
• Cookie data: Varies by cookie type (see our Cookie Policy).
• Legal compliance records: As required by applicable law (typically 7 years).

Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects you. Our website personalization features, such as content recommendations, are based on general usage patterns and do not constitute automated decision-making under Article 22 of GDPR.

International Data Transfers

As an international dating information platform serving users worldwide, some of your personal data may be transferred to, stored, or processed in countries outside the European Economic Area, United Kingdom, or Switzerland.

Where Your Data May Be Transferred

Your personal data may be transferred to:

• United States: Where some of our hosting and analytics service providers are located.
• Other countries: Where our third-party service providers operate data centers.

Safeguards for International Transfers

When transferring data outside the EEA, we ensure appropriate safeguards are in place:

• Adequacy Decisions: Where available, we transfer data to countries that the European Commission has determined provide adequate data protection.
• Standard Contractual Clauses (SCCs): We use EU-approved standard contractual clauses with service providers in countries without adequacy decisions.
• Supplementary Measures: We implement additional technical and organizational measures where necessary to ensure equivalent protection.
• Transfer Impact Assessments: We assess the data protection laws and practices of destination countries to ensure adequate protection.

Third-Party Processors

Our key third-party processors and their locations include:

• Website hosting: Servers located in the US and Europe with appropriate safeguards.
• Analytics services: Google Analytics (US) - operating under SCCs and Google's Data Processing Terms.
• Email services: Communication platform providers with GDPR-compliant data processing agreements.

You may request information about the specific safeguards applied to international transfers of your personal data by contacting our data protection team.

Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, as required by Article 32 of GDPR:

Technical Measures

• Encryption: SSL/TLS encryption for all data transmitted between your browser and our servers.
• Access Controls: Restricted access to personal data based on role and necessity.
• Secure Infrastructure: Regular security updates and vulnerability assessments.
• Pseudonymization: Where appropriate, we separate identifying information from other data.

Organizational Measures

• Data Protection Training: Staff awareness of GDPR requirements and best practices.
• Vendor Assessment: Due diligence on third-party processors' security practices.
• Incident Response: Documented procedures for detecting, reporting, and investigating data breaches.
• Regular Reviews: Periodic assessment of data protection measures and policies.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours of becoming aware of the breach.
• Communicate the breach to affected individuals without undue delay when the breach is likely to result in a high risk to their rights and freedoms.
• Document all breaches and the remedial actions taken.

Contact Our Data Protection Team

If you have any questions about this GDPR Compliance Statement, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us.

What to Include in Your Request

To help us process your request efficiently, please provide:

• Your full name and email address used on our website.
• The specific right you wish to exercise.
• Any additional information that helps us identify your data in our systems.

Identity Verification

To protect your privacy and security, we may need to verify your identity before processing certain requests. This helps ensure that personal data is only disclosed to the rightful owner.

Supervisory Authorities

If you are not satisfied with our response or believe we are processing your data unlawfully, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EU Data Protection Authorities can be found on the European Data Protection Board website.

Updates to This Statement

We may update this GDPR Compliance Statement from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. When we make material changes:

• We will update the "Effective Date" at the top of this document.
• For significant changes affecting your rights, we may provide additional notice on our website.
• Previous versions are available upon request.

We encourage you to review this statement periodically to stay informed about our GDPR compliance practices.

Related Policies

For complete information about our data practices, please also review:

• Privacy Policy - Comprehensive details on data collection and use.
• Cookie Policy - Information about cookies and tracking technologies.
• Terms of Service - General terms governing use of our website.