GDPR Compliance Statement

What is GDPR and Why Does It Matter?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that took effect on May 25, 2018, throughout the European Union and European Economic Area. GDPR establishes strict requirements for how organizations collect, process, store, and protect the personal data of EU/EEA residents, regardless of where the organization is located.

At membrana.us, we are committed to transparency about how we handle your personal information when you visit our informational website about Slavic dating platforms and mail order brides. This compliance statement explains your rights under GDPR and how we fulfill our obligations as a data controller.

GDPR grants you significant control over your personal data, including the right to access information we hold about you, request corrections, demand erasure in certain circumstances, and object to specific processing activities. We have implemented technical and organizational measures to ensure your data is protected and processed lawfully.

Data Controller and Contact Information

For the purposes of GDPR, membrana.us acts as the data controller for personal information collected through our website. This means we determine the purposes and means of processing your personal data.

Lawful Bases for Processing Your Personal Data

GDPR requires that we have a valid legal basis for processing your personal data. Membrana.us relies on the following lawful bases under Article 6 of GDPR:

Legitimate Interests (Article 6(1)(f))

We process certain data based on our legitimate interest in operating an informational website about Slavic dating platforms. This includes:

• Analyzing website traffic and user behavior through analytics tools to improve content quality and user experience
• Detecting and preventing fraud, spam, or abuse of our website
• Understanding which dating platform reviews are most helpful to visitors
• Operating our affiliate marketing business model by tracking which platforms visitors choose to visit

We have conducted legitimate interest assessments and determined that these processing activities do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests.

Consent (Article 6(1)(a))

For certain data processing activities, particularly those involving marketing cookies and personalization technologies, we rely on your explicit consent. Our cookie consent management system allows you to:

• Accept all cookies for full website functionality
• Deny non-essential cookies while maintaining basic site operation
• Customize your preferences by cookie category (Essential, Analytics, Marketing, Personalization)
• Withdraw consent at any time by revisiting cookie settings

When you provide consent, it is freely given, specific, informed, and unambiguous. You can withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

Legal Obligation (Article 6(1)(c))

In limited circumstances, we process personal data to comply with legal obligations, such as responding to valid legal requests from law enforcement or regulatory authorities within the EU/EEA.

Your Rights as a Data Subject Under GDPR

GDPR grants you comprehensive rights regarding your personal data. As an EU/EEA resident visiting membrana.us, you have the following rights:

Right of Access (Article 15)

You have the right to obtain confirmation as to whether we are processing your personal data, and if so, to access that data along with information about how we process it. You can request a copy of your personal data in a commonly used electronic format.

Right to Rectification (Article 16)

If you believe that personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.

Right to Erasure / "Right to be Forgotten" (Article 17)

You have the right to request deletion of your personal data in certain circumstances, including:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent on which processing is based and there is no other legal ground for processing
• You object to processing based on legitimate interests and there are no overriding legitimate grounds
• Your data has been unlawfully processed
• Erasure is required to comply with a legal obligation

Note that this right is not absolute. We may need to retain certain information to comply with legal obligations or for legitimate business purposes such as fraud prevention.

Right to Restriction of Processing (Article 18)

In certain circumstances, you can request that we restrict processing of your personal data. This means we can store the data but not further process it. This right applies when you contest the accuracy of data, when processing is unlawful but you oppose erasure, or when you need the data for legal claims.

Right to Data Portability (Article 20)

You have the right to receive personal data you provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit that data to another controller without hindrance from us, where technically feasible.

Right to Object (Article 21)

You have the right to object at any time to processing of your personal data based on legitimate interests or for direct marketing purposes. When you object to processing for direct marketing, we will stop processing your data for that purpose.

Rights Related to Automated Decision-Making (Article 22)

Membrana.us does not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects you. All content recommendations and dating platform reviews are editorially selected by our team, not by automated systems.

How to Exercise Your Rights

To exercise any of these rights, please contact us through our contact page. We will respond to your request within one month, though this period may be extended by two additional months for complex requests. We will inform you of any such extension within the first month, along with the reasons for the delay.

We may request additional information to verify your identity before processing requests that involve access to or deletion of personal data. This is a security measure to ensure personal data is not disclosed to unauthorized parties.

International Data Transfers and Security Measures

How We Transfer Data Outside the EU/EEA

Membrana.us may transfer your personal data to service providers and partners located outside the European Union and European Economic Area. When we do so, we ensure appropriate safeguards are in place as required by GDPR Chapter V.

Our international data transfer mechanisms include:

• Standard Contractual Clauses (SCCs): We use European Commission-approved Standard Contractual Clauses with service providers in countries not deemed to provide adequate protection under GDPR.
• Adequacy Decisions: Where possible, we work with providers in countries that the European Commission has determined provide an adequate level of data protection.
• US Service Providers: For analytics and advertising services provided by US-based companies, we rely on their GDPR compliance frameworks and data processing agreements.

Security Measures to Protect Your Data

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, as required by GDPR Article 32. These measures include:

• Encryption: All data transmitted between your browser and our website is encrypted using SSL/TLS protocols (HTTPS).
• Access Controls: Personal data is accessible only to authorized personnel who need it to perform their job functions.
• Regular Security Assessments: We conduct periodic reviews of our security practices and update them as needed to address emerging threats.
• Data Minimization: We collect only the minimum personal data necessary for our legitimate purposes.
• Retention Limits: We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations.

While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your personal data using industry-standard practices.

Cookies, Tracking, and Affiliate Marketing Context

Membrana.us uses cookies and similar tracking technologies to operate our website, analyze traffic, and support our affiliate marketing business model. Under GDPR Article 5 and the ePrivacy Directive, we provide transparent information about our cookie practices.

Cookie Categories We Use

Our cookie consent system categorizes cookies into four types:

Affiliate Link Tracking and Your Privacy

As explained in our Affiliate Disclosure, membrana.us earns referral fees when visitors click our links to dating platforms like SofiaDate, AmorPulse, DateMpire, MySpecialDates, and LoveForHeart. Affiliate tracking parameters in URLs (such as utm_netw=membrana.us) allow these platforms to identify that you were referred by our website.

When you click an affiliate link, you leave our website and enter the privacy jurisdiction of the third-party dating platform. We encourage you to review their privacy policies and GDPR compliance statements. Membrana.us is not responsible for the data practices of third-party platforms.

The affiliate tracking we conduct does not identify you personally. We receive aggregated reports about clicks and conversions but do not receive personal information about individual users unless you choose to contact us directly.

Managing Your Cookie Preferences

You can manage your cookie preferences at any time through our cookie consent banner, which appears on your first visit and can be accessed through the footer of any page. You can also control cookies through your browser settings, though disabling certain cookies may impact website functionality.

For more detailed information about our cookie practices, please review our Cookie Policy.

How Long We Retain Your Data

GDPR requires that we retain personal data only for as long as necessary for the purposes for which it was processed. Our retention periods vary based on the type of data and the purpose of processing:

• Analytics Data: Aggregate analytics data is retained for up to 26 months to identify trends and improve content. IP addresses are anonymized within 24 hours.
• Cookie Consent Records: Records of your consent preferences are retained for up to 12 months to demonstrate GDPR compliance.
• Contact Inquiries: If you contact us directly, we retain correspondence for up to 3 years to maintain records of our communications and resolve any follow-up questions.
• Legal Compliance: In some cases, we may be required to retain certain data for longer periods to comply with legal obligations, such as tax laws or regulatory requirements.

After retention periods expire, we securely delete or anonymize personal data so that it can no longer identify you.

Updates to This GDPR Compliance Statement

We may update this GDPR Compliance Statement from time to time to reflect changes in our data processing practices, legal requirements, or organizational structure. When we make material changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this statement periodically to stay informed about how we protect your personal data. Continued use of membrana.us after changes are posted constitutes your acknowledgment of the updated statement.

For significant changes that materially affect your rights, we will provide more prominent notice, such as a banner on our homepage or, where we have your contact information, direct notification via email.

How to Exercise Your GDPR Rights

Exercising your data protection rights is straightforward. To submit a request or ask questions about our GDPR compliance, follow these steps:

1. Visit Our Contact Page: Navigate to our contact page for available communication methods.
2. Specify Your Request: Clearly state which right you wish to exercise (access, rectification, erasure, restriction, portability, or objection) and provide sufficient information for us to identify your data.
3. Verify Your Identity: For security purposes, we may ask you to provide additional information to confirm your identity before processing requests involving personal data access or deletion.
4. Receive Our Response: We will acknowledge your request and respond within one month. For complex requests, we may extend this period by up to two additional months and will inform you of the extension.

Right to Lodge a Complaint with a Supervisory Authority

If you believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority in your EU member state of residence, place of work, or place of the alleged infringement.

Each EU member state has designated a data protection authority responsible for enforcing GDPR. You can find contact information for your local supervisory authority through the European Data Protection Board website.

We would appreciate the opportunity to address your concerns directly before you contact a supervisory authority, and we encourage you to contact us first so we can attempt to resolve the issue.

Additional Privacy and Legal Resources

For comprehensive information about how membrana.us handles personal data and operates as an informational dating review website, please review these related policies:

Summary: Your GDPR Rights at Membrana.us

Membrana.us is committed to GDPR compliance and respecting the data protection rights of EU/EEA visitors. As a data subject, you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data. We process data based on legitimate interests for website operation and analytics, consent for marketing and personalization cookies, and legal obligations where required. You can exercise your rights by contacting us through our contact page, and we will respond within 30 days. We implement appropriate security measures, including encryption and access controls, to protect your data. International data transfers are safeguarded through Standard Contractual Clauses and adequacy decisions. You have the right to lodge a complaint with your local supervisory authority if you believe we have violated GDPR. We retain data only as long as necessary and provide transparent information about our cookie and affiliate tracking practices. For questions about GDPR compliance or to exercise your rights, please reach out through our contact page.