GDPR Center

    Your rights under the EU General Data Protection Regulation, and how to exercise them.

    Made in EuropeDesigned & hosted in Europe — your data stays under EU jurisdiction.

    Quick Actions

    Your rights under GDPR

    Right to Access (Art. 15)

    Request a copy of all personal data we hold about you.

    Right to Rectification (Art. 16)

    Correct inaccurate or incomplete data — directly editable in your account.

    Right to Erasure (Art. 17)

    Request that we delete your personal data ('right to be forgotten').

    Right to Restrict Processing (Art. 18)

    Limit how we use your data while a query is being resolved.

    Right to Data Portability (Art. 20)

    Download your data in a structured, machine-readable format (JSON).

    Right to Object (Art. 21)

    Object to processing based on legitimate interests, including marketing.

    Data retention

    Data categoryRetention period
    Account profileUntil account deletion + 30 days backup
    Contact exchangesUntil you delete the contact
    Analytics events14 months, then aggregated
    Newsletter subscribersUntil unsubscribe + 30 days
    Order & invoice data10 years (legal/tax requirement)
    Support tickets3 years after closure
    Consent log5 years (proof of consent)

    Legal basis for processing

    • Contract (Art. 6(1)(b)) — providing the service you signed up for: account, profile hosting, NFC card linking, payments.
    • Legitimate interests (Art. 6(1)(f)) — fraud prevention, service improvement, security logging.
    • Consent (Art. 6(1)(a)) — marketing emails, retargeting pixels, optional analytics.
    • Legal obligation (Art. 6(1)(c)) — invoice retention, tax compliance, lawful requests from authorities.

    Related documents

    Contact our Data Protection Officer

    For any GDPR-related question, request, or complaint:

    Email: privacy@peersup.com
    Response time: within 30 days (GDPR Art. 12(3))

    You also have the right to lodge a complaint with your local supervisory authority. In Germany, this is the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI). A list of all EU authorities is available at edpb.europa.eu.