GDPR Compliance — Expertini Wire

Our Commitment

The General Data Protection Regulation (GDPR) is a European Union regulation that governs how organisations collect, use, and store personal data. Expertini Wire is committed to complying with GDPR for all users, regardless of location.

Data Controller

Expertini acts as the Data Controller for data processed on expertini.com/wire. Contact: wire@expertini.com

Lawful Bases for Processing

We process personal data under the following lawful bases:

• Contract performance: providing the platform services you signed up for
• Legitimate interests: security, fraud prevention, platform improvement
• Consent: email marketing, optional analytics cookies
• Legal obligation: tax records, law enforcement requests

Data Subject Rights

Under GDPR, you have the following rights:

• Right of access: request a copy of your personal data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your data (subject to legal obligations)
• Right to restriction: limit how we process your data
• Right to portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interests
• Rights related to automated decision-making: we do not make solely automated decisions with legal effects

To exercise any of these rights, email wire@expertini.com. We will respond within 30 days.

Data Transfers

Expertini Wire is hosted on Hetzner servers in Germany (EU). Some service providers (e.g. Google Analytics, Stripe) may transfer data outside the EEA under Standard Contractual Clauses or equivalent safeguards.

Data Retention

We retain personal data only as long as necessary:

• Account data: retained while your account is active + 30 days after deletion
• Article metadata: retained indefinitely as part of the public record
• Payment records: 7 years (legal requirement)
• Usage logs: 90 days

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights, we will notify the relevant supervisory authority within 72 hours and affected users without undue delay.

Supervisory Authority

If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with your national data protection authority. UK users may contact the ICO: ico.org.uk.