GDPR Compliance

Last updated: February 2026

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

Right to Access (Article 15)

You have the right to obtain confirmation whether your personal data is being processed and access to that data. You can request a copy of your data at any time.

Right to Rectification (Article 16)

You have the right to request correction of inaccurate personal data. You can update your profile information directly in your account settings.

Right to Erasure (Article 17)

You have the right to request deletion of your personal data ("right to be forgotten"). You can delete your account from the account settings page, or contact us for assistance.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used format. Contact us to request an export of your data.

Right to Object (Article 21)

You have the right to object to processing of your personal data for direct marketing or based on legitimate interests. Use the unsubscribe link in any email, or contact us.

Legal Basis for Processing

We process your personal data based on:

• Contractual necessity: To provide our services when you create an account
• Consent: For marketing communications (you can withdraw anytime)
• Legitimate interests: For fraud prevention, security, and service improvement
• Legal obligations: For tax, regulatory, and compliance requirements

Data Processing

We act as a data controller for your personal information. For a list of third-party services that may process your data on our behalf, see our Subprocessors page.

Data Transfers

Your data may be transferred to and processed in countries outside the EEA. When this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for up to 90 days for backup purposes and to comply with legal obligations.

Exercising Your Rights

To exercise any of your rights, you can:

• Use the self-service options in your account settings
• Email us at privacy@the-jam.webglo.org

We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority.

Data Protection Officer

For data protection inquiries, contact our privacy team at privacy@the-jam.webglo.org.