GDPR & Your Rights

1. Your Rights at a Glance

• Right of access (Art. 15) — you can request a copy of all personal data we hold about you.
• Right to rectification (Art. 16) — you can ask us to correct inaccurate or incomplete data.
• Right to erasure (Art. 17) — you can ask us to delete your data. Some data must be retained for legal reasons (e.g. invoices).
• Right to restrict processing (Art. 18) — you can ask us to pause processing while a dispute is resolved.
• Right to data portability (Art. 20) — you can receive your data in a machine-readable format (JSON or CSV).
• Right to object (Art. 21) — you can object to processing based on legitimate interest, including direct marketing.
• Right to withdraw consent (Art. 7) — where processing is based on consent (e.g. marketing emails), you may withdraw it at any time.

2. How to Exercise Your Rights

Email your request to support@moneroasicminers.com with subject line “GDPR Request” and include:

• Your full name and email address used on this site
• Your order number(s) if relevant
• The specific right you wish to exercise

We will respond within 30 days. Complex requests may take up to 3 months — we will notify you if this is the case.

We may need to verify your identity before processing the request to protect your data from unauthorised access.

3. Legal Bases We Rely On

• Article 6(1)(b) — Contract: processing your order, managing your account.
• Article 6(1)(c) — Legal obligation: tax records, accounting, fraud reporting.
• Article 6(1)(f) — Legitimate interest: fraud prevention, site security, service improvement.
• Article 6(1)(a) — Consent: marketing emails, optional analytics cookies.

4. Data Transfers Outside the EU

We process all data within the EU/EEA. Where we use processors outside these areas (e.g. certain cloud services), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

5. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the supervisory authority in your country of residence. In Netherlands: Autoriteit Persoonsgegevens, Postbus 93374, 2509 AJ Den Haag (dataprotection.gov.nl).

We would appreciate the opportunity to resolve any concern directly before you escalate — please contact us first.

6. Data Protection Officer

We do not currently meet the threshold requiring a mandatory DPO. Data protection queries are handled by our management team: support@moneroasicminers.com