GDPR Compliance

1.1 Overview. The General Data Protection Regulation (GDPR) is a European Union regulation that governs the collection, processing, storage, and protection of personal data. GDPR applies to:

1.2 Key Principles. GDPR is based on seven key principles:

1.3 Our Commitment. MaileniumAI is fully committed to GDPR compliance and implements comprehensive measures to ensure that all personal data processing complies with GDPR requirements.

2.1 Right of Access. You have the right to obtain confirmation of whether we process your personal data and to access that data. You can request:

2.2 Right to Rectification. You have the right to have inaccurate personal data corrected and incomplete data completed. You can update your account information directly through our Service or request corrections by contacting us.

2.3 Right to Erasure ("Right to be Forgotten"). You have the right to request deletion of your personal data in certain circumstances, including when:

2.4 Right to Restrict Processing. You have the right to restrict processing of your personal data when:

2.5 Right to Data Portability. You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller. We provide data export functionality to facilitate data portability.

2.6 Right to Object. You have the right to object to processing of your personal data for:

2.7 Right to Withdraw Consent. When processing is based on consent, you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

2.8 Right to Lodge a Complaint. You have the right to lodge a complaint with a supervisory authority if you believe that processing of your personal data violates GDPR. Contact information for supervisory authorities is provided in Section 9.

3.1 Lawful Basis for Processing. We process personal data only when we have a lawful basis, including:

3.2 Data Minimization. We collect and process only the personal data that is necessary for the specified purposes. We do not collect excessive or irrelevant data.

3.3 Purpose Limitation. We process personal data only for specified, explicit, and legitimate purposes. We do not process personal data for purposes incompatible with the original purposes.

3.4 Data Accuracy. We take reasonable steps to ensure that personal data is accurate and kept up to date. You can update your information through your account settings or by contacting us.

3.5 Storage Limitation. We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. We have clear data retention policies and automatically delete data when retention periods expire.

3.6 Security Measures. We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or alteration, including:

3.7 Privacy by Design and by Default. We implement privacy by design and by default, meaning that privacy and data protection considerations are built into our systems and processes from the outset, and we process only the minimum amount of personal data necessary by default.

3.8 Data Processing Agreements. When we act as a data processor (processing contact data on behalf of users), we enter into Data Processing Agreements (DPAs) that comply with GDPR requirements. Our Data Processing Schedule provides detailed information about our processing activities.

3.9 Data Breach Notification. In the event of a personal data breach that poses a risk to data subjects' rights and freedoms, we notify affected data controllers without undue delay (within 72 hours where feasible) and assist in notifying data subjects when required.

3.10 Data Protection Impact Assessments. We conduct Data Protection Impact Assessments (DPIAs) for processing activities that are likely to result in a high risk to data subjects' rights and freedoms.

4.1 Consent Management. We provide tools to help you manage consent in compliance with GDPR:

4.2 Data Subject Rights Tools. We provide tools to help you fulfill data subject rights requests:

4.3 Privacy Policies and Transparency. We provide:

4.4 Security and Data Protection. We implement:

4.5 Audit Logs and Compliance Reporting. We maintain:

5.1 Data Controller Role. When you use MaileniumAI to send email marketing campaigns, you act as the data controller for the contact data (email recipient data) you process. As a data controller, you are responsible for:

5.2 Our Role as Data Processor. When we process contact data on your behalf, we act as a data processor. We process contact data only in accordance with your instructions and our Data Processing Agreement. We assist you in fulfilling your obligations as a data controller by providing tools and support.

5.3 Data Processing Agreement. Our Data Processing Schedule and Terms of Service include provisions that comply with GDPR requirements for data processing agreements. By using MaileniumAI, you enter into a Data Processing Agreement with us.

6.1 How to Exercise Your Rights. You can exercise your GDPR rights by:

6.2 Response Time. We will respond to your GDPR rights requests within 30 days (or as required by applicable law). For complex requests, we may extend this period by up to 60 days, with notification to you.

6.3 Verification. We may require verification of your identity before processing GDPR rights requests to protect against fraudulent or unauthorized requests. We may ask for:

6.4 No Fees. We do not charge fees for processing GDPR rights requests, except in cases where requests are manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse the request.

6.5 Right to Complain. If you are not satisfied with our response to your GDPR rights request, you have the right to lodge a complaint with a supervisory authority. Contact information for supervisory authorities is provided in Section 9.

7.1 Transfer Locations. Personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States and other jurisdictions where our sub-processors operate.

7.2 Transfer Safeguards. We ensure that international data transfers comply with GDPR requirements through:

7.3 Your Consent. By using MaileniumAI, you acknowledge that personal data may be transferred to and processed in countries outside your jurisdiction. You are responsible for ensuring that such transfers comply with applicable laws in your jurisdiction.

8.1 Our Commitment. We are committed to protecting personal data and have procedures in place to detect, assess, and respond to personal data breaches promptly.

8.2 Notification to Data Controllers. In the event of a personal data breach affecting contact data processed on behalf of users (data controllers), we will:

8.3 Notification to Data Subjects. Where a breach poses a high risk to data subjects' rights and freedoms, we will assist data controllers in notifying affected data subjects without undue delay.

8.4 Notification to Supervisory Authorities. We will notify relevant supervisory authorities of personal data breaches in accordance with GDPR requirements (within 72 hours where feasible).

9.1 Right to Complain. If you believe that processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority in the EEA member state where you reside, work, or where the alleged violation occurred.

9.2 Contact Information. Contact information for supervisory authorities in EEA member states can be found at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

9.3 Our Cooperation. We cooperate fully with supervisory authorities and will respond to any inquiries or investigations in a timely and transparent manner.

10.1 Page Updates. We may update this GDPR compliance page from time to time to reflect changes in our practices, legal requirements, or GDPR guidance. We will notify you of material changes by posting the updated page on our Service and updating the "Last Updated" date.

10.2 Continued Use. Your continued use of MaileniumAI after we post an updated page constitutes your acceptance of the updated information. If you do not agree with the updated information, you should stop using our Service.

If you have questions about GDPR compliance, need to exercise your GDPR rights, or have concerns about data processing, please contact us:

Data Protection Officer
Email: dpo@mailenium.ai

For general inquiries or support, please contact us at support@mailenium.ai or visit our Help Portal.