GDPR Compliance

Data Controller

Company: MinimalRank

Name: David Giménez Escudé

Tax ID: ES38121613X

Address: Terque 44 2on 1a, 08225 Terrassa, Barcelona, Spain

Email: minimalrank@gmail.com

Your Rights Under GDPR

As a user from the European Union, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Limit processing of your data
• Right to Portability: Receive your data in a portable format
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent at any time

Data We Collect

Account Information

• Email address
• Name
• Company name (optional)
• Phone number (optional)
• Billing address (for paid subscriptions)

Usage Data

• Keywords tracked
• Competitor domains monitored
• SEO analysis data
• Login history and IP addresses
• Feature usage statistics

Technical Data

• Browser type and version
• Device information
• IP address
• Cookies and similar technologies

Legal Basis for Processing

We process your personal data based on:

• Contract: To provide our SEO tracking services
• Legitimate Interest: To improve our services and prevent fraud
• Consent: For marketing communications (optional)
• Legal Obligation: To comply with applicable laws

Data Retention

• Active accounts: Data retained while account is active
• Cancelled accounts: Essential data retained for 30 days, then deleted
• Financial records: 7 years as required by Spanish law
• Analytics data: Anonymized after 90 days

Data Security

We implement appropriate technical and organizational measures:

• Encryption of data in transit (TLS/SSL)
• Encrypted password storage (bcrypt)
• Regular security audits
• Access controls and authentication
• Regular backups

Third-Party Services

We use the following GDPR-compliant services:

• Paddle: Payment processing (separate data controller)
• Resend: Email delivery
• DataForSEO: SEO data provider
• Groq AI: AI analysis (no personal data shared)

International Transfers

Your data is primarily stored in the EU. Any transfers outside the EU are protected by:

• Standard Contractual Clauses
• Adequacy decisions by the European Commission
• Your explicit consent where required

Exercising Your Rights

To exercise any of your GDPR rights:

1. Email us at minimalrank@gmail.com
2. Include proof of identity
3. Specify which right(s) you wish to exercise
4. We will respond within 30 days

Data Breach Notification

In case of a data breach that poses risk to your rights and freedoms:

• We will notify you within 72 hours
• We will provide details of the breach and its impact
• We will outline measures taken to address the breach

Supervisory Authority

You have the right to lodge a complaint with:

Spanish Data Protection Agency (AEPD)
C/ Jorge Juan, 6
28001 Madrid, Spain
Website: www.aepd.es

Contact Us

For any GDPR-related questions or requests:

Email: minimalrank@gmail.com
Subject: GDPR Request
Response time: Within 30 days