GDPR Compliance

SpeedRun Founder is committed to full compliance with the General Data Protection Regulation (GDPR) for all users in the European Union and European Economic Area.

Your GDPR Rights

As a user in the EU/EEA, you have the following rights:

Right to Access

Request a copy of all personal data we hold about you.

How to exercise: Account Settings → Privacy → Export My Data

Right to Rectification

Correct inaccurate or incomplete personal data.

How to exercise: Account Settings → Profile → Edit Information

Right to Erasure (Right to be Forgotten)

Request deletion of your personal data.

How to exercise: Account Settings → Privacy → Delete My Account

Right to Data Portability

Receive your data in a structured, machine-readable format.

How to exercise: Account Settings → Privacy → Export My Data (JSON format)

Right to Restrict Processing

Limit how we process your data in certain circumstances.

How to exercise: Contact arturnegru@gmail.com

Right to Object

Object to processing based on legitimate interests or direct marketing.

How to exercise: Account Settings → Privacy → Preferences

Right to Withdraw Consent

Withdraw consent for data processing at any time.

How to exercise: Account Settings → Privacy → Consent Management

Data Processing Information

Legal Basis for Processing

  • Consent: You explicitly agree to data processing when accepting our terms
  • Contract Performance: Processing necessary to provide our services
  • Legitimate Interest: Fraud prevention, security, and service improvement
  • Legal Obligation: Compliance with applicable laws

Data Retention

We retain data only as long as necessary:

  • Active accounts: While account remains active
  • Deleted accounts: Up to 90 days for legal/fraud prevention, then permanent deletion
  • Financial records: 7 years (legal requirement)

International Transfers

Your data may be transferred outside the EU/EEA. We ensure adequate protection through:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Service providers with GDPR-compliant data processing agreements
  • Transfer Impact Assessments for high-risk transfers

Response Time

We respond to GDPR requests within 72 hours for urgent matters and within 30 days for standard requests, as required by GDPR.

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.

Find your local supervisory authority: EDPB Member List

Data Protection Officer