gdpr.title

gdpr.subtitle

gdpr.lastUpdated

1. GDPR Overview

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that gives EU residents greater control over their personal data. BridgeMint is committed to complying with GDPR requirements and protecting your privacy rights.

2. Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

Right of Access

You have the right to request copies of your personal data and information about how we process it.

How to exercise: Contact us at privacy@bridgemint.io with "Data Access Request" in the subject line.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

How to exercise: Update your information in your account settings or contact our support team.

Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data in certain circumstances.

Note: We may retain certain data for legal compliance, fraud prevention, or legitimate business purposes.

Right to Restrict Processing

You have the right to request that we limit how we process your personal data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.

Right to Object

You have the right to object to processing of your personal data for direct marketing or other legitimate interests.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that significantly affects you.

3. Lawful Basis for Processing

We process your personal data based on the following lawful grounds:

Contract Performance

Processing necessary to provide our services and fulfill our contractual obligations to you.

Legitimate Interests

Processing necessary for our legitimate business interests, such as fraud prevention, security, and service improvement.

Legal Compliance

Processing required to comply with legal obligations, including KYC/AML requirements.

Consent

Processing based on your explicit consent, which you can withdraw at any time.

4. Categories of Personal Data

We process the following categories of personal data:

Identity Data

  • Name and contact information
  • Date of birth
  • Government ID information
  • Address verification

Financial Data

  • Payment method information
  • Transaction history
  • Bank account details
  • Cryptocurrency addresses

Technical Data

  • IP addresses
  • Device information
  • Browser data
  • Usage analytics

Marketing Data

  • Communication preferences
  • Marketing consent
  • Campaign interactions
  • Social media data

5. Data Retention

We retain personal data for different periods depending on the purpose:

Account DataUntil account closure + 7 years
Transaction Records7 years for compliance
Marketing DataUntil consent withdrawn
Technical Data2 years maximum

6. International Data Transfers

We may transfer your personal data outside the European Economic Area (EEA). When we do so, we ensure appropriate safeguards are in place:

  • Adequacy decisions by the European Commission
  • Standard Contractual Clauses (SCCs)
  • Binding Corporate Rules
  • Certification schemes
  • Codes of conduct

7. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our GDPR compliance:

Email: dpo@bridgemint.io

Address: BridgeMint Technologies, Data Protection Office

Response Time: Within 72 hours for urgent matters

8. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe we have not handled your personal data in accordance with GDPR. You can contact:

Your Local Supervisory Authority

Lead Supervisory Authority: The authority in your country of residence

Website: European Data Protection Board

gdpr.contact.title

gdpr.contact.intro

gdpr.contact.generalInquiries

gdpr.contact.email: gdpr.contact.emailValue

gdpr.contact.responseTime: gdpr.contact.responseTimeValue

gdpr.contact.dpoTitle

gdpr.contact.dpoEmail: gdpr.contact.dpoEmailValue

gdpr.contact.dpoResponseTime: gdpr.contact.dpoResponseTimeValue