GDPR Compliance

GDPR matters to Balkanza users by establishing legal protections over personal data collected, stored, and processed across the platform. The General Data Protection Regulation sets binding standards for consent, transparency, and data handling, applicable to organizations serving individuals within the European Union. Balkanza applies GDPR standards regardless of user location, extending consistent privacy protections across the full user base. Personal data on Balkanza includes profile information, communication records, and verification details, all subject to GDPR-aligned handling. Compliance with the regulation gives users control over the data, backed by defined rights and enforceable obligations placed on Balkanza.

Balkanza uses four legal bases to process personal data, each tied to a specific purpose recognized under GDPR. Consent applies when a user grants explicit permission for a specific processing activity, such as marketing communication. Contract performance covers data processed as a requirement for delivering platform services, including account creation and matching functions. Legitimate interest allows processing tied to fraud prevention, platform security, and improvement of service quality, balanced against user rights. Legal obligation applies when Balkanza processes data to meet requirements set by law enforcement, tax authorities, or regulatory bodies. Balkanza documents the applicable basis for each processing activity, maintaining transparency across the four categories.

Balkanza's Privacy Policy supports GDPR compliance by detailing the categories of personal data collected, the purposes for processing, and the legal bases applied to each activity. The policy outlines retention periods, third-party sharing practices, and the security measures Balkanza applies to protect stored data. Balkanza updates the policy to reflect changes in processing practices, keeping the document aligned with current regulatory requirements. Rights available to users, including access, correction, and deletion, appear within the policy alongside instructions for exercising the rights. Full detail on data handling practices appears in Balkanza's Privacy Policy.

Balkanza needs user consent to process personal data when the processing activity falls outside contract performance, legal obligation, or legitimate interest. Marketing communications, including promotional emails and targeted notifications, require explicit consent before Balkanza initiates the activity. Certain optional profile features, such as location sharing beyond platform requirements, depend on consent granted at the account level. Balkanza records consent at the point of collection, maintaining a verifiable trail for regulatory review. Consent remains separate from data required for core platform function, which Balkanza processes under contract performance instead.

Yes, Balkanza users can withdraw consent at any point, without affecting the lawfulness of processing carried out before withdrawal. Withdrawal takes effect through account privacy settings or direct contact with Balkanza's support channel, depending on the data category involved. Balkanza halts the specific processing activity tied to the withdrawn consent, without disrupting core platform services requiring a different legal basis. Users withdrawing consent for marketing communications, for example, stop receiving the messages while retaining full account access.

Balkanza users hold a defined set of rights under GDPR, covering access, correction, deletion, and control over personal data. Article 15 grants the right to access personal data Balkanza holds, including the purpose and categories of processing involved. Article 16 grants the right to correction, allowing users to fix inaccurate or incomplete data on file. Article 17 grants the right to erasure, commonly labeled the right to be forgotten, permitting deletion under specified conditions. Article 18 grants the right to restrict processing, limiting the use of data while a dispute or verification remains unresolved. Article 20 grants the right to data portability, allowing transfer of personal data in a structured, commonly used format. Article 21 grants the right to object to processing based on legitimate interest, including profiling tied to platform improvement. Article 22 grants protection from decisions based solely on automated processing, without human review, that produce a significant effect.

You can exercise your GDPR rights on Balkanza by contacting the platform's designated privacy channel with a specific request tied to the applicable right. Privacy controls within account settings allow direct action for certain rights, including data access and deletion requests. Identity verification precedes fulfillment of the request, confirming the requesting party matches the account holder on file. Balkanza responds to verified requests within 30 days, consistent with the timeframe required under GDPR. Extensions beyond the initial period apply only in cases involving complexity, with notice provided to the requesting user.

GDPR supports child safety on Balkanza by establishing lawful bases and data protection standards applied to information collected during child safety investigations. Balkanza processes report-related data under legal obligation and legitimate interest, both recognized under GDPR for the purpose of preventing harm. Data protection principles limit access to sensitive reports, restricting the information to trained personnel handling the specific case. Cross-border sharing with law enforcement or child-protection organizations follows GDPR-compliant transfer mechanisms, preserving data standards throughout the process. Balkanza's approach to child safety data aligns directly with protections detailed in its Child Safety & CSAE Policy.

Balkanza's Data Protection Officer holds responsibility for overseeing compliance with GDPR across all data processing activities on the platform. The role includes monitoring internal practices, advising on data protection impact assessments, and serving as a liaison with supervisory authorities. Users seeking to exercise GDPR rights or raise privacy concerns reach the Data Protection Officer through Balkanza's official GDPR contact email. The Data Protection Officer coordinates directly with Balkanza LLC leadership, ensuring privacy obligations remain integrated into platform operations.

Balkanza retains personal data for the duration required to deliver platform services, fulfill legal obligations, and resolve disputes involving an account. Data tied to active accounts remains on file for the length of the service relationship, supporting continued platform function. Legal obligations, including tax and regulatory recordkeeping, extend retention beyond account closure in specific categories of data. Data involved in an active dispute or investigation remains retained until resolution, regardless of standard retention timelines. Balkanza completes deletion of personal data within 30 days of a confirmed account deletion request, absent a legal requirement to retain the data further.

Yes, Balkanza transfers personal data internationally, given the platform's base of operations in the United States and its user base spanning multiple regions. International transfers apply appropriate GDPR safeguards, including standard contractual clauses recognized under EU regulation. Balkanza selects transfer mechanisms based on the destination country and the nature of the data involved. Safeguards applied to international transfers maintain protection standards equivalent to the requirements set for data processed within the European Union.

You can complain about Balkanza's data handling by contacting a local supervisory authority, a right preserved under GDPR regardless of prior contact with Balkanza. Balkanza encourages direct contact with the platform first, offering an opportunity to resolve the concern before escalation to a regulatory body. Users submitting a complaint directly to Balkanza receive a response addressing the specific concern raised. Supervisory authority contact remains available at any stage, independent of the outcome from Balkanza's internal review process.

A personal data breach experienced by Balkanza triggers an internal assessment to determine the scope and risk level tied to the exposed data. Balkanza notifies the relevant supervisory authority within 72 hours of becoming aware of a breach meeting the notification threshold under GDPR. Affected users receive direct notification when the breach presents a high risk to personal rights and freedoms. Balkanza documents each breach internally, recording the nature, impact, and remedial steps taken regardless of the notification outcome. The response process prioritizes containment first, followed by assessment, notification, and remediation, in sequence.

You can contact Balkanza about GDPR through the designated GDPR contact email listed on the platform, reserved for privacy-related inquiries and rights requests. Balkanza LLC operates the response process, directing GDPR inquiries to the Data Protection Officer for handling within the required timeframe. Direct contact supports requests tied to data access, correction, deletion, and consent withdrawal, among other rights. Full contact details and additional support options appear on Balkanza's Contact us page.