GDPR — Your Data Rights
PipData GmbH is headquartered in Germany and fully subject to the General Data Protection Regulation (GDPR). This page explains your rights and how we protect your personal data.
Your Eight Rights Under GDPR
As a data subject under the GDPR, you have the following rights with respect to your personal data that we process:
You have the right to request a copy of all personal data we hold about you, including what data, why we process it, and who we share it with.
You have the right to have inaccurate personal data corrected and incomplete data completed without undue delay.
You can request deletion of your personal data when it's no longer necessary for the purpose it was collected, or when you withdraw consent. Subject to legal retention obligations.
You can request that we limit the processing of your personal data in certain circumstances, for example while contesting its accuracy.
You have the right to receive your personal data in a structured, commonly used, machine-readable format (JSON or CSV), and to transmit it to another controller.
You can object to the processing of your personal data where we rely on legitimate interests as our legal basis. We will stop unless we have compelling grounds that override your interests.
Where processing is based on your consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
You have the right to lodge a complaint with your national supervisory authority if you believe we have processed your data unlawfully. See the Supervisory Authority section below.
How to Exercise Your Rights
To exercise any of the rights listed above, please contact us at:
Example: "GDPR Request — Right of Access"
We will need to verify your identity before processing the request. We may ask you to provide your account email address and a confirmation of your registered API key. We will respond within 30 days as required by Article 12 GDPR. For complex requests, this may be extended by an additional 2 months with notice.
Legal Bases for Processing
| Data Type | Legal Basis | Retention |
|---|---|---|
| Account information (email, name) | Contract performance (Art. 6(1)(b)) | 3 years after contract end |
| API usage logs | Legitimate interest (Art. 6(1)(f)) — security and abuse prevention | 12 months |
| Payment records (TX hashes) | Legal obligation (Art. 6(1)(c)) — German commercial law | 10 years (§257 HGB) |
| Support correspondence | Legitimate interest (Art. 6(1)(f)) | 3 years |
| Newsletter / marketing | Consent (Art. 6(1)(a)) | Until consent withdrawn |
International Data Transfers
PipData GmbH processes all personal data within the European Union. Our servers are located in Germany (Frankfurt). We do not transfer personal data outside the EEA unless:
- The recipient country has an adequacy decision from the European Commission
- We have implemented EU Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR
- You have explicitly consented to the transfer (Art. 49(1)(a) GDPR)
Currently, the only potential non-EEA transfer involves our contact form processor (Formspree, Inc., USA), which operates under Standard Contractual Clauses.
Supervisory Authority
As a German company, our competent supervisory authority is:
You are entitled to lodge a complaint with this authority if you believe your GDPR rights have been infringed. We encourage you to contact us directly first at privacy@pipdata.net — we will do our best to resolve your concern promptly.
Cookie Policy
PipData.net uses a minimal cookie approach. We do not use tracking cookies, advertising cookies, or third-party analytics:
- Session cookies (strictly necessary): Used for navigation and security purposes. These expire when you close your browser. No consent required under ePrivacy Directive.
- No analytics cookies: We do not use Google Analytics, Facebook Pixel, or any third-party analytics.
- No advertising cookies: We do not serve targeted advertising on this website.
Because we only use strictly necessary cookies, we do not display a cookie consent banner. If this changes, we will update this policy and implement appropriate consent mechanisms.