Last updated: December 2, 2024

1. GDPR Compliance Statement

Central (CIF: 74657091B), operator of Kaiju Email Verifier, is fully committed to compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"). We process personal data lawfully, transparently, and in accordance with your rights as a data subject.

2. Legal Basis for Processing

We process personal data under the following legal bases:

Contract Performance (Art. 6(1)(b) GDPR): Processing email lists is necessary to deliver our verification service.
Legitimate Interest (Art. 6(1)(f) GDPR): We use analytics to improve service performance and security.
Consent (Art. 6(1)(a) GDPR): You consent to our use of cookies by continuing to use the website (see Cookie Policy).

3. Data We Process

3.1. Email Lists

When you upload a file, we act as a Data Processor (you are the Data Controller). Email addresses are processed in-memory only and are automatically deleted immediately after download. We do not store, log, or archive your lists.

3.2. Analytics Cookies

We use Google Analytics (a service of Google LLC) to collect anonymized usage statistics. Data is processed in accordance with Google's GDPR compliance measures and the EU-US Data Privacy Framework adequacy decision.

3.3. Payment Data (Stripe)

If you use a paid service (post-beta), payment processing is handled by Stripe (a GDPR-compliant processor based in the EU/US). We do not store your credit card information.

4. Your GDPR Rights

Under the GDPR, you have the following rights:

Right to Access (Art. 15): Request a copy of your personal data
Right to Rectification (Art. 16): Correct inaccurate or incomplete data
Right to Erasure (Art. 17 - "Right to be Forgotten"): Request deletion of your data (note: email lists are already auto-deleted)
Right to Restrict Processing (Art. 18): Limit how we process your data
Right to Data Portability (Art. 20): Receive your data in a machine-readable format
Right to Object (Art. 21): Object to processing based on legitimate interest
Right to Withdraw Consent (Art. 7(3)): Withdraw consent for cookie use at any time

To exercise these rights, contact us at contact@kaijuverifier.com

5. Data Retention

• Email Lists: Zero retention (deleted immediately after download)
• Analytics Cookies: Google Analytics retains data for 26 months (configurable by Google)
• Payment Data: Retained by Stripe per their GDPR-compliant retention policies

6. Data Transfers

• Google Analytics: Data may be transferred to the US under the EU-US Data Privacy Framework (Adequacy Decision)
• Stripe: EU-based processing with GDPR compliance (Stripe GDPR)

7. Lodge a Complaint

If you believe your GDPR rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD):

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6
28001 Madrid, España
Website: www.aepd.es

8. Contact

For any GDPR-related inquiries or to exercise your rights, contact us at:
Email: contact@kaijuverifier.com
Address: Trajano 8 Local B, Andalucia, España