GDPR Compliance

Data Controller

Company: MinimalRank

Name: David Giménez Escudé

Tax ID: ES38121613X

Address: Terque 44 2on 1a, 08225 Terrassa, Barcelona, Spain

Email: minimalrank@minimalrank.com

Your Rights Under GDPR

As a user from the European Union, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Limit processing of your data
• Right to Portability: Receive your data in a portable format
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent at any time

Data We Collect

Account Information

• Email address
• Name
• Company name (optional)
• Phone number (optional)
• Billing address (for paid subscriptions)

Usage Data

• Keywords tracked
• Competitor domains monitored
• SEO analysis data
• Login history and IP addresses
• Feature usage statistics

Technical Data

• Browser type and version
• Device information
• IP address
• Cookies and similar technologies

Legal Basis for Processing

We process your personal data based on:

• Contract: to provide our SEO tracking services
• Legitimate interest: to improve our services and prevent fraud
• Consent: for marketing communications (optional)
• Legal obligation: to comply with applicable laws

Data Retention

• Active accounts: data retained while the account is active
• Cancelled accounts: data is kept until you ask for it to be deleted, and you can ask at any time
• Inactive free accounts: deleted after 30 days without activity, with an email warning first
• Financial records: 7 years, as required by Spanish law
• Analytics data: analytics data is aggregated and carries no personal identifiers; it is deleted if you ask for your account to be deleted

Data Security

We implement appropriate technical and organizational measures:

• Encryption of data in transit (TLS/SSL)
• Encrypted password storage (bcrypt)
• Regular security audits
• Access controls and authentication
• Regular backups

Third-Party Services

We use the following GDPR-compliant services:

• Paddle: Payment processing (separate data controller)
• Zoho Mail: Email delivery (notifications and service emails)
• DataForSEO: SEO data provider
• Self-hosted AI models: AI analysis runs on Kreamedia's own servers; your data is not sent to any external AI provider
• Cloudflare Turnstile: anti-bot check (abuse prevention, legitimate interest). May set a strictly necessary security cookie.
• Google Fonts: typeface service (fonts.googleapis.com), no tracking cookies.

International Transfers

Your data is primarily stored in the EU. Any transfers outside the EU are protected by:

• Standard Contractual Clauses
• Adequacy decisions by the European Commission
• Your explicit consent where required

Exercising Your Rights

To exercise any of your GDPR rights:

1. Email us at minimalrank@minimalrank.com
2. Include proof of identity
3. Specify which right(s) you wish to exercise
4. We will respond within 30 days

Data Breach Notification

In case of a data breach that poses risk to your rights and freedoms:

• We will notify you within 72 hours
• We will provide details of the breach and its impact
• We will outline measures taken to address the breach

Supervisory Authority

You have the right to lodge a complaint with:

Spanish Data Protection Agency (AEPD)
C/ Jorge Juan, 6
28001 Madrid, Spain
Website: www.aepd.es

Contact Us

For any GDPR-related questions or requests:

Email: minimalrank@minimalrank.com
Subject: GDPR Request
Response time: Within 30 days