GDPR Compliance Statement

What is GDPR and Who Does It Protect?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. GDPR establishes strict requirements for how organizations collect, process, store, and protect the personal data of individuals within the European Union and European Economic Area.

This GDPR Compliance Statement applies to all visitors and users of StrongSocial.ca who are located in the European Union or European Economic Area. According to GDPR, personal data means any information relating to an identified or identifiable natural person, including names, email addresses, IP addresses, location data, online identifiers, and browsing behavior.

Key GDPR Definitions

Data Controller: StrongSocial.ca determines the purposes and means of processing your personal data
Data Processor: Third-party services that process data on our behalf (analytics providers, hosting services)
Personal Data: Any information that can identify you directly or indirectly
Processing: Any operation performed on personal data, including collection, storage, use, and deletion
Data Subject: You, the individual whose personal data we process

Scope of This Statement

This GDPR Compliance Statement covers the processing of personal data when you visit or interact with StrongSocial.ca, including browsing our dating guides, reading reviews, clicking on affiliate links to dating platforms, and contacting us. This statement supplements our Privacy Policy and Cookie Policy with specific information for EU data subjects.

StrongSocial.ca is an informational website providing reviews and guides about international dating platforms. We are not a marriage agency and do not facilitate introductions or matchmaking services. For more information about our business model, please see our Affiliate Disclosure.

Legal Bases for Processing Personal Data

Under GDPR Article 6, we must have a lawful basis for processing your personal data. StrongSocial.ca processes personal data based on the following legal grounds:

1. Legitimate Interests (Article 6(1)(f))

We process certain personal data based on our legitimate interests in operating an informational website about Slavic dating platforms. Our legitimate interests include:

Providing informative content and dating platform reviews to help users make informed decisions
Operating affiliate marketing relationships with dating platforms to sustain our free informational service
Analyzing website traffic and user behavior to improve content quality and user experience
Detecting and preventing fraud, security threats, and technical issues
Communicating with users who contact us with questions or feedback

We have carefully balanced our legitimate interests against your rights and freedoms. You have the right to object to processing based on legitimate interests at any time.

2. Consent (Article 6(1)(a))

For certain processing activities, we rely on your explicit consent, including:

Use of non-essential cookies and tracking technologies for analytics and marketing purposes
Sending marketing communications if you opt-in to receive them
Processing additional personal data you voluntarily provide through contact forms

You have the right to withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal. You can manage cookie preferences through your browser settings or our cookie consent banner.

3. Compliance with Legal Obligations (Article 6(1)(c))

We may process personal data when necessary to comply with legal obligations, including:

Responding to lawful requests from regulatory authorities or law enforcement
Maintaining records required by applicable laws and regulations
Complying with accounting, tax, and financial reporting requirements

4. Protection of Vital Interests (Article 6(1)(d))

In rare circumstances, we may process personal data to protect vital interests, such as preventing serious harm or responding to emergency situations involving user safety.

Your Rights as an EU Data Subject

Under GDPR, you have comprehensive rights regarding your personal data. StrongSocial.ca is committed to facilitating the exercise of these rights. Here are your data subject rights explained:

Right of Access

You have the right to request confirmation of whether we process your personal data and obtain a copy of your data. We will provide this information free of charge within one month of your request.

Right to Rectification

You can request correction of inaccurate or incomplete personal data we hold about you. We will update your information promptly upon verification.

Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or you withdraw consent. Certain legal exceptions may apply.

Right to Restriction of Processing

You can request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

How to Exercise Your Rights

To exercise any of your data subject rights under GDPR, please contact us at [email protected]. We will respond to your request within one month, or two months for complex requests. We may require verification of your identity before processing your request to protect your personal data from unauthorized access.

You also have the right to lodge a complaint with your local supervisory authority if you believe we have not complied with GDPR. However, we encourage you to contact us first so we can address your concerns directly.

What Personal Data We Collect and How We Use It

StrongSocial.ca collects and processes limited personal data necessary to operate our informational website. Here's a comprehensive overview of our data processing activities:

Analytics and Website Usage Data

When you visit StrongSocial.ca, we automatically collect technical information through analytics services such as Google Analytics. This includes:

IP address (anonymized where possible)
Browser type and version
Operating system and device information
Pages visited, time spent on pages, and navigation paths
Referring website or source
Geographic location (country/region level only)

Purpose: We use this data to understand how visitors use our site, improve content quality, optimize user experience, and identify technical issues.

Legal Basis: Legitimate interests (with consent for non-essential analytics cookies)

Retention: Analytics data is typically retained for 26 months, after which it is automatically deleted or anonymized

Affiliate Tracking Data

When you click on affiliate links to dating platforms (SofiaDate, AmorPulse, Datempire, MySpecialDates, LoveForHeart), we use UTM parameters and cookies to track referrals. This helps us receive commission from the dating platforms you visit. The tracking data includes:

Click timestamp and referring page on StrongSocial.ca
Affiliate tracking cookies set by third-party platforms
Device and browser identifiers for attribution purposes

Purpose: Affiliate tracking enables us to operate a free informational service supported by commission revenue. This is essential to our business model as disclosed in our Affiliate Disclosure.

Legal Basis: Legitimate interests (with consent for tracking cookies)

Retention: Affiliate cookies typically expire after 30-90 days depending on the platform's policies

Contact Form and Email Communications

If you contact us through our contact page or email, we collect:

Your email address
Name (if provided)
Message content and any information you choose to share
Correspondence history

Purpose: To respond to your inquiries, provide customer support, address feedback, and maintain communication records

Legal Basis: Legitimate interests in responding to communications; consent for any additional uses

Retention: We retain contact correspondence for up to 3 years for support purposes, or longer if required by law

Cookies and Similar Technologies

We use cookies to remember your preferences, track website usage, and enable affiliate marketing. For detailed information about cookies we use, please see our Cookie Policy. You can control cookie preferences through our consent banner and browser settings.

International Data Transfers Outside the EU

StrongSocial.ca uses third-party services that may transfer your personal data outside the European Union and European Economic Area. Under GDPR Article 44-50, international data transfers must be subject to appropriate safeguards. Here's how we ensure your data remains protected:

What Are International Data Transfers?

An international data transfer occurs when personal data is transmitted from the EU/EEA to countries that do not have an adequacy decision from the European Commission. According to the European Commission, a country receives an adequacy decision when it provides a level of data protection essentially equivalent to the EU.

Third-Party Services and Data Transfers

StrongSocial.ca uses the following categories of third-party services that may involve international data transfers:

Service Category	Location	Safeguards Applied
Web Hosting	United States / Canada	Standard Contractual Clauses (SCCs)
Analytics (Google Analytics)	United States	Data Processing Agreement, IP Anonymization
Affiliate Platforms	Various (US, Cyprus, Malta)	Platform Privacy Policies, SCCs where applicable
Email Services	United States	Standard Contractual Clauses

Safeguards for International Transfers

We implement appropriate safeguards to ensure your personal data receives adequate protection when transferred outside the EU/EEA:

Standard Contractual Clauses (SCCs): We use European Commission-approved Standard Contractual Clauses with third-party processors to ensure contractual data protection obligations
Data Processing Agreements: All third-party processors sign data processing agreements that comply with GDPR Article 28 requirements
Data Minimization: We only transfer personal data that is necessary for specific purposes and avoid transferring excessive or unnecessary data
Encryption in Transit: All data transfers use SSL/TLS encryption protocols to protect data during transmission
Vendor Due Diligence: We assess third-party processors' security measures and compliance before engaging their services

Your Rights Regarding International Transfers

You have the right to obtain information about the safeguards we apply to international data transfers. You may also object to certain transfers if you believe adequate safeguards are not in place. Please contact us at [email protected] for more information about specific transfers.

Security Measures to Protect Your Personal Data

Under GDPR Article 32, data controllers must implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk. StrongSocial.ca takes data security seriously and has implemented the following measures:

Encryption

All data transmitted between your browser and our servers uses SSL/TLS encryption (HTTPS protocol). This prevents unauthorized interception during transmission. Data at rest is stored on encrypted servers where applicable.

Access Controls

We implement strict access controls limiting who can access personal data. Access is granted on a need-to-know basis only to authorized personnel who require it for legitimate business purposes.

Regular Security Updates

We keep our systems, software, and security protocols up to date with the latest patches and security updates to protect against known vulnerabilities and emerging threats.

Data Minimization

We collect and retain only the minimum personal data necessary for our specified purposes. We do not collect sensitive personal data such as health information, political opinions, or religious beliefs.

Vendor Security Assessment

All third-party processors are evaluated for security compliance before engagement. We require processors to implement appropriate security measures consistent with GDPR standards.

Incident Response Plan

We maintain procedures to detect, investigate, and respond to data security incidents. In the event of a data breach, we will notify affected individuals and supervisory authorities as required by GDPR Article 33-34.

No Absolute Security Guarantee

While we implement industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of personal data. According to user experiences documented with dating platforms like LoveForHeart, users should exercise caution when sharing personal information on any online platform. We recommend you also take precautions to protect your data, such as using strong passwords and avoiding sharing sensitive information unnecessarily.

How Long We Retain Your Personal Data

Under GDPR Article 5(1)(e), personal data must be kept in a form that permits identification of data subjects for no longer than necessary. StrongSocial.ca applies the following retention periods:

Website Analytics Data

Retention Period: 26 months from collection
Reason: This period allows us to analyze long-term trends while minimizing data retention. After 26 months, analytics data is automatically deleted or fully anonymized.

Affiliate Tracking Cookies

Retention Period: 30-90 days depending on platform
Reason: Affiliate cookies expire after the tracking window specified by each dating platform. You can delete cookies manually at any time through your browser settings.

Contact Correspondence

Retention Period: 3 years from last communication
Reason: We retain correspondence to maintain support continuity and resolve follow-up inquiries. After 3 years, emails and contact records are deleted unless legal obligations require longer retention.

Legal and Compliance Records

Retention Period: 7 years or as required by law
Reason: Certain business records must be retained for accounting, tax, and legal compliance purposes. This includes records related to affiliate transactions and financial reporting.

Deletion and Anonymization

Once retention periods expire, we securely delete or anonymize personal data. Anonymization removes all identifiers so data can no longer be attributed to you. You can request early deletion of your data by exercising your right to erasure, subject to legal exceptions.

Third-Party Dating Platforms and External Links

StrongSocial.ca contains affiliate links to third-party dating platforms including SofiaDate, AmorPulse, Datempire, MySpecialDates, and LoveForHeart. These are independent websites with their own privacy practices and GDPR compliance measures.

Our Responsibility and Limitations

As an informational guide and affiliate partner, StrongSocial.ca is not responsible for the privacy practices, data processing activities, or GDPR compliance of third-party dating platforms. When you click an affiliate link and visit another website, that platform becomes the data controller for any personal data you provide to them.

What Happens When You Click Affiliate Links

When you click on an affiliate link from StrongSocial.ca to a dating platform:

You are redirected to the third-party platform's website
The dating platform may set cookies on your device for their own purposes
An affiliate tracking parameter (UTM) is included in the URL to identify the referral source
You become subject to the third-party platform's terms of service and privacy policy

Reviewing Third-Party Privacy Practices

Before creating an account or providing personal data to any dating platform, we strongly recommend you review their privacy policy, GDPR compliance statement, and terms of service. Look for information about:

What personal data they collect and how they use it
Whether they transfer data outside the EU and what safeguards apply
Your data subject rights and how to exercise them
Their security measures and data breach notification procedures
How to contact their data protection officer or privacy team

Important Notice: User experiences shared online suggest varying levels of data protection across dating platforms. According to documented concerns about platforms like LoveForHeart, users should exercise extreme caution when sharing personal information. We encourage you to research each platform's reputation and compliance record before providing personal data.

Contact Us for Privacy and GDPR Requests

If you have questions about this GDPR Compliance Statement, wish to exercise your data subject rights, or have concerns about how we process your personal data, please contact us using the information below:

Privacy Contact Information

Email: [email protected]

Subject Line: Include "GDPR Request" or "Data Subject Rights" to ensure prompt routing

Response Time: We will respond to your request within one month of receipt. For complex requests, we may extend this period by two additional months and will notify you of the extension.

Information to Include in Your Request

To help us process your GDPR request efficiently and verify your identity, please include:

Your full name and email address
Description of the specific right you wish to exercise (access, rectification, erasure, etc.)
Any relevant details to help us locate your personal data (dates of contact, pages visited, etc.)
Proof of identity if requesting sensitive actions like data deletion

Supervisory Authority Contact

You have the right to lodge a complaint with a supervisory authority if you believe we have not complied with GDPR. You can contact your local data protection authority in your EU member state. A list of EU supervisory authorities is available on the European Data Protection Board website: https://edpb.europa.eu/about-edpb/board/members_en

However, we encourage you to contact us first at [email protected] so we have the opportunity to address your concerns directly and resolve any issues.

Changes to This GDPR Compliance Statement

We may update this GDPR Compliance Statement from time to time to reflect changes in our data processing practices, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this statement.

We encourage EU visitors to review this GDPR Compliance Statement periodically to stay informed about how we protect your personal data. If we make significant changes that materially affect your rights, we will provide prominent notice on our website or notify you by email if we have your contact information.

Continued use of StrongSocial.ca after changes to this statement constitutes acceptance of the updated terms. If you do not agree with changes, you may exercise your right to erasure or cease using our website.