Scope of This Policy
This GDPR Policy explains how Minimap Mod processes personal data of visitors located in the European Economic Area (EEA), the United Kingdom and Switzerland, under the General Data Protection Regulation (GDPR) and the UK GDPR. It supplements our Privacy Policy.
Data Controller
The data controller responsible for your personal data is Minimap Mod, 2150 Harbor Point Ave, Suite 410, Seattle, WA 98121, United States. You can contact us about any data protection matter at [email protected].
Personal Data We Process
- Contact data: name, email address and message content from the contact form.
- Newsletter data: email address and subscription preferences.
- Technical data: IP address, browser, device and usage data from server logs and analytics.
Legal Bases for Processing
- Consent (Art. 6(1)(a)): newsletters and optional analytics cookies.
- Legitimate interests (Art. 6(1)(f)): keeping the website secure, preventing abuse and understanding how content is used.
- Pre-contractual steps and requests (Art. 6(1)(b)): replying to messages you send us.
- Legal obligation (Art. 6(1)(c)): keeping records required by law.
Your Rights Under the GDPR
- Right of access: ask for a copy of the data we hold about you.
- Right to rectification: ask us to correct inaccurate data.
- Right to erasure: ask us to delete your data.
- Right to restriction: ask us to limit how we use your data.
- Right to data portability: receive your data in a common, machine-readable format.
- Right to object: object to processing based on legitimate interests.
- Right to withdraw consent: at any time, without affecting earlier processing.
How to Exercise Your Rights
Email [email protected] with the subject "GDPR Request". We may ask you to verify your identity. We respond within one month, which may be extended by two further months for complex requests. Requests are free unless they are clearly unfounded or excessive.
Data Retention
Contact messages are kept for up to 12 months, newsletter data until you unsubscribe, and technical logs for up to 90 days. After these periods, data is deleted or anonymized.
International Data Transfers
Some of our service providers are located outside the EEA or UK. When data is transferred, we rely on adequacy decisions or Standard Contractual Clauses approved by the European Commission to protect it.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.
Right to Complain
If you believe we have not handled your data properly, you may lodge a complaint with your local supervisory authority, such as the data protection authority in your EU country or the Information Commissioner's Office (ICO) in the UK. We would appreciate the chance to resolve your concern first.
Last updated: September 28, 2026. Related: Privacy, Terms, Disclaimer, Cookies.