GDPR Compliance

Our commitment to protecting your data under the General Data Protection Regulation

Our Commitment

TortugAds is committed to ensuring the security and protection of personal information that we process, and to providing a compliant and consistent approach to data protection. We have implemented robust policies and procedures to comply with the EU General Data Protection Regulation (GDPR).

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to be Informed

You have the right to know how your data is being collected, used, and shared.

Right of Access

You can request a copy of all personal data we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data ("right to be forgotten").

Right to Restrict

You can request limitation of processing in certain circumstances.

Right to Portability

You can request your data in a structured, machine-readable format.

How We Protect Your Data

  • Data Minimization: We only collect data that is necessary for the purposes specified
  • Purpose Limitation: Data is only used for the purposes for which it was collected
  • Storage Limitation: We retain data only as long as necessary
  • Integrity & Confidentiality: We implement appropriate security measures
  • Accountability: We document our compliance and maintain records of processing activities

Data Processing Agreements

When TortugAds acts as a data processor on your behalf (processing your end-users' data), we enter into Data Processing Agreements (DPAs) that comply with GDPR requirements. Our DPA includes:

  • Clear definition of processing scope and purposes
  • Obligations regarding sub-processors
  • Data security commitments
  • Breach notification procedures
  • Data deletion and return provisions

International Data Transfers

When transferring data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Transfers to countries with adequate protection determinations
  • Supplementary measures where required

Exercising Your Rights

To exercise any of your GDPR rights, you can:

  • Use the data management tools in your TortugAds account settings
  • Contact our Data Protection Officer at dpo@tortugads.com
  • Submit a formal request through our support portal

We will respond to all legitimate requests within 30 days. There is no fee for exercising your rights unless requests are manifestly unfounded or excessive.

Contact Our DPO

Our Data Protection Officer can be contacted for any questions regarding our GDPR compliance:

Email: dpo@tortugads.com