GDPR

Data controller

Srenk Media Limited
Promitheos 14, Floor M, Flat / Office M1, 1065 Nicosia, Cyprus
Phone +357 99 631882 · business@srenkmedia.com

What we collect

• Account data: name, email, password hash.
• Subscription and payment data: Premium plan type and status, Stripe transaction ID, last four digits of the card for the receipt. We do not process full card numbers or CVC codes.
• Invoicing data: receipt number, optional billing address and VAT number.
• Technical data: cookies for language preference and session.

We do not store location data, tracking IPs or biometric information.

Legal basis

• Contract (GDPR Art. 6(1)(b)) — user account, delivery of the Premium subscription and billing.
• Legal obligation (Art. 6(1)(c)) — retention of accounting records under Finnish accounting law.
• Consent (Art. 6(1)(a)) — newsletters and non-essential cookies.
• Legitimate interest (Art. 6(1)(f)) — service security, prevention of abuse and payment fraud.

Retention

We keep your account until you request deletion. Accounting records (receipts, transaction identifiers) are kept for 6 years from the end of the fiscal year under Finnish accounting law. Login logs are kept for 90 days.

Your rights

• Access your data.
• Request rectification or erasure.
• Object to or restrict processing.
• Lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi).

To exercise your rights: business@srenkmedia.com. We respond within 30 days.

Transfers

Servers are located within the EU/EEA (Hetzner, Germany). Payments are processed by Stripe Payments Europe, Ltd. (Ireland), which may transfer data to Stripe Inc. in the United States under the EU Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework certification. Transactional emails are delivered via EU-region email providers.