GDPR Compliance

Your data protection rights under the General Data Protection Regulation

PartnerMesh is committed to protecting your personal data and respecting your privacy rights in accordance with GDPR requirements.

Your Data Protection Rights

Right to Access

You have the right to request copies of your personal data and information about how we process it.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances.

Right to Portability

You have the right to receive your personal data in a structured, machine-readable format.

Right to Restrict

You have the right to request restriction of processing of your personal data.

Right to Object

You have the right to object to processing of your personal data for direct marketing purposes.

How We Process Your Data

Legal Basis for Processing

Contract Performance

Processing necessary to provide our services and fulfill our contractual obligations.

Legitimate Interest

Processing for analytics, security, and service improvement purposes.

Consent

Processing based on your explicit consent for marketing communications.

Legal Compliance

Processing required to comply with legal obligations and regulations.

Data Categories We Process

Account Information

  • • Name and contact details
  • • Company information
  • • Account credentials
  • • Billing information

Usage Data

  • • Platform usage analytics
  • • Feature interaction data
  • • Performance metrics
  • • Error logs and diagnostics

Business Data

  • • Partner network information
  • • Integration configurations
  • • Custom settings and preferences
  • • Communication records

Technical Data

  • • IP addresses and device information
  • • Browser and operating system data
  • • Cookies and tracking technologies
  • • Security and access logs

Data Retention

Retention Periods

Active Account Data

Retained for the duration of your account plus 30 days after account closure.

Billing Records

Retained for 7 years to comply with financial record-keeping requirements.

Usage Analytics

Aggregated and anonymized data retained for up to 2 years for service improvement.

Security Logs

Retained for 1 year for security monitoring and incident response purposes.

Automated Deletion

We have implemented automated systems to ensure data is deleted according to our retention schedules. You will receive notifications before any significant data deletion occurs.

International Data Transfers

Transfer Safeguards

When we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions for countries with equivalent data protection standards
  • Binding Corporate Rules for intra-group transfers
  • Certification schemes and codes of conduct where applicable

Primary Data Locations

EU Data Centers

Primary data processing and storage within the European Union (Frankfurt, Ireland).

US Data Centers

Secondary processing and backup storage in the United States with appropriate safeguards.

How to Exercise Your Rights

Self-Service Options
Manage your data directly through your account settings
  • Update personal information
  • Export your data
  • Manage communication preferences
  • Delete your account
Go to Settings
Contact Our DPO
For complex requests or additional assistance

Our Data Protection Officer (DPO) is available to help with any GDPR-related questions or requests.

Email: dpo@partnermesh.com

Response Time: Within 30 days

Languages: English, German, French

Please include your account email and a detailed description of your request.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority.

EU Supervisory Authorities

You can contact the supervisory authority in your EU member state or where the alleged infringement occurred.

Find Your Local Authority