GDPR Compliance

1. Our Commitment to GDPR Compliance

ProiTV is fully committed to protecting your personal data and complying with the EU General Data Protection Regulation (GDPR). This page explains how we ensure your data rights are respected and how you can exercise them.

The GDPR gives EU residents more control over their personal data. As a European-based IPTV service provider, we take these responsibilities seriously and have implemented comprehensive measures to protect your privacy.

2. What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It applies to all organizations that process personal data of EU residents, regardless of where the organization is based.

2.1 GDPR Principles

The GDPR is built on seven key principles:

• Lawfulness, Fairness, Transparency: Data must be processed legally, fairly, and transparently
• Purpose Limitation: Data collected for specific purposes only
• Data Minimization: Only necessary data is collected
• Accuracy: Data must be accurate and up to date
• Storage Limitation: Data kept only as long as necessary
• Integrity and Confidentiality: Data protected with appropriate security
• Accountability: We can demonstrate compliance with all principles

3. Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

3.1 Right to Access (Article 15)

You have the right to request a copy of all personal data we hold about you. We will provide this information within 30 days of your request.

What you'll receive:

• Categories of personal data we process
• Purposes of processing
• Recipients of your data
• Retention periods
• Your rights and how to exercise them

3.2 Right to Rectification (Article 16)

You can correct inaccurate or incomplete personal data at any time through your account settings or by contacting us.

3.3 Right to Erasure - "Right to be Forgotten" (Article 17)

You can request deletion of your personal data when:

• Data is no longer necessary for the original purpose
• You withdraw consent (where consent was the legal basis)
• You object to processing and there are no overriding grounds
• Data was unlawfully processed
• Data must be erased for legal compliance

Note: We may retain some data for legal obligations (e.g., tax records for 7 years).

3.4 Right to Restriction of Processing (Article 18)

You can request that we limit how we use your data when:

• You contest the accuracy of your data
• Processing is unlawful but you don't want erasure
• We no longer need the data but you need it for legal claims
• You've objected to processing pending verification

3.5 Right to Data Portability (Article 20)

You can receive your personal data in a structured, machine-readable format (JSON or CSV) and transfer it to another service provider.

Portable data includes:

• Account information
• Viewing history and preferences
• Subscription details

3.6 Right to Object (Article 21)

You can object to processing based on:

• Legitimate interests
• Direct marketing (we'll stop immediately)
• Scientific or historical research

3.7 Right to Withdraw Consent (Article 7)

Where processing is based on consent, you can withdraw it at any time. This doesn't affect the lawfulness of processing before withdrawal.

3.8 Right to Lodge a Complaint (Article 77)

If you believe we've violated your data protection rights, you can file a complaint with your national data protection authority.

4. How to Exercise Your Rights

To exercise any of your GDPR rights, contact us:

4.1 Information to Include

• Your full name and account email
• Specific right you wish to exercise
• Any relevant details or context
• Proof of identity (for security purposes)

4.2 Response Timeline

• Acknowledgment: Within 48 hours
• Standard Response: Within 30 days
• Complex Requests: Up to 60 days (with notification)

4.3 Verification Process

To protect your data, we may ask you to verify your identity before processing requests. This may include:

• Confirming account details
• Answering security questions
• Providing government-issued ID (for sensitive requests)

5. How We Process Your Data

5.1 Legal Basis for Processing

We process your personal data based on:

• Contractual Necessity (Article 6.1.b): To provide our IPTV service
• Consent (Article 6.1.a): For marketing emails and optional features
• Legitimate Interests (Article 6.1.f): Fraud prevention, service improvement
• Legal Obligations (Article 6.1.c): Tax compliance, legal requests

5.2 Data We Collect

Account Data: Name, email, password (encrypted)

Payment Data: Billing address, transaction history (card details stored by payment processor only)

Usage Data: Viewing history, device information, IP address

Technical Data: Connection logs, error reports, streaming quality

5.3 Who We Share Data With

• Payment Processors: Stripe, PayPal (PCI-DSS compliant)
• Cloud Hosting: Secure servers in the EU
• Analytics: Aggregated, anonymized usage statistics
• Support Tools: Customer service platforms

All third parties are GDPR-compliant and bound by data processing agreements.

6. Data Security Measures

We implement technical and organizational measures to protect your data:

6.1 Technical Measures

• Encryption: TLS/SSL in transit, AES-256 at rest
• Access Controls: Role-based permissions, multi-factor authentication
• Firewalls: Network security and intrusion detection
• Regular Audits: Quarterly security assessments
• Penetration Testing: Annual third-party security tests

6.2 Organizational Measures

• Employee Training: Mandatory GDPR and data protection training
• Data Processing Agreements: With all vendors
• Incident Response Plan: 72-hour breach notification procedure
• Privacy by Design: Data protection built into all systems

7. Data Breach Notification

In the unlikely event of a data breach affecting your personal data, we will:

7.1 Our Response (Article 33 & 34)

• Within 72 hours: Notify supervisory authority
• Without undue delay: Notify affected individuals
• Provide information on: Nature of breach, data affected, likely consequences, mitigation measures

7.2 What You Should Do

• Change your password immediately
• Enable two-factor authentication
• Monitor your account for suspicious activity
• Contact us if you have concerns

8. International Data Transfers

While we primarily store data in EU servers, some service providers may be located outside the EEA. We ensure adequate protection through:

8.1 Transfer Safeguards (Chapter V)

• Standard Contractual Clauses (SCCs): EU Commission-approved contracts
• Adequacy Decisions: Countries deemed to have adequate protection
• Binding Corporate Rules: For multinational corporations
• Privacy Shield: For US-based processors (where applicable)

8.2 Your Rights for International Transfers

You can request information about safeguards in place for any international data transfers.

9. Children's Privacy Protection

Our service is not directed at children under 18 years of age. We do not knowingly collect data from children.

If you're a parent/guardian: Contact us immediately at gdpr@proitv.com if you believe your child has provided personal data. We will delete it promptly.

10. Supervisory Authority Contact

If you're not satisfied with how we handle your data rights, you can lodge a complaint with your national data protection authority:

10.1 EU Data Protection Authorities

11. Data Retention Periods

We retain your personal data only as long as necessary:

• Active Accounts: Duration of subscription + 90 days
• Cancelled Accounts: 30 days (unless legal requirement)
• Payment Records: 7 years (tax law compliance)
• Marketing Consent: Until withdrawal + 30 days
• Legal Claims: Statute of limitations period

12. Updates to This Page

We may update this GDPR compliance information to reflect changes in:

• Data protection laws and regulations
• Our data processing practices
• Guidance from supervisory authorities

Significant changes will be notified via email and prominent website notice.

13. Contact Our Data Protection Officer

For any questions about GDPR compliance or to exercise your rights: