Your data protection rights under the General Data Protection Regulation
Last updated: March 26, 2026
GhostBro acts as the data controller for personal data processed through our service. Our primary database infrastructure is located in Germany, ensuring compliance with EU data protection standards.
Data Protection Officer: [email protected]
Legal Entity: GhostBro Technologies
Jurisdiction: European Union (Germany)
Data Collected: Name and email address provided during registration
Legal Basis: Contract performance (Art. 6(1)(b) GDPR)
Storage Location: Secure database servers in Germany
Important: At this time, we do not collect any additional personal data beyond your name and email address.
Data Collected: Encrypted password for account security
Legal Basis: Contract performance and legitimate interests (Art. 6(1)(b)(f) GDPR)
Security: Passwords are encrypted using industry-standard algorithms
Data Collected: Anonymized usage patterns through Google Analytics on our website only
Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR)
Retention: 14 months (configured for privacy)
Important: Google Analytics is only used on our website. The downloaded GhostBro application does not collect any usage data or analytics.
We do not collect device information, browsing behavior, or any other personal data beyond your name, email, and anonymized website analytics. Our data collection is strictly limited to the information you provide during registration and anonymized website usage data.
We use Google Analytics on our website to understand user behavior and improve our service. This operates under strict data processing agreements.
Important: Google Analytics is only used on our website. The downloaded GhostBro application does not use any third-party analytics or data processing services.
Beyond Google Analytics on our website, we do not share your personal data (name and email) with any other third-party service providers for processing purposes.
Your account information remains securely stored on our servers in Germany and is not transmitted to external parties.
You have the right to obtain confirmation about whether we process your personal data and access to such data, including information about processing purposes, categories, and recipients.
You can request correction of inaccurate personal data and completion of incomplete data through your account settings or by contacting our support team.
You may request deletion of your personal data when processing is no longer necessary, you withdraw consent, or data has been unlawfully processed.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
You may object to processing based on legitimate interests. For screenshot processing, you can disable the feature at any time in your settings.
For screenshot processing based on consent, you can withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
We retain personal data only for as long as necessary:
In the unlikely event of a personal data breach, we will:
You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of alleged infringement.
Contact Our DPOTo exercise any of your GDPR rights or if you have questions about our data processing practices, please contact us:
Data Protection Officer: [email protected]
Subject Line: "GDPR Rights Request - [Your Request Type]"
Response Time: Within 30 days (extendable to 60 days for complex requests)
Verification: We may request identity verification for security purposes
If you have any questions about our GDPR compliance or data processing practices, please contact us.
Data Protection Officer: [email protected]
Legal Team: [email protected]
General Support: [email protected]