GDPR Compliance

Last updated: January 05, 2026

lnkshrt.cc is committed to protecting the privacy and security of personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

lnkshrt.cc acts as the Data Controller for personal data collected through our URL shortening service.

Contact: privacy@lnkshrt.cc

2. Legal Basis for Processing

We process personal data under the following legal bases:

Consent (Article 6(1)(a))

  • Marketing communications
  • Non-essential cookies and analytics

Contract Performance (Article 6(1)(b))

  • Providing URL shortening services
  • Account management
  • Customer support

Legitimate Interests (Article 6(1)(f))

  • Service improvement and analytics
  • Fraud prevention and security
  • Abuse detection

Legal Obligation (Article 6(1)(c))

  • Compliance with applicable laws
  • Response to legal requests

3. Your Rights Under GDPR

As a data subject, you have the following rights:

πŸ“‹ Right of Access

Request a copy of your personal data we hold.

✏️ Right to Rectification

Request correction of inaccurate personal data.

πŸ—‘οΈ Right to Erasure

Request deletion of your personal data ("right to be forgotten").

⏸️ Right to Restrict Processing

Request limitation of processing in certain circumstances.

πŸ“¦ Right to Data Portability

Receive your data in a structured, machine-readable format.

🚫 Right to Object

Object to processing based on legitimate interests.

πŸ€– Rights Related to Automated Decisions

Not be subject to purely automated decisions with legal effects.

↩️ Right to Withdraw Consent

Withdraw consent at any time where processing is based on consent.

4. How to Exercise Your Rights

To exercise any of your GDPR rights, please:

  1. Email us at privacy@lnkshrt.cc
  2. Include "GDPR Request" in the subject line
  3. Specify which right(s) you wish to exercise
  4. Provide sufficient information to verify your identity

We will respond to your request within 30 days. If we need more time, we will inform you of the extension and reasons.

5. Data We Collect

Data Category Purpose Retention Period
Email Address Account authentication, communications Until account deletion
IP Address Security, analytics, abuse prevention 90 days (anonymized after)
URLs Submitted Service provision Until link deletion or expiration
Click Analytics Statistics for link owners As long as link exists
Device/Browser Info Analytics, service optimization 90 days (aggregated after)

6. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions where applicable
  • Other legally approved transfer mechanisms

7. Data Security

We implement appropriate technical and organizational measures including:

  • Encryption of data in transit (TLS/SSL)
  • Encryption of sensitive data at rest
  • Regular security assessments
  • Access controls and authentication
  • Employee training on data protection
  • Incident response procedures

8. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

  • Notify the relevant supervisory authority within 72 hours
  • Notify affected individuals without undue delay when required
  • Document the breach and remedial actions taken

9. Cookies and Tracking

We use cookies in accordance with GDPR requirements:

  • Essential cookies: Required for service functionality (no consent needed)
  • Analytics cookies: Only with your consent
  • Preference cookies: To remember your settings

You can manage cookie preferences through your browser settings.

10. Third-Party Processors

We use the following data processors:

  • Hosting Provider: For infrastructure services
  • Mailjet: For email delivery (EU-based)
  • Google Analytics: For website analytics (with IP anonymization)

All processors are bound by Data Processing Agreements (DPAs) ensuring GDPR compliance.

11. Children's Data

Our service is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

12. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. You can contact:

  • The supervisory authority in your EU member state of residence
  • The supervisory authority where the alleged infringement occurred

13. Contact Our Data Protection Team

Data Protection Officer

Email: privacy@lnkshrt.cc

Subject Line: "GDPR Inquiry"

14. Updates to This Notice

We may update this GDPR notice periodically. Significant changes will be communicated through our website or email notification.