European Union / European Economic Area Privacy Notice

Last updated: June 5, 2024

This section applies only to individuals located in the European Union (EU), European Economic Area (EEA), and the United Kingdom and supplements the PriceLasso Privacy Policy.

1. Data Controller

For purposes of the EU General Data Protection Regulation ("GDPR"), PriceLasso is the data controller of your personal data. Contact: lasso@pricelasso.com

2. Legal Bases for Processing Personal Data

For EU/EEA users, PriceLasso processes personal data only when a lawful basis applies under Article 6 of the GDPR. These include:

Purpose	Legal Basis
Creating and managing user accounts	Performance of a contract
Providing PriceLasso services	Performance of a contract
Billing, invoicing, fraud prevention	Legal obligation & legitimate interests
Customer support and communications	Legitimate interests
Security, abuse prevention, logging	Legitimate interests
Product analytics & service improvement	Legitimate interests
Marketing communications	Consent (where required)
Cookies and advertising technologies	Consent (where required)

Where we rely on legitimate interests, we do so only where such interests are not overridden by your fundamental rights and freedoms.

3. Cookies, Tracking, and Consent

PriceLasso uses cookies and similar technologies for functionality, analytics, and advertising.

Essential cookies are required for the operation of the service.
Non-essential cookies (analytics, advertising, A/B testing) are used only with your consent where required by EU law.

EU/EEA users may:

Accept or reject non-essential cookies via a cookie consent banner
Change cookie preferences at any time
Withdraw consent without affecting essential service functionality

You may also control cookies through your browser settings.

4. International Data Transfers

PriceLasso is based in the United States, and personal data may be transferred outside the EU/EEA.

When we transfer personal data internationally, we rely on appropriate safeguards, including:

European Commission-approved Standard Contractual Clauses (SCCs)
Other lawful transfer mechanisms permitted under GDPR Articles 44-49

You may request additional information about these safeguards by contacting us.

5. EU/EEA Data Subject Rights

If you are located in the EU/EEA, you have the following rights under the GDPR:

Right of access - obtain a copy of your personal data
Right to rectification - correct inaccurate or incomplete data
Right to erasure - request deletion of your personal data
Right to restriction of processing
Right to data portability - receive your data in a structured, commonly used format
Right to object - to processing based on legitimate interests or direct marketing
Right to withdraw consent at any time (where processing is based on consent)
Right not to be subject to automated decision-making producing legal or similarly significant effects

You may exercise these rights by contacting: lasso@pricelasso.com

We may need to verify your identity before fulfilling a request.

6. Right to Lodge a Complaint

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with a data protection supervisory authority in your country of residence, place of work, or where the alleged infringement occurred.

7. Data Retention

We retain personal data only for as long as necessary to:

Provide the Services
Comply with legal obligations
Resolve disputes
Enforce agreements

When data is no longer required, it is securely deleted or anonymized.

8. Withdrawal of Consent

Where processing is based on consent (e.g., marketing emails, non-essential cookies), you may withdraw consent at any time:

By using unsubscribe links
By adjusting cookie preferences
By contacting us directly

Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

9. Updates to This EU Notice

We may update this EU/EEA Privacy Notice to reflect legal, technical, or operational changes. Material changes will be communicated appropriately, and the "Last updated" date will be revised.