GDPR Compliance

Last updated: June 3, 2026

SiteIsOnline is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR). This page outlines our GDPR compliance practices and your rights as a data subject.

1. Our Commitment to GDPR Compliance

We are committed to ensuring that our data processing activities comply with the GDPR. This includes:

  • Processing personal data lawfully, fairly, and transparently
  • Collecting data only for specified, explicit, and legitimate purposes
  • Ensuring data accuracy and keeping it up to date
  • Storing data only for as long as necessary
  • Implementing appropriate security measures
  • Being accountable for our data protection practices

2. Lawful Basis for Processing

We process your personal data based on the following lawful grounds:

2.1 Contractual Necessity

Processing is necessary to perform our contract with you (providing website monitoring services).

Data processed: Account information, monitoring configurations, billing data

2.2 Legitimate Interests

Processing is necessary for our legitimate interests in operating and improving our service, provided these interests do not override your fundamental rights.

Data processed: Usage analytics, service optimization data, fraud prevention

2.3 Consent

Where required, we obtain your explicit consent before processing certain types of personal data.

Data processed: Marketing communications, optional features, cookies (non-essential)

2.4 Legal Obligation

Processing is necessary to comply with legal obligations to which we are subject.

Data processed: Tax records, compliance reports, legal requests

3. Your Rights Under GDPR

As a data subject, you have the following rights:

3.1 Right to Access

You have the right to request a copy of the personal data we hold about you. This is known as a "data subject access request."

How to exercise: Email privacy@siteisonline.com with your request
Response time: Within 30 days
Format: Structured, commonly used, machine-readable format

3.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

How to exercise: Update information in your account settings or contact us
Response time: Within 30 days

3.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data under certain circumstances:

  • The data is no longer necessary for its original purpose
  • You withdraw consent (where processing was based on consent)
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed
  • Legal obligations require deletion

How to exercise: Contact privacy@siteisonline.com
Response time: Within 30 days

3.4 Right to Restriction of Processing

You have the right to request that we restrict processing of your personal data in certain situations:

  • You contest the accuracy of the data
  • Processing is unlawful but you don't want data erased
  • We no longer need the data but you need it for legal claims
  • You have objected to processing pending verification

3.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

Applies to: Data you provided to us and processed by automated means based on consent or contract

3.6 Right to Object

You have the right to object to processing of your personal data where:

  • Processing is based on legitimate interests or public interest
  • Data is being used for direct marketing purposes
  • Data is being used for scientific or historical research, or statistical purposes

3.7 Right to Not Be Subject to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect you.

Our practice: We do not make automated decisions that significantly affect you without human oversight.

3.8 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

How to exercise: Update preferences in your account or contact us
Note: Withdrawal does not affect the lawfulness of processing before withdrawal

4. How to Exercise Your Rights

To exercise any of your GDPR rights:

  1. Send an email to privacy@siteisonline.com
  2. Include your full name and account email address
  3. Specify which right you wish to exercise
  4. Provide any relevant details to help us process your request

We will respond to your request within 30 days. In some cases, we may request additional information to verify your identity before processing your request.

5. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our GDPR compliance:

Contact: dpo@siteisonline.com
Address: Data Protection Officer, SiteIsOnline, 123 Monitoring Street, Tech City, TC 12345

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses: Approved by the European Commission
  • Adequacy Decisions: We transfer to countries deemed adequate by the EU
  • Binding Corporate Rules: Where applicable for large organizations
  • Data Processing Agreements: With all third-party processors

7. Data Security Measures

We implement appropriate technical and organizational measures to ensure data security:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Regular security audits and penetration testing
  • Access controls and authentication mechanisms
  • Employee training on data protection
  • Incident response and breach notification procedures
  • Regular backup and disaster recovery testing

8. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms:

  • We will notify the relevant supervisory authority within 72 hours of becoming aware
  • We will notify affected individuals without undue delay if the breach poses a high risk
  • Notifications will include the nature of the breach, likely consequences, and measures taken

9. Data Retention

We retain personal data only for as long as necessary:

  • Active accounts: Throughout the duration of your subscription
  • Closed accounts: Up to 2 years for legitimate business purposes
  • Financial records: 7 years as required by tax and accounting laws
  • Marketing data: Until consent is withdrawn or you opt out
  • Legal claims: As long as necessary to defend or pursue legal rights

10. Children's Data

Our service is not directed at children under 16 years of age. We do not knowingly collect or process personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

11. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority.

EU Supervisory Authorities: You can find your local data protection authority at https://edpb.europa.eu/about-edpb/board/members_en

However, we encourage you to contact us first so we can address your concerns directly.

12. Updates to This Page

We may update this GDPR compliance page to reflect changes in our practices or legal requirements. Material changes will be communicated through our website and via email to registered users.

13. Contact Us

For any questions about our GDPR compliance or to exercise your rights:

Email: privacy@siteisonline.com
DPO Email: dpo@siteisonline.com
Address: SiteIsOnline, 123 Monitoring Street, Tech City, TC 12345