GDPR-related notice

This notice is intended for visitors and customers in the EU/EEA (and similar regimes) using the international segment of ShiftBox.

1. Representative inquiries (Article 27 GDPR)

The Provider is located outside the European Union. Inquiries from EU/EEA data protection authorities or data subjects regarding GDPR compliance may be directed to hello@shift-box.com. Depending on the nature, volume, and risk of processing, the Provider assesses whether appointment of a formal EU representative is required; this page may be updated if a representative is appointed.

2. Legal bases and rights

Processing is described in more detail in the global Privacy Policy. Where the GDPR applies, you may have rights of access, rectification, erasure, restriction, objection, portability, and the right to lodge a complaint with a supervisory authority.

For data export, account deletion, or withdrawal of consent (and similar requests), contact hello@shift-box.com from your account e-mail or with enough information to verify your identity.

Response time. For requests under Chapter III of the GDPR, the Provider will respond without undue delay and in principle within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of requests, in accordance with Article 12(3) GDPR.

Retention. After account deletion, some information may remain in backups and operational logs for a limited period (up to twelve (12) months where applicable) for legal compliance, dispute resolution, and security, as further described in the Privacy Policy.

Analytics and transfers. The website and Service may use tools such as Google Analytics; details of transfers and safeguards are described in the Privacy Policy.

Hosting. For the international segment, production data is primarily processed in the EU (for example on AWS in Frankfurt, Germany, unless another region is indicated in the product), as further described in the Privacy Policy.

3. Notice and takedown (copyright)

If you believe that content hosted on ShiftBox infringes your intellectual property rights, send a takedown notice to hello@shift-box.com including:

• a description of the copyrighted work;
• the URL or other location of the allegedly infringing material;
• your contact information;
• a statement of good faith belief that the use is not authorized; and
• a statement that the information in the notice is accurate and, where applicable, that you are authorized to act on behalf of the rights holder.