GDPR Compliance & Data Protection
Your rights under the General Data Protection Regulation (GDPR) and how we protect your personal data
What is GDPR?
The General Data Protection Regulation (GDPR) is a European Union regulation that came into effect on May 25, 2018. It strengthens and unifies data protection for individuals within the EU and addresses the export of personal data outside the EU.
At ImgShare.cc, we are committed to GDPR compliance and protecting your personal data. This page explains your rights under GDPR and how we handle your data.
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
1. Right to Access
You have the right to request access to your personal data. You can view and download your data from your dashboard, or contact us to receive a copy of all personal data we hold about you.
2. Right to Rectification
You have the right to have inaccurate personal data corrected. You can update your account information, image titles, and other data directly from your dashboard.
3. Right to Erasure (Right to be Forgotten)
You have the right to request deletion of your personal data. You can delete individual images or your entire account at any time from your dashboard. We will delete your data within 30 days of your request.
4. Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
5. Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can export your image data from your dashboard or contact us for assistance.
6. Right to Object
You have the right to object to the processing of your personal data for certain purposes, such as direct marketing or profiling.
7. Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produces legal effects or significantly affects you.
Personal Data We Collect
We collect and process the following types of personal data:
- Account Information: Email address, name (if provided), password (encrypted)
- Image Data: Uploaded images, image metadata (dimensions, file size, upload date)
- Usage Data: IP address, browser type, device information, country code
- Activity Data: Image views, upload timestamps, access logs
Legal Basis for Processing
We process your personal data based on the following legal bases:
- Consent: When you create an account or upload images, you consent to our processing of your data
- Contract Performance: To provide you with our image hosting and sharing services
- Legitimate Interests: To improve our services, ensure security, and prevent fraud
- Legal Obligation: To comply with applicable laws and regulations
Data Retention
We retain your personal data only for as long as necessary:
- Account Data: Retained while your account is active. Deleted within 30 days after account deletion
- Image Data: Retained while images are active. Deleted when you delete images or your account
- Usage Data: Retained for up to 90 days for security and analytics purposes
Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- Encryption of data in transit (SSL/TLS)
- Secure password storage using industry-standard hashing
- Access controls and authentication
- Regular security assessments and updates
- Secure cloud storage infrastructure
How to Exercise Your Rights
You can exercise your GDPR rights in the following ways:
Through Your Dashboard
- View and download your image data
- Update your account information
- Delete individual images
- Delete your entire account
Contact Us
For requests that cannot be handled through your dashboard, or if you have questions about your data, please contact us:
- Email: support@imgshare.cc
- Contact Form: Use our contact form
We will respond to your request within 30 days as required by GDPR.
International Data Transfers
Your data may be transferred to and stored in servers located outside the European Economic Area (EEA). We ensure appropriate safeguards are in place:
- Standard Contractual Clauses (SCCs) with data processors
- Compliance with GDPR requirements
- Secure data storage and processing
Data Breach Notification
In the unlikely event of a data breach that affects your personal data, we will:
- Notify the relevant supervisory authority within 72 hours
- Notify affected users without undue delay if the breach poses a high risk to their rights and freedoms
- Provide clear information about the nature of the breach
- Explain measures taken to address the breach
Right to Lodge a Complaint
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local data protection supervisory authority.
For EU residents, you can find your local supervisory authority at: European Data Protection Board
Updates to This Page
We may update this GDPR compliance page from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the bottom of this page indicates when changes were last made.
Last Updated: February 1, 2026
Questions About GDPR?
If you have questions about your GDPR rights or how we handle your data, our support team is here to help.