1. Data Controller

Fractionista, operated by GZE Advisory, is the data controller for personal data processed through this platform, in accordance with the EU General Data Protection Regulation (GDPR / DSGVO).

2. Data We Collect

We collect: name, email address, professional experience, availability preferences, profile photo, and platform usage data.

3. Legal Basis

We process your data based on your consent (Art. 6(1)(a) GDPR) and for the performance of our service contract (Art. 6(1)(b) GDPR).

4. Your Rights

Under GDPR, you have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Request erasure of your data (Art. 17)
• Export your data in a portable format (Art. 20)
• Withdraw consent at any time (Art. 7(3))

5. Data Storage

All data is stored in the European Union (Frankfurt, Germany) using Supabase cloud infrastructure. We have a Data Processing Agreement (DPA) in place with our infrastructure provider.

6. Data Retention

Personal data is retained while your account is active. Upon deletion, data is permanently removed or anonymized within 30 days. Anonymized audit records may be retained for compliance.

7. Contact

For privacy-related inquiries, contact privacy@fractionista.com.