GDPR Rights
Effective Date: January 14, 2026
This page describes how Archade complies with the General Data Protection Regulation (EU) 2016/679 and how individuals located in the European Economic Area (EEA) may exercise their data protection rights.
Archade acts as a data controller for personal data processed through its platform, except where explicitly stated otherwise.
1. Legal Basis for Processing
Under GDPR, we process personal data under the following legal bases:
- Contractual Necessity: For providing the core Archade service, maintaining accounts, and processing transactions.
- Legitimate Interest: For maintaining the public attribution graph, ensuring network security, and preventing fraud. We balance this interest against individual privacy rights.
- Consent: For specific marketing communications or optional features. You may withdraw consent at any time.
- Legal Obligation: For tax compliance, financial reporting, and responding to valid law enforcement requests.
2. Your Rights Under GDPR
If you are an EEA resident, you have the following rights with respect to your personal data:
-
Right of Access You may request confirmation of whether Archade processes personal data about you and obtain a copy of that data, including information about how and why it is processed.
-
Right to Rectification You may request correction of inaccurate or incomplete personal data. Most profile data can be corrected directly through your account settings.
-
Right to Erasure (Right to be Forgotten) You may request deletion of your personal data where legally applicable. This right is subject to limitations where data must be retained for:
- Legal compliance
- Security and fraud prevention
- Preservation of factual, public, or professional records (Legitimate Interest)
- Compliance with Freedom of Information principles
Note on Public Attribution: Professional attribution data linked to public projects is part of the historical record of the built environment. In some cases, to balance the Right to Erasure with the public interest in accurate architectural history, we may anonymize your personal contribution rather than deleting the record entirely. This ensures your personal data is removed while the factual project history remains intact.
See Entity Persistence in our Privacy Policy for details.
-
Right to Restriction of Processing You may request that Archade temporarily restrict processing of your personal data while a request is being evaluated.
-
Right to Data Portability You may request a copy of your personal data in a structured, commonly used, machine-readable format, where processing is based on consent or contract.
-
Right to Object You may object to processing based on legitimate interests, including profiling, where applicable.
-
Rights Related to Automated Decision-Making and Profiling Archade does not make decisions based solely on automated processing that produce legal or similarly significant effects on you. Any profiling used for content discovery or job matching is:
- Assistive: Humans remain in the loop for critical decisions.
- Non-determinative: It filters relevance but does not deny access to services.
-
Right to Withdraw Consent Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
3. How to Submit a GDPR Request
To exercise any of the rights above, submit a request by email to:
privacy@archade.app Subject line: “GDPR Request”
Please specify:
- The right you wish to exercise
- The email address associated with your account
- Any relevant context to help us process your request efficiently
Requests submitted through other channels may be delayed.
4. Excessive or Unfounded Requests
Archade reserves the right to charge a reasonable fee or refuse to act on a request if it is manifestly unfounded or excessive, in particular because of its repetitive character (GDPR Article 12.5).
5. Identity Verification
To protect user privacy and prevent unauthorized disclosures, Archade may request additional information to verify your identity before fulfilling a request.
Verification data is used solely for this purpose and deleted after verification is complete.
6. Response Timeline
Archade responds to GDPR requests within 30 days of receipt.
Where requests are complex or numerous, this period may be extended by up to an additional 60 days, as permitted by GDPR. You will be notified if an extension is required.
7. Right to Lodge a Complaint
If you believe Archade has not adequately addressed your request, you have the right to lodge a complaint with your local data protection authority in the EEA.
8. Contact
For GDPR-related inquiries only, our comprehensive contact point is: privacy@archade.app
If you are looking for our EU Representative: Please contact us at the email above for current representative details or direct correspondence instructions.
For general support requests, use the standard support channels.
Owner: Legal