Privacy Policy
Last updated: October 12, 2026
At Epic360 Gigs, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform in compliance with the General Data Protection Regulation (GDPR) and German data protection laws.
This policy complies with EU GDPR requirements and German Federal Data Protection Act (BDSG).
Company Details
Company: Epic360 Gigs
Address: 22844 Norderstedt, Germany
Registration: HRB 123456 B (Amtsgericht Charlottenburg)
VAT ID: DE123456789
Data Protection Officer: privacy@epic360gigs.com
Personal Information (Article 6 GDPR)
- Name, email address, and phone number
- Profile information and professional details
- Payment and billing information
- Communication preferences
- Profile pictures and portfolio content
- Identity verification documents (when required)
Legal Basis: Contract performance (Article 6(1)(b) GDPR) and legitimate interests (Article 6(1)(f) GDPR)
Usage Information
- Platform usage patterns and interactions
- Search queries and browsing history
- Service requests and transactions
- Communication logs and messages
- Device and browser information
Legal Basis: Legitimate interests (Article 6(1)(f) GDPR) for platform improvement and security
Technical Information
- IP address and location data
- Cookies and tracking technologies
- Device identifiers and browser type
- Log files and analytics data
- Performance and error information
Legal Basis: Legitimate interests (Article 6(1)(f) GDPR) and consent (Article 6(1)(a) GDPR) for non-essential cookies
Platform Services
- Facilitate connections between clients and freelancers
- Process payments and manage transactions
- Provide customer support and dispute resolution
- Send important service notifications
- Maintain account security and prevent fraud
Improvement & Analytics
- Analyze platform usage and performance
- Improve our services and user experience
- Develop new features and functionality
- Conduct research and market analysis
- Personalize content and recommendations
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
Service Providers (Article 28 GDPR)
We may share information with trusted third-party service providers who assist us in operating our platform, such as payment processors (Stripe), hosting providers (Supabase), and analytics services. All processors are bound by data processing agreements.
Legal Requirements (Article 6(1)(c) GDPR)
We may disclose information when required by law, court order, or government request, or to protect our rights, property, or safety.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction, subject to the same privacy protections.
User Consent (Article 6(1)(a) GDPR)
We may share information with your explicit consent or as otherwise described in this policy.
We implement comprehensive security measures to protect your personal information in accordance with GDPR requirements:
Encryption
All data is encrypted in transit (TLS 1.3) and at rest using industry-standard encryption protocols (AES-256).
Access Controls
Strict access controls, multi-factor authentication, and role-based permissions protect your information from unauthorized access.
Regular Audits
We conduct regular security audits, penetration testing, and assessments to identify and address potential vulnerabilities.
Employee Training
Our team receives regular training on data protection, GDPR compliance, and privacy best practices.
Core Rights
- Right of Access (Article 15): Access your personal information
- Right to Rectification (Article 16): Update or correct your data
- Right to Erasure (Article 17): Delete your account and data
- Right to Data Portability (Article 20): Export your information
- Right to Object (Article 21): Opt-out of marketing communications
Additional Rights
- Right to Restriction (Article 18): Restrict data processing
- Right to Withdraw Consent (Article 7): Withdraw consent at any time
- Right to Lodge Complaint (Article 77): Complain to supervisory authority
- Right to Information (Article 13-14): Be informed about data processing
- Right to Human Review: Not be subject to automated decision-making
To exercise your rights: Contact us at privacy@epic360gigs.com or use the privacy settings in your account dashboard. We will respond within 30 days as required by GDPR.
We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, in accordance with GDPR principles:
We automatically delete personal data when the retention period expires or when you request deletion, unless legal obligations require longer retention.
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements:
Adequacy Decisions
We prioritize transfers to countries with EU adequacy decisions.
Standard Contractual Clauses
For transfers to third countries, we use EU-approved Standard Contractual Clauses.
Binding Corporate Rules
Our internal data protection policies ensure consistent protection across all operations.
Our platform is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately at privacy@epic360gigs.com.
Parental Consent: For users aged 16-18, we may require parental consent for certain data processing activities.
In the event of a personal data breach, we will:
Notify Supervisory Authority
Report to the competent authority within 72 hours of becoming aware of the breach
Notify Affected Users
Inform affected individuals without undue delay if the breach poses a high risk to their rights and freedoms
Document and Investigate
Document all breaches and take immediate steps to contain and investigate the incident
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice through email or platform notifications.
GDPR Notice: We will obtain your consent for any material changes to how we process your personal data, as required by GDPR.
If you have any questions about this Privacy Policy or our data practices, please contact us:
Data Protection Officer: privacy@epic360gigs.com
Phone: 015226537923
Address: Epic360 Gigs
22844 Norderstedt
Germany
Supervisory Authority: Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstraße 219, 10969 Berlin, Germany