Last updated: November 13, 2026
This page describes how ActiveMerge handles personal data of individuals in the European Economic Area, the United Kingdom and Switzerland under the General Data Protection Regulation (GDPR).
Our role
For personal data of our customers' end users that we process on their behalf, we act as a processor and our customers are the controllers. For account, billing and website data, we act as a controller.
Legal bases
Performance of a contract with you.
Our legitimate interests in operating and securing the services.
Compliance with legal obligations.
Consent, where we ask for it.
Your rights
You can request access to, rectification, erasure, restriction and portability of your personal data, and object to certain processing. To exercise a right, contact [email protected].
International transfers
Where personal data is transferred outside the European Economic Area, the United Kingdom or Switzerland, we rely on recipients certified under the EU-US Data Privacy Framework and, where that does not apply, on the European Commission's Standard Contractual Clauses.
Subprocessors
We use subprocessors to deliver the services. See our hosting page and Data Processing Agreement for details.
Complaints
You have the right to lodge a complaint with your local data protection authority.