RANKORA
European & Global Data Protection

GDPR Compliance & Trust Portal

Arventa Ventures is fully committed to upholding the rigorous standards of the EU General Data Protection Regulation (Regulation (EU) 2016/679) and UK GDPR across all Rankaro services.

Contractual Framework

Data Processing Addendum (DPA) for Merchants

If your business operates within the European Economic Area (EEA), the United Kingdom, or processes data of EU citizens, you may execute our standard Data Processing Addendum (DPA). Our DPA incorporates the European Commission's Standard Contractual Clauses (SCCs) to guarantee legally compliant international data transfers.

Statutory Protections

Your Rights Under GDPR

Right to Access (Article 15)

You have the right to request confirmation of whether your data is being processed, along with a copy of all personal records we hold.

Right to Rectification (Article 16)

You may correct inaccurate or incomplete merchant account details directly within your settings or by contacting our desk.

Right to Erasure / "To Be Forgotten" (Article 17)

You can request complete deletion of your merchant account, scan history, and custom presets with permanent database shredding.

Right to Restrict Processing (Article 18)

You may request that we limit the processing of your personal information in specific contested scenarios.

Right to Data Portability (Article 20)

Receive your data in a structured, commonly used, machine-readable JSON or CSV format to transfer to another service provider.

Right to Object (Article 21)

You have the right to object at any time to the processing of your personal data based on legitimate interests.

Vendor Transparency

Authorized Cloud Infrastructure Sub-Processors

We maintain executed DPAs with every infrastructure vendor we utilize.

Cloudflare, Inc.(USA / Global Edge)
Edge CDN, DDoS Shield, DNS resolution, TLS termination
DPA Executed
Amazon Web Services (AWS)(USA / Frankfurt (EU))
Encrypted cloud application hosting, compute, and automated backup storage
DPA Executed
MongoDB Atlas(Frankfurt / Ireland (EU))
Encrypted multi-tenant database clusters with customer profile records
DPA Executed
Resend / Nodemailer SMTP(USA)
Transactional security notifications, merchant verification codes, and alerts
DPA Executed

Submit a Data Subject Access Request (DSAR)

To request an export or permanent erasure of your data, send an email from your registered account address directly to our Data Protection Officer. We acknowledge all requests within 48 hours and complete fulfillment within 30 statutory days.

dpo@arventaventures.online • Subject: “GDPR Data Subject Request”