Explogu, GDPR Compliance Statement

Last updated: 1.2.2026

1. Data Controller

Explogu acts as a data controller for personal data collected and processed through the platform, except where Explogu acts as a data processor on behalf of hosts.

2. Legal Bases for Processing

Explogu processes personal data based on the following legal grounds:

1. Performance of a contract, including account creation, payments, and service delivery
2. User consent, where explicitly provided
3. Compliance with legal obligations
4. Legitimate interests, including platform security, fraud prevention, and service improvement

3. Categories of Personal Data

We may process the following categories of personal data:

1. Identification data, name, email address, username
2. Account and profile information
3. Transaction and billing data
4. Session, event, and booking data
5. Technical data such as IP address, device, and usage logs
6. Communications sent through the platform

4. Data Processors and Subprocessors

Explogu may use third-party service providers, including hosting providers, analytics services, video infrastructure, and payment processors. These providers process data only under Explogu’s instructions and are subject to contractual data protection obligations.

5. International Data Transfers

Personal data may be transferred and processed outside the EEA. Where required, Explogu relies on appropriate safeguards such as standard contractual clauses or equivalent legal mechanisms.

6. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes described, comply with legal requirements, resolve disputes, and enforce agreements.

7. Data Subject Rights

Under GDPR, you have the right to:

1. Access your personal data
2. Rectify inaccurate or incomplete data
3. Request erasure of personal data, where applicable
4. Restrict or object to processing
5. Data portability
6. Withdraw consent at any time

8. Exercising Your Rights

Requests to exercise GDPR rights must be submitted through Explogu’s official platform communication channels. Explogu may request verification of identity before processing requests.

9. Automated Decision-Making

Explogu does not engage in automated decision-making or profiling that produces legal or similarly significant effects on users.

10. Data Security

Explogu implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure.

11. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in your country of residence.

12. Changes to This Statement

Explogu may update this GDPR Compliance Statement from time to time. Continued use of the platform constitutes acceptance of the updated version.