Guest

HydraBlack Elite Ecosystemhttps://hydrablack.com
Effective Date: March 06, 2026  |  Last Updated: March 06, 2026


⚠ Scope: This GDPR Policy applies to all users located in the European Economic Area (EEA), the United Kingdom (UK), and Switzerland. It supplements our Privacy Policy and provides additional information about your rights under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the UK GDPR.


Table of Contents

  1. Data Controller Information
  2. Personal Data We Process
  3. Legal Basis for Processing
  4. How We Use Your Data
  5. Data Recipients & Third Parties
  6. International Data Transfers
  7. Data Retention Periods
  8. Your GDPR Rights
  9. Right to Object & Automated Decisions
  10. Children’s Data
  11. Data Breach Procedures
  12. Data Protection Officer
  13. Supervisory Authority
  14. Changes to This Policy
  15. Contact Us

1. Data Controller Information

For the purposes of the GDPR, the Data Controller responsible for your personal data is:

HydraBlack Elite Ecosystem

🌐 Website: https://hydrablack.com

✉ Data Protection Email: [email protected]

Subject Line: “GDPR Request”

As a Data Controller, we determine the purposes and means of processing your personal data. We are committed to protecting your personal data in compliance with the GDPR and related data protection legislation.


2. Personal Data We Process

Under the GDPR, “personal data” means any information relating to an identified or identifiable natural person (“data subject”). We process the following categories of personal data:

Data Category Examples Source
Identity Data First name, last name, username Provided by you
Contact Data Email address, billing address, country Provided by you
Account Data Password (hashed), account preferences, API keys (hashed) Provided by you
Transaction Data Purchase history, order amounts, license keys, download records Generated through use / Paddle
Technical Data IP address, browser type, operating system, device type, screen resolution Automatically collected
Usage Data Pages visited, time on site, click patterns, search queries, referral URLs Automatically collected
Profile Data Avatar, biography, social links, portfolio items (sellers) Provided by you
Communication Data Messages, support tickets, comments, reviews Provided by you
KYC / Verification Data Government-issued ID (if required for seller verification) Provided by you
Location Data Approximate geographic location (derived from IP address) Automatically collected

⚠ Sensitive Data: We do not intentionally collect any special categories of personal data (as defined in Article 9 of the GDPR), such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning a person’s sex life or sexual orientation.


3. Legal Basis for Processing

Under the GDPR, we must have a valid legal basis for processing your personal data. Below we detail each legal basis and the specific processing activities it covers:

A. Performance of a Contract (Article 6(1)(b))

Processing that is necessary to perform our contract with you or to take steps at your request before entering into a contract:

  • Creating and managing your user account.
  • Processing purchases and delivering digital products.
  • Managing licenses, purchase codes, and download access.
  • Facilitating communication between buyers and sellers.
  • Processing seller earnings and withdrawal requests.
  • Providing customer support related to your transactions.
  • Managing subscriptions and premium plan access.

B. Legitimate Interests (Article 6(1)(f))

Processing that is necessary for our legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms:

  • Fraud detection, prevention, and investigation.
  • Ensuring Platform security and preventing abuse.
  • Analyzing Platform usage to improve user experience and features.
  • Enforcing our Terms of Service and community guidelines.
  • Maintaining server logs for security auditing purposes.
  • Content moderation and quality assurance of seller products.
  • Internal business analytics and reporting.

Legitimate Interest Assessment (LIA): For each processing activity based on legitimate interests, we have conducted a balancing test to ensure our interests do not override your rights. You have the right to object to processing based on legitimate interests (see Section 8).