8. NOTICE TO EU DATA SUBJECTS

Personal Information: For EU data subjects, “personal information” as used in this Policy is equivalent to “personal data” under the GDPR.

Sensitive Data: Some information you provide may be considered sensitive data under the GDPR, such as racial or ethnic identification on government-issued IDs.

Legal Bases for Processing: We process your personal information as permitted by law. Our legal bases for processing include:

• Legitimate Interests: Communicating with you, optimizing our platform, ensuring compliance, fraud prevention, safety, and providing our service. We balance our interests with any potential impacts on you.

• Consent: Where we rely on your consent, you have the right to withdraw it at any time by contacting us.

• Compliance with Law: We may use your personal information to comply with applicable laws and legal requests.

Use for New Purposes: We may use your personal information for purposes not described in this Policy, where permitted by law. If we need to use your personal information for an unrelated purpose, we will notify you and explain the legal basis for that use.

Your Rights: Under the GDPR, you have certain rights regarding your personal information, including the rights to opt-out, access, correct, delete, transfer, restrict processing, and object to processing. Submit these requests to [e-mail]. We may request specific information to confirm your identity and process your request.

Cross-Border Data Transfer: Your personal data will be transferred to, processed, and stored in the United States. Data protection laws in the U.S. may differ from those in your country. By using our site or service, you consent to this transfer. We use recognized data transfer mechanisms for transfers out of the EEA.