GDPR Compliance & Data Processing Addendum (DPA)

Last updated: July 23, 2026

1. Introduction and Scope of the Addendum

This Data Processing Addendum ("DPA") supplements the Terms of Service and Privacy Policy, acting as a legally binding agreement between you (the "User" or "Data Controller") and QuickPanel.Net (the "Service," "Software," or "Data Processor").

This document outlines the obligations and strict boundaries of liability concerning the processing of personal data belonging to individuals located within the European Economic Area (EEA), the United Kingdom (UK), and Switzerland, as mandated by the General Data Protection Regulation (EU) 2016/679 ("GDPR") and equivalent data protection legislation.

2. Designation of Legal Roles

Under the framework of the GDPR, it is imperative to establish the exact legal relationship regarding the end-user traffic routed through the QuickPanel.Net cloaking infrastructure:

  • You are the Data Controller: The User holds sole discretionary power over the purpose and means of processing end-user data. You generate the traffic, design the campaigns, configure the routing rules, and designate the final landing pages.
  • QuickPanel.Net is the Data Processor: Our Software operates strictly on your behalf, acting as a passive algorithmic conduit. We evaluate incoming traffic purely based on the automated logic configurations you have applied within your dashboard. We do not determine the purposes for which end-user personal data is processed.

3. Absolute User Responsibility and Lawful Basis

QuickPanel.Net assumes absolutely zero liability for your failure to establish a lawful basis for processing end-user data.

Because the Software evaluates IP addresses and User-Agent strings (which are considered Personal Data under the GDPR) to make routing decisions, you explicitly warrant and guarantee that:

  • You have established a valid Lawful Basis (e.g., explicit consent or legitimate interest) to process the traffic you send through our servers.
  • You have implemented compliant cookie banners, privacy policies, and transparency mechanisms on the web properties where the traffic originates and terminates.
  • You will not use the Software to secretly profile, track, or deanonymize EEA data subjects in a manner that violates their fundamental rights and freedoms.

4. Nature of Processing: Transient Analysis

To effectively utilize our bot detection and traffic filtering capabilities, the Software must momentarily process specific data points. The nature of this processing is fundamentally transient:

  • Data Points Evaluated: IP addresses, ISP/ASN data, browser headers, User-Agent strings, and non-identifiable digital fingerprint vectors.
  • Duration and Anonymization: This data is held in active memory for milliseconds strictly to execute the routing decision (Allow, Block, or Redirect). It is subsequently anonymized, aggregated into statistical performance metrics (e.g., "15 clicks from Germany"), or permanently purged. QuickPanel.Net does not maintain persistent databases of identifiable end-user PII.

5. Data Subject Rights (Access, Erasure, and Portability)

As the Data Controller, you hold the primary responsibility to respond to requests from end-users exercising their GDPR rights (e.g., the Right to be Forgotten, Right of Access).

Because QuickPanel.Net does not persistently store raw, identifiable end-user IP logs tied to specific individuals beyond the transient routing phase, we generally hold no extractable PII to return or erase on behalf of an end-user. However, should you require technical assistance to fulfill a verified Data Subject Request related to active campaign configurations, QuickPanel.Net will provide reasonable, commercially viable assistance, provided you bear any associated technical costs.

6. International Data Transfers

QuickPanel.Net operates on a globally distributed server network to ensure low-latency routing. By using the Service, you acknowledge that end-user data may be routed through, processed, or temporarily held on servers located outside the European Economic Area (EEA), including the United States.

Where such international transfers occur, QuickPanel.Net relies on recognized legal mechanisms, including the European Commission's Standard Contractual Clauses (SCCs) implemented with our underlying infrastructure sub-processors (e.g., AWS, Cloudflare), to ensure the adequate protection of transferred data.

7. Data Security and Breach Notification

QuickPanel.Net implements robust technical and organizational measures (TOMs) designed to protect our infrastructure against unauthorized access, accidental loss, or destruction. This includes end-to-end encryption for dashboard access and API transit (TLS 1.3), hashed credential storage, and strict internal access controls.

In the highly unlikely event of a verified data breach affecting our infrastructure that compromises your Campaign Data or aggregated traffic metrics, QuickPanel.Net will notify you (the Data Controller) without undue delay, typically within 48 hours of confirming the breach, to allow you to fulfill your own regulatory notification obligations.

8. Strict GDPR Indemnification

You, the User, agree to fully indemnify, defend, and hold harmless QuickPanel.Net and its affiliates against any and all regulatory fines, penalties, investigations, lawsuits, claims, and financial losses arising from your failure to comply with the GDPR or other applicable data privacy laws.

If QuickPanel.Net faces any legal action, inquiry by a Data Protection Authority, or financial penalty due to your unauthorized tracking, lack of consent mechanisms, or improper use of the cloaker regarding EEA citizens, you bear 100% of the financial burden, including our legal defense costs.

9. Data Protection Officer (DPO) and Legal Contact

If you represent a regulatory body, a Data Protection Authority, or if you are a User requiring an executed copy of this DPA for your legal compliance records, please contact our privacy operations team: