1. Our Commitment to GDPR
Ethereal Studio Labs, operated by Ribbsaeter Systems, is committed to compliance with the EU General Data Protection Regulation (GDPR) (Regulation EU 2016/679) and the UK GDPR where applicable. We take data protection seriously as a matter of both legal obligation and ethical responsibility.
This statement supplements our Privacy Policy and provides GDPR-specific detail for EU and EEA residents.
2. Lawful Basis for Processing
We process personal data under the following lawful bases as defined in Article 6 GDPR:
Contract Performance
Processing necessary to deliver your subscription, manage your account, and fulfil campaign generation services.
Legitimate Interests
Security monitoring, fraud prevention, platform analytics, and improving our services — balanced against your interests.
Legal Obligation
Tax record keeping, responding to lawful regulatory requests, and compliance audits.
Consent
Optional analytics cookies and marketing communications. Consent is freely given, specific, informed, and revocable at any time.
3. Data Subject Rights
As an EU or EEA resident, you have the following rights under GDPR Articles 15–22:
- Art. 15 — Right of access: Obtain a copy of the personal data we hold about you
- Art. 16 — Right to rectification: Correct inaccurate or incomplete data
- Art. 17 — Right to erasure: Request deletion of your data in qualifying circumstances
- Art. 18 — Right to restriction: Limit how we process your data pending a dispute
- Art. 20 — Right to portability: Receive your data in a structured, machine-readable format
- Art. 21 — Right to object: Object to processing based on legitimate interests or for direct marketing
- Art. 22 — Automated decision-making: Not to be subject to solely automated decisions with legal effects
Submit any request to privacy@ethereal-casting.com. We will acknowledge within 72 hours and respond in full within 30 days (extendable by 2 months for complex requests, with notice).
4. International Data Transfers
Some of our infrastructure and service processors are located outside the EEA. Where personal data is transferred to a third country, we ensure adequate protection through one or more of the following mechanisms:
- European Commission adequacy decisions
- Standard Contractual Clauses (SCCs) — EU Commission 2021/914
- Binding Corporate Rules where applicable
You may request a copy of the applicable transfer mechanism by emailing privacy@ethereal-casting.com.
5. Data Processing Agreements
All sub-processors handling personal data on our behalf have signed Data Processing Agreements (DPAs) that contractually bind them to GDPR-equivalent standards of data protection. Enterprise customers requiring a DPA with Ribbsaeter Systems directly should contact legal@ethereal-casting.com.
6. Data Protection Contact
We have designated a Data Protection contact for all GDPR-related queries:
Ribbsaeter Systems — Data Protectionprivacy@ethereal-casting.com
ribbsaetersystems.com