GDPR Rights & EU Data Policy

1. Our Commitment to GDPR Compliance

HomeVibed.com is owned and operated by Taciturn Studios LLC. We are committed to protecting the personal data of users in the European Union (EU) and European Economic Area (EEA) in accordance with Regulation (EU) 2016/679 — the General Data Protection Regulation (GDPR). This page explains your rights under the GDPR, the legal bases on which we process your data, and how to exercise your rights.

For a complete description of the personal data we collect and how we use it, please read our Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

Taciturn Studios LLC
Email: legal@homevibed.com
Website: homevibed.com

As a US-based company serving EU/EEA users, we act as the data controller for personal data collected through HomeVibed.com. We do not currently have a designated EU Representative, but you may contact us directly at legal@homevibed.com for all data protection inquiries.

3. Legal Bases for Processing

Under the GDPR, we must have a valid legal basis for processing your personal data. The following table summarizes the legal bases we rely on for each type of processing activity:

4. Your Rights Under the GDPR

As an EU/EEA resident, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at legal@homevibed.com with the subject line "GDPR Data Request." We will respond within 30 days of receiving your request. In complex cases, we may extend this period by an additional 60 days, in which case we will notify you within the initial 30-day period.

4.1 Right of Access (Art. 15)

You have the right to request a copy of the personal data we hold about you, along with information about how we use it, who we share it with, how long we retain it, and the legal basis for processing. We will provide this information free of charge in a commonly used electronic format.

4.2 Right to Rectification (Art. 16)

You have the right to request correction of inaccurate or incomplete personal data we hold about you. We will correct the data promptly and, where applicable, notify third parties to whom we have disclosed the data.

4.3 Right to Erasure — "Right to Be Forgotten" (Art. 17)

You have the right to request deletion of your personal data in certain circumstances, including when: the data is no longer necessary for the purpose it was collected; you withdraw consent and there is no other legal basis for processing; you object to processing and there are no overriding legitimate grounds; or the data has been unlawfully processed. Note that we may retain certain data where required by law (e.g., tax records).

4.4 Right to Restriction of Processing (Art. 18)

You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or have objected to processing pending verification of our legitimate grounds.

4.5 Right to Data Portability (Art. 20)

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) and to transmit that data to another controller. This right applies to data you have provided to us directly, such as your account information and quiz results.

4.6 Right to Object (Art. 21)

You have the right to object at any time to processing of your personal data that is based on our legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. You may also object at any time to processing for direct marketing purposes, including profiling for marketing, and we will cease such processing immediately.

4.7 Rights Related to Automated Decision-Making (Art. 22)

You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significant effects on you. HomeVibed.com does not make automated decisions of this nature. Our AI tools (such as the Room Checker and Home Vibe Quiz) generate recommendations for informational purposes only and do not produce legally binding or similarly significant decisions.

4.8 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. You may withdraw consent for marketing emails by clicking the unsubscribe link in any email, and for non-essential cookies by clearing your browser cookies and adjusting your preferences via our cookie banner.

5. International Data Transfers

Taciturn Studios LLC is based in the United States. When you use HomeVibed.com, your personal data may be transferred to and processed in the United States and other countries where our service providers operate (including Google, Stripe, MailerLite, and Resend). The United States does not have an adequacy decision from the European Commission for general data transfers.

For transfers of personal data from the EU/EEA to the United States, we rely on the following safeguards:

• Standard Contractual Clauses (SCCs): We use SCCs approved by the European Commission with our US-based service providers where required.
• Service provider certifications: Key providers such as Google and Stripe participate in recognized data transfer frameworks and maintain appropriate safeguards under GDPR.

6. Data Retention

We retain your personal data only as long as necessary for the purposes described in our Privacy Policy or as required by applicable law. You may request deletion of your data at any time by contacting legal@homevibed.com, subject to our legal retention obligations.

7. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority in your EU/EEA member state. We encourage you to contact us first at legal@homevibed.com so we can address your concerns directly, but you are not required to do so before contacting your supervisory authority.

A list of EU data protection authorities and their contact details is available at the European Data Protection Board website.

8. Contact Us

For all GDPR-related inquiries, data subject requests, or complaints, please contact:

Taciturn Studios LLC
GDPR / Data Protection Inquiries
Email: legal@homevibed.com
Subject line: "GDPR Data Request"