GDPR Compliance

1. Your Data Protection Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you are entitled to specific data protection rights. rufreevpn.org aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data:

• The Right to Access: You have the right to request copies of your personal data held by us.
• The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate.
• The Right to Erasure ("Right to be Forgotten"): You have the right to request that we erase your personal data under certain conditions.
• The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data.
• The Right to Object to Processing: You have the right to object to our processing of your personal data.
• The Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization.

2. Legal Basis for Processing Personal Data

Our legal basis for collecting and using the minimal information described in this policy depends on the Personal Data concerned and the specific context in which we collect it. We process your data only when:

• We need to perform a contract with you (e.g., delivering the free VPN configuration services you requested).
• You have given us explicit consent to do so (e.g., accepting advertising or analytical cookies).
• The processing is in our legitimate interests and does not override your fundamental data protection rights.

3. Data We Do NOT Collect (Our No-Logs Guarantee)

In alignment with standard GDPR "Data Minimization" principles, rufreevpn.org enforces a strict operational model. Because we do not require user accounts, emails, or registration to download our OpenVPN (.ovpn) files, we do not collect, monitor, store, or log any of your active VPN browsing history, destination IPs, data traffic content, or DNS queries.

4. Minimal Data We Process

The only data elements processed on our infrastructure are restricted to:

• Automated Log Files: Standard web hosting logs including browser types, entry/exit pages, and generalized timestamps used purely for network diagnostic optimization.
• Consented Tracking Identifiers: Anonymous identifiers deployed by trusted third-party advertising partners to deliver relevant ad campaigns to European users.

5. Data Retention Period

We retain processed temporary operational information only for as long as is strictly necessary for the purposes set out in our compliance framework. Standard technical web server logs are automatically overwritten or purged within a brief rolling window and are never permanently archived or linked to physical identities.

6. Third-Party Data Processors & Google AdSense

To deliver a premium, zero-cost architecture, we collaborate with external third-party entities to handle data metrics and ad monetization. These companies act as independent Data Controllers or Data Processors under GDPR guidelines:

• Google AdSense: We utilize Google AdSense to serve programmatic and behavioral advertisements to visitors. Google uses tracking cookies to customize ads based on your digital footprints across this and alternative websites. You can review or entirely disable Google personalized advertising by updating your profile at the official Google Ads Settings page.
• Opt-out Choices: EEA users can systematically withdraw or modify their user-consent choice for multi-vendor personalized targeting at any time via our built-in consent banner or by visiting the regulatory AboutAds Portal.

7. International Data Transfers

Your generalized website navigation information may be transferred to—and maintained on—computers located outside of your state, province, or country, where data protection laws may differ from those of your home jurisdiction. Your explicit consent to our primary Privacy frameworks followed by submission of website actions represents your clear agreement to these standard cloud-hosting transfers.

8. How to Exercise Your Rights

If you wish to be informed about what minimal temporary footprint we may hold or if you wish to formally exercise your GDPR privileges, please reach out to our team immediately. Note that since we do not store user email identities or physical names, we may request additional diagnostic parameters to securely verify your client context before processing request parameters.

You also maintain the formal right to complain to a dedicated Data Protection Authority regarding our minimal processing methods.