GDPR: Your Data Protection Rights

Last updated: 01.10.2026

Under Regulation (EU) 2016/679 (GDPR), you have a number of rights over your personal data processed by ESIM MADALIN LLC (Flash Sim). This page summarises those rights and how to exercise them. See also our Privacy Policy.

1. Your rights

• Right of access (Art. 15): obtain confirmation of whether we process your data and a copy of it.
• Right to rectification (Art. 16): correct inaccurate or incomplete data.
• Right to erasure / "right to be forgotten" (Art. 17): have your data deleted where the conditions are met.
• Right to restriction (Art. 18): limit how we process your data in certain cases.
• Right to data portability (Art. 20): receive your data in a structured, machine-readable format.
• Right to object (Art. 21): object at any time to direct marketing (including profiling for that purpose) and, on grounds relating to your particular situation, to processing based on our legitimate interests (for example the free-offer checks).
• Right to withdraw consent (Art. 7(3)): withdraw any consent at any time, without affecting prior processing.
• Rights regarding automated decisions (Art. 22): we do not carry out solely automated decision-making with legal or similarly significant effects; a refused free-offer claim can be reviewed by a person on request.

2. How to exercise your rights

Send a request to clienti@flashsim.com, indicating which right you wish to exercise. To protect your data, we may need to verify your identity, for example by asking you to write from the e-mail address of your order or to confirm the ICCID of your eSIM or your phone number. We respond free of charge within one month, extendable by two further months for complex requests (Art. 12 GDPR).

3. Stopping newsletters and WhatsApp messages

• Newsletter: click "unsubscribe" at the bottom of any newsletter, or write to us. Your unsubscription is recorded in Mailchimp straight away; we keep only what we need to avoid contacting you again.
• WhatsApp: reply STOP to any of our WhatsApp messages, or write to us: we stop sending you WhatsApp messages as soon as possible, at the latest within 1 business day. You can also block our WhatsApp number in the app. Your eSIM and our e-mails about your order are not affected.
• E-mails about your order (delivery of the eSIM, replies to your support requests) are part of the service you bought and are sent even if you do not subscribe to the newsletter.

4. What happens when you ask for erasure

We anonymise your customer record, permanently delete your contact from Mailchimp and remove your phone number from our WhatsApp records. We keep only the order and invoice data that we are legally required to retain (for example for tax purposes), for the legal retention period (Art. 17(3)(b) GDPR).

5. International transfers

We are based in the United States. When we pass data to service providers outside the EEA, we rely on the EU-U.S. Data Privacy Framework (for certified US recipients), on other adequacy decisions or on the Standard Contractual Clauses (see section 6 of our Privacy Policy). Our EU representative under Art. 27 GDPR is: to be completed.

6. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your residence, place of work or the place of the alleged infringement. A list of EU authorities is available on the European Data Protection Board website (edpb.europa.eu).