Parallel Globe Ltd is committed to protecting your personal data and processing it in full compliance with the General Data Protection Regulation (GDPR) and the UK General Data Protection Regulation (UK GDPR).
This page explains Parallel Globe’s GDPR compliance position, including our legal bases for processing, the rights available to you, how we protect your data, and how to contact us or raise a complaint.
For full details of how we collect, use, and protect personal data, please refer to our Privacy Policy.
1. Data Controller
Parallel Globe Ltd is the data controller for personal data processed in connection with the Services.
All personal data is processed and stored across secure infrastructure in Iceland and Switzerland. The Parallel Globe website and most account data are hosted in Iceland, a member of the European Economic Area (EEA), which provides full GDPR protections. PoliticTalk and CipherCall data are hosted in Switzerland. Photos and videos are delivered through a separate secure content delivery network. Where data is processed outside the EEA, Parallel Globe ensures appropriate safeguards are in place, including Standard Contractual Clauses or equivalent protections in accordance with GDPR Chapter V.
Contact:
2. Our GDPR Compliance Position
Privacy Policy
Our Privacy Policy covers all major GDPR requirements, including:
- Clear identification of Parallel Globe Ltd as data controller.
- Legal bases for all processing activities (contract, legitimate interests, consent, and legal obligations).
- Data retention policies and deletion timelines.
- User rights clearly stated and accessible.
- International data transfers addressed — primary hosting in Iceland/EEA.
- Contact information provided for data-related requests.
Cookie Consent Implementation
Parallel Globe’s cookie consent implementation meets GDPR standards:
- A cookie consent banner is presented to all users on first visit.
- The banner clearly distinguishes between essential and optional cookies.
- Consent preferences are stored in the user_accessibility table (cookieConsent field) and synchronised across devices for signed-in users.
- Analytics (Umami) is only loaded after you provide explicit consent.
- Consent may be withdrawn at any time through Cookie preferences.
Data Minimisation
Parallel Globe collects only the data necessary to provide the Services:
- Only data required for account creation is mandatory.
- Optional fields are clearly marked.
- CipherCall communications are end-to-end encrypted — Parallel Globe cannot access their content.
Transparency
Parallel Globe is transparent about all data processing:
- Automated content screening tools (Detoxify and NudeNet) are disclosed by name.
- An explicit statement confirms that Parallel Globe does not sell personal data.
- Third-party sign-in data collection (X) is clearly explained.
Security
Parallel Globe applies strong technical and organisational security measures:
- Passwords are hashed using bcrypt.
- Two-factor authentication is available to all users.
- All CipherCall communications are end-to-end encrypted.
- Verification documents are deleted within 30 days of verification completion.
Data Location
Parallel Globe processes and stores personal data across secure infrastructure in Iceland and Switzerland. The Parallel Globe website and most account data are hosted in Iceland, a member of the EEA, which provides full GDPR protection. PoliticTalk and CipherCall data are hosted in Switzerland. Photos and videos are delivered through a separate secure content delivery network. Standard Contractual Clauses are in place for any processing outside the EEA.
3. Legal Bases for Processing
Parallel Globe processes personal data only where a valid legal basis exists under GDPR Article 6 (and Article 9 for special category data). The legal bases we rely on are set out below.
| Legal Basis | Processing Activity | Article (GDPR) |
|---|---|---|
| Contract (Art. 6(1)(b)) | Account creation, authentication, and delivery of the Services you request. | Article 6(1)(b) |
| Legitimate Interests (Art. 6(1)(f)) | Platform security, fraud prevention, abuse detection, content moderation, and service improvement. | Article 6(1)(f) |
| Consent (Art. 6(1)(a)) | Optional cookies, analytics, marketing communications, and processing of special category data voluntarily shared. | Articles 6(1)(a) and 9(2)(a) |
| Legal Obligation (Art. 6(1)(c)) | Compliance with applicable law, responding to lawful authority requests, and data breach notification. | Article 6(1)(c) |
Special category data (including political opinions voluntarily shared on the platform) is processed on the basis of your explicit consent under Article 9(2)(a). You may withdraw this consent at any time.
4. Your Rights Under GDPR
As a data subject, you have the following rights under GDPR. These rights apply to the extent permitted by applicable law and are subject to verification of your identity before we act on any request.
| Right | What It Means | Article (GDPR) |
|---|---|---|
| Right of Access | You may request a copy of the personal data we hold about you. | Article 15 |
| Right to Rectification | You may request correction of inaccurate or incomplete personal data. | Article 16 |
| Right to Erasure | You may request deletion of your personal data where no lawful basis for retention exists. | Article 17 |
| Right to Restriction | You may request that we limit processing of your personal data in certain circumstances. | Article 18 |
| Right to Data Portability | You may request your personal data in a structured, machine-readable format for transfer to another controller. | Article 20 |
| Right to Object | You may object to processing based on legitimate interests or for direct marketing purposes. | Article 21 |
| Right to Withdraw Consent | Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing. | Article 7(3) |
| Rights re: Automated Decisions | You may request human review of any decision based solely on automated processing that produces significant effects. | Article 22 |
To exercise any of the above rights, contact us at:
Use subject: ‘Data Subject Request’. We will respond within 30 days. Where a request is complex or numerous, we may extend this period by a further two months and will notify you accordingly.
5. Special Category Data
Because Parallel Globe is designed for civic and political discourse, you may voluntarily share political opinions, affiliations, or other sensitive information. This constitutes special category data under GDPR Article 9.
Parallel Globe processes such data only on the basis of your explicit consent. You control what you share and with whom. You may withdraw consent at any time by updating your privacy settings or contacting us at support@parallelglobe.io.
Parallel Globe does not use special category data for advertising, profiling, or any purpose beyond operating the platform as described in our Privacy Policy.
6. Automated Processing
Parallel Globe uses automated tools to screen content for potential policy violations, including Detoxify and XLM-RoBERTa (text screening) and NudeNet (image screening). These tools assist human moderators and do not make final decisions on account suspension or termination without human review where such decisions produce significant effects on users.
Parallel Globe does not engage in solely automated decision-making that produces legal or similarly significant effects without appropriate human oversight, in accordance with GDPR Article 22.
If you believe an automated process has produced an incorrect outcome, you may request human review by contacting support@parallelglobe.io.
7. Data Retention
Parallel Globe retains personal data only for as long as necessary to operate the Services or as required by applicable law. Key retention periods include:
- Account data: retained for the duration of your account. Upon deletion, personal data is removed from public view in accordance with our Privacy Policy and applicable retention periods.
- Verification documents: deleted within 30 days of verification completion.
- Inactive accounts: may be automatically deleted after 12 months of inactivity.
- Backup data: may be retained for a limited period after deletion for security and continuity purposes, subject to applicable legal obligations.
8. Data Breach Notification
In the event of a personal data breach likely to result in a risk to your rights and freedoms, Parallel Globe will:
- Notify the relevant supervisory authority (Persónuvernd, Iceland’s Data Protection Authority) without undue delay and, where feasible, within 72 hours of becoming aware of the breach, in accordance with GDPR Article 33.
- Notify affected users directly without undue delay where the breach is likely to result in a high risk to their rights and freedoms, in accordance with GDPR Article 34, unless an exemption applies.
If you become aware of or suspect a data breach, please contact us immediately at support@parallelglobe.io.
9. Data Processors and Data Processing Agreements
Where Parallel Globe engages third-party service providers to process personal data on its behalf — including hosting providers, CDN operators, analytics services, and payment processors — those providers operate under Data Processing Agreements (DPAs) in accordance with GDPR Article 28.
These agreements require processors to:
- Process data only on Parallel Globe’s documented instructions.
- Implement appropriate technical and organisational security measures.
- Not engage sub-processors without prior written authorisation.
- Assist Parallel Globe in fulfilling data subject rights requests.
- Delete or return personal data upon termination of the agreement.
A list of current data processors is available on request by contacting support@parallelglobe.io.
10. Supervisory Authority and Complaints
Parallel Globe’s lead supervisory authority is:
Persónuvernd (Icelandic Data Protection Authority)
Rauðarárstígur 10, 105 Reykjavík, Iceland
If you are located in the EU or UK, you also have the right to lodge a complaint with the supervisory authority in your country of residence.
Before raising a complaint with a supervisory authority, we encourage you to contact us first so that we can address your concern directly:
Use subject: ‘GDPR Complaint’.
11. Updates to This Page
Parallel Globe may update this GDPR Compliance page from time to time to reflect changes in law, regulatory guidance, or our practices. Updated versions will be published on this page.