Regional terms: EU, EEA and Switzerland
Version 2026-10-05 · Last updated October 5, 2026
Roles and the DPA
The GDPR applies to you and to your emails to people in the EEA. You are the controller of your contacts' data; PostaraAI is your processor and the Data Processing Addendum (including the Standard Contractual Clauses) applies. Switzerland's Federal Act on Data Protection applies in the same way.
Permission for marketing email
Under the ePrivacy Directive as implemented in each country, and national unfair-competition laws (for example in Germany and Switzerland), email marketing generally needs the recipient's prior, specific, informed opt-in. A limited exception (the "soft opt-in") may apply to your own existing customers for similar products or services, if you offered an easy opt-out when collecting their address; countries apply it differently. Pre-ticked boxes and bundled consent are not valid. Email to company addresses is regulated differently by country, and addresses of named individuals are often treated as personal.
You must be able to prove consent (who, when, how, what wording). For some countries, particularly Germany and Austria, double opt-in is the accepted way to prove it: turn it on in Settings.
What PostaraMail does for you
How PostaraMail helps: when you send a campaign you choose the regions to include; strict regions only include contacts with a clear opt-in; every contact stores the consent wording, time, source and country; double opt-in is available; unsubscribes take effect immediately; and you can export a consent record for any contact.
People's rights
You must handle requests from your contacts (access, correction, erasure, objection, portability). The Service gives you export, edit, unsubscribe and delete tools, and we will assist as the DPA says. The privacy request form on our website lets recipients unsubscribe from all PostaraMail senders.
AI and transparency
The EU AI Act transparency rules (Article 50) apply from 2 August 2026. AI drafts are shown to you and not sent without you; you remain responsible for the final email and for any disclosure the law requires. DeepSeek is off by default for EU customers (see the AI Use Terms).
Your data and switching
You can export your contacts at any time, delete your data and your account, and ask us for other data we hold about you. If a mandatory EU right (for example under the EU Data Act) gives you more, it applies.
Consumers, tax and language
The Service is for business use. If you are a consumer, mandatory consumer rights in your country are not affected by the Terms. If you give us a valid EU VAT number we may apply the reverse charge where the law allows. The Agreement is in English.
General information
This addendum is general information about the main rules for sending email and handling personal data. It is not legal advice and may not be complete. You remain responsible for complying with the law that applies to you and your recipients.
More: Legal centre · Trust and security · What changed · Privacy request