GDPR — EU, UK & Switzerland

Last updated June 29, 2026

This notice supplements our Privacy Policyfor individuals in the European Economic Area (EEA), the United Kingdom, and Switzerland, under the EU and UK General Data Protection Regulation (“GDPR”).

1. Who is responsible for your data

Trellium, LLC(d/b/a Troutracker) is the “controller” of the personal data described in our Privacy Policy. You can reach us using the contact details at the end of this page.

2. The legal bases we rely on

We only process your personal data when we have a lawful basis to do so:

Where we rely on consent, you can withdraw it at any time without affecting processing already carried out.

3. Your rights

Subject to the conditions in the GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify data that is inaccurate or incomplete.
• Erase your data (“right to be forgotten”).
• Restrict or object to certain processing.
• Portability — receive your data in a portable format.
• Withdraw consent at any time.
• Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects. Our AI-assisted features are decision-support for you, not automated decisions we make about you — see the Use of AI statement.

4. How to exercise your rights

Contact us using the details below and we'll respond within the time the law allows (generally within one month). We won't charge you for a request or discriminate against you for making one. We may need to verify your identity first.

5. International data transfers

We operate in the United States, so your data will be transferred to and processed in the U.S. and potentially other countries where our providers operate. When we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses (and the UK Addendum) — to protect it.

6. Data retention

We keep personal data only as long as needed for the purposes described in our Privacy Policy, then delete or de-identify it, except where the law requires us to keep it longer.

7. Complaints

We hope to resolve any concern directly, so please contact us first. You also have the right to lodge a complaint with your local data protection supervisory authority (in the UK, the Information Commissioner's Office).

Contact us

To exercise your rights or ask a question, contact: