GDPR & Privacy Rights
How Ping Link meets its obligations under the GDPR, and how to exercise your rights over your data.
Last updated: 19 August 2026
This page complements our Privacy Policy and sets out the lawful bases we rely on, the safeguards we apply, and the steps to make a data request. It applies to anyone in the EU and EEA, and we apply the same standards everywhere.
1. Controller
Arino One Tech Experts Limited, Landscape House, Brownsbarn, Baldonnell, Co. Dublin, D22 P3K7, Ireland. Company Reg. No. 789699. is the controller for personal data processed through Ping Link.
Data protection enquiries: privacy@pinglink.app. The service is operated and demonstrated by Arino One (arino.one).
2. Lawful bases
Performance of a contract: verifying your number, connecting calls, storing voicemails and billing your account.
Legitimate interests: keeping the service secure, preventing abuse and fraud, and maintaining reliability.
Legal obligation: retaining accounting records where the law requires it.
Consent: where you upload an optional greeting recording, or opt in to any non-essential communication.
3. Data minimisation by design
Ping Link is built so that the least possible personal data changes hands: a visitor never learns your number and you never learn theirs.
We do not record the audio of connected calls.
Voicemails are hard-deleted 24 hours after they are recorded, automatically and without exception.
4. Your rights
Access: obtain a copy of the personal data we hold about you.
Rectification: correct data that is inaccurate or incomplete.
Erasure: ask us to delete your account and associated data.
Restriction and objection: limit or object to certain processing based on legitimate interests.
Portability: receive your data in a structured, machine-readable format.
Withdraw consent: at any time, where processing is based on consent.
5. Making a request — reply REMOVE
The fastest route to erasure is to reply REMOVE on WhatsApp from the number you used. Sending from the number itself proves control of it, so we act immediately: the number, the account, all Ping Links, greeting audio, call history, voicemails, one-time codes and message logs are hard-deleted, and you receive a single confirmation message.
The deletion is irreversible. We retain only an anonymised record that an erasure was performed and any accounting records we are legally obliged to keep, which contain no phone number.
Email privacy@pinglink.app from the recovery address on your account, or contact us from your verified WhatsApp number. We may ask for confirmation that you control the account before we act.
We respond within one month. If a request is complex we may extend this and will tell you why.
6. Processors and transfers
We use a small number of processors — messaging, payments, hosting and storage — each bound by a data processing agreement.
Where data is transferred outside the EEA we rely on appropriate safeguards such as the European Commission's standard contractual clauses.
7. Security
Data is encrypted in transit, access to production systems is restricted and audited, and provider credentials are stored encrypted rather than in application code.
If a personal data breach is likely to result in a risk to your rights, we will notify the relevant supervisory authority and, where required, you.
8. Complaints
If you are unhappy with how we have handled your data, you may lodge a complaint with your local data protection supervisory authority. We would appreciate the chance to resolve it first.