GDPR and data protection
Last updated: 16 October 2026
Inspectable controls. A clear scope. Data protection is assessed against documented processing and responsibilities, not a blanket compliance promise.
Processing scope
The Privacy Policy and Data Governance Pack describe purposes, data categories and intended recipients. Lawful bases, data minimisation and organisational controls must be assessed for the specific use case.
Requests and erasure
You can request access, correction or erasure through the contact in the Privacy Policy. Applicable conditions and retention duties are assessed case by case; this overview does not promise immediate complete deletion.
Data portability and export
Where the legal conditions are met, you can receive the personal data you provided in a structured, commonly used, machine-readable format and transmit it to another controller. This right is distinct from particular platform exports, whose availability and scope require separate confirmation.
Consent and control evidence
You can withdraw consent at any time, without affecting the lawfulness of processing before withdrawal. Use the contact in the Privacy Policy. Availability and evidence for particular consent tools require separate confirmation.
Hosting and data transfers
The services actually used, documented regions and assessed transfer mechanisms govern. This overview gives no EU-only guarantee and does not confirm that particular standard contractual clauses have been executed. See Privacy and Data Governance for details.