Last updated: September 28, 2026

GDPR & EEA Privacy Rights

Possible lawful bases

Depending on the feature used, processing may rely on consent, legitimate interests such as website security and improvement, steps taken at your request when you contact us, or compliance with a legal obligation. Optional marketing communications should rely on an appropriate legal basis and provide an unsubscribe method.

Your rights

Where the GDPR or equivalent law applies, you may have rights to access personal data, correct inaccurate data, request deletion, restrict processing, object to certain processing, receive eligible data in a portable format, and withdraw consent where processing is based on consent. These rights are subject to legal exceptions and verification requirements.

Cookies and consent

If non-essential analytics, advertising, or preference technologies are used, the production site should present any consent controls required by applicable law. Withdrawing consent should be as straightforward as giving it.

Processors and international transfers

Hosting, email, form, analytics, or security providers may act as processors or independent controllers depending on the service. When personal data is transferred across borders, appropriate safeguards should be used where legally required.

Retention

Personal data should not be kept longer than necessary for the purpose for which it was collected, subject to security, legal, accounting, or dispute-resolution needs.

Submitting a request

Email your request with enough detail to identify the relevant interaction, such as the email address used in a form submission. Do not send passwords or unnecessary identity documents. If additional verification is required, we will explain what is needed.

Complaints

If applicable law gives you the right to complain to a data-protection authority, you may do so in the jurisdiction where you live, work, or believe a violation occurred.