Last updated: 2026-07-31
Terms for processing and sub-processing of personal data under Article 28 GDPR.
Scope and purpose of processing
When we process data on behalf of a client as a processor, we do so only on the controller's documented instructions and within the scope set out in the processing agreement.
Sub-processing
We use further sub-processors only on terms consistent with the processing agreement and subject to the same data protection obligations.
Security measures
We apply technical and organisational measures appropriate to the risk and support the controller in fulfilling its obligations under the GDPR.
Location of processing
We carry out processing within the European Economic Area, unless the agreement provides otherwise and specifies the appropriate transfer mechanism.
This document is drafted to a professional standard and is reviewed by Polish counsel before it takes effect. The entity registration details appear in the site footer.