Legal
GDPR Data Processing Addendum
Effective Date: 19 September 2026 Operator: SCGK Contact: sgk@scgk.com
01
Purpose
This Data Processing Addendum ("DPA") supplements the SCGK & Co Privacy Policy and ensures compliance with the General Data Protection Regulation (GDPR).
02
Roles
- Data Controller: SCGK & Co (operated by SCGK)
- Data Processor: Third-party service providers (e.g., Stripe, analytics tools)
03
Categories of Data Processed
- Identification data (name, email)
- Subscription and billing data
- Usage analytics
- Device and browser information
04
Processing Activities
Data is processed for:
- Providing the Service
- Subscription management
- Analytics and performance
- Customer support
- Security and fraud prevention
05
Sub-Processors
SCGK & Co uses trusted sub-processors, including:
- Stripe (payment processing)
- Analytics providers
All sub-processors comply with GDPR and maintain appropriate safeguards.
06
International Transfers
Data may be transferred outside the EU when necessary. All transfers follow GDPR-compliant mechanisms (e.g., SCCs).
07
Security Measures
- Encryption
- Secure hosting
- Access controls
- PCI-Level-1 payment security (via Stripe)
08
Data Subject Rights
Users may request:
- Access
- Correction
- Deletion
- Data export
- Withdrawal of consent
Contact: sgk@scgk.com
09
Duration
Data is retained only as long as necessary for providing the Service and meeting legal obligations.