Data controller: Scale-Up.
Data collected: identity, contact details, browsing data, preferences.
Purposes: responding to requests, providing services, improvement, marketing with consent.
Legal basis: consent, performance of contract, legitimate interest.
Retention: proportionate duration (max. 3 years for marketing).
Sharing: providers (hosting, CRM, analytics) under data processing agreements.
Transfers outside the EU: appropriate safeguards (SCC/adequacy).
Rights: access, rectification, erasure, objection, portability, withdrawal of consent.
Security: access control, encryption in transit, backups.
Cookies: audience measurement, advertising, preferences.
DPO contact: privacy@example.com
This text is an informational template and does not constitute legal advice.