EIZO / TRUST & RESPONSIBILITY

EU data rights

Rights requests, international processing and outstanding EU launch requirements.

Review draft · Version 2026-09-20 · Updated September 20, 2026

Draft for review — not an executed agreement. Operator identity, address, jurisdiction and privacy/support contact are pending. These documents require legal review and operational follow-through before adoption. No acceptance of this draft is collected.

1. Your rights #

Where the GDPR applies, individuals may have rights to access, correct, erase, restrict or object to processing, receive portable data where applicable, and withdraw consent without affecting earlier lawful processing. Rights have conditions and exceptions. You may complain to the competent supervisory authority. A qualifying request ordinarily requires a response within one month, with lawful extensions where justified.

A working privacy contact, identity-verification procedure, deletion/export process and request log are still required for this deployment. The contact is pending; this draft must not be presented as a fully operational rights-request service.

2. Nodes and international transfers #

No EU-only processing or residency guarantee is currently offered. Shared nodes and external providers may introduce additional processing locations. A valid transfer mechanism and assessment must be in place where required before restricted transfers occur; putting a link to EU rules on a page does not provide that mechanism.

Before enabling EU customer workloads, document actual hosting and node locations, recipients, contracts and safeguards. Do not promise standard contractual clauses, adequacy coverage or approved subprocessors until they actually apply to the relevant transfer.

3. Operational requirements before final publication #

Complete operator identity and contact details; determine representative or data-protection-officer requirements; map data flows, purposes and retention; validate lawful bases; establish applicable processor agreements and transfer arrangements; implement request handling and incident procedures; assess whether a data-protection impact assessment is required; and align every privacy statement with deployed controls.

Terms cannot remove mandatory consumer or data-protection rights. Publication of this page is not a certification, legal assessment of every jurisdiction, or authorization to collect sensitive personal data.

Official references

Reference material informs this draft; it does not certify the service.