Legal & regional / European Union
DRAFT — requires legal counsel

This page is a scaffold. Every section below is a placeholder for jurisdiction-specific text that must be reviewed and written by licensed counsel familiar with the region's privacy and liability regimes. Do not rely on it as legal advice.

European Union

SkyLara's supplement for users whose personal data is processed in the European Economic Area. Addresses GDPR obligations including lawful basis, data subject rights, and international transfers.

Lawful basis for processing

PLACEHOLDER — describe the specific lawful bases SkyLara relies on for each processing activity (contract, legitimate interests, consent, legal obligation). Must be written by counsel.

Data subject rights

PLACEHOLDER — access, rectification, erasure, restriction, portability, objection. Reference the data-export endpoint and the admin GDPR-erase flow. Include contact details for data subject requests.

International transfers

PLACEHOLDER — describe any transfers outside the EEA and the safeguards in place (standard contractual clauses, adequacy decisions). Must be written by counsel.

Data Protection Officer

PLACEHOLDER — if a DPO is appointed, list contact details. Otherwise, document why a DPO is not required.

Supervisory authority

PLACEHOLDER — tell users they may lodge a complaint with their national supervisory authority and link to the EDPB contacts page.

Each dropzone is responsible for its own operational policies. This page covers only SkyLara platform obligations for the European Union region.