GDPR & UK GDPR Compliance

Production Central is committed to helping our customers meet their obligations under the EU General Data Protection Regulation (GDPR) and the UK GDPR. This page summarizes our approach; it supplements our Privacy Policy and Data Processing Addendum.

1. Our roles

We act as a data controller for personal data we collect about visitors and account administrators, and as a data processor for the Customer Content our customers submit. Our processor commitments are set out in the Data Processing Addendum.

2. Lawful bases and your rights

We rely on the lawful bases described in our Privacy Policy. Individuals in the EEA and UK have the rights to access, rectification, erasure, restriction, portability, and objection, and to withdraw consent. To exercise these rights, contact legal@productioncentral.org.

3. International transfers

Where we transfer personal data outside the EEA or UK, we use the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with supplementary measures where appropriate.

4. Data protection contacts

You can reach us about data protection at legal@productioncentral.org. As an early-stage organization established outside the EU and UK, we have not yet appointed Article 27 representatives and will do so if and when required. You also have the right to lodge a complaint with your local supervisory authority.

5. Security and breach notification

We maintain the safeguards described on our Security page and will notify affected customers of personal-data breaches as required by the GDPR and UK GDPR.