Skip to main content

Tabula · Legal

GDPR Privacy Notice

Last updated [EFFECTIVE_DATE]

This notice supplements our Privacy Policy with information specifically required by the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA), United Kingdom, and Switzerland.

Data Controller

[COMPANY_NAME]
[COMPANY_ADDRESS]
[LEGAL_EMAIL]

Your GDPR Rights

Under GDPR, you have the right to:

  • Access (Article 15): Request a copy of all personal data we hold about you.
  • Rectification (Article 16): Request correction of inaccurate personal data.
  • Erasure (Article 17): Request deletion of your personal data (“right to be forgotten”).
  • Restriction (Article 18): Request that we limit processing of your data in certain circumstances.
  • Portability (Article 20): Receive your data in a structured, machine-readable format.
  • Object (Article 21): Object to processing based on legitimate interests.
  • Withdraw consent (Article 7): Where processing is based on consent, withdraw it at any time without affecting prior processing.

How to Exercise Your Rights

Email [LEGAL_EMAIL] with the subject line: “GDPR Request — [Right you wish to exercise]”

Include your account email address and a description of your request. We respond within 30 days. Complex requests may take up to 3 months.

International Transfers

If we transfer your data outside the EEA, we ensure appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission.

Our key processors and their transfer mechanisms:

  • Supabase: SCCs
  • Vercel: SCCs
  • LemonSqueezy: SCCs

Right to Complain

If you are unsatisfied with our response to a data request, you have the right to lodge a complaint with your local supervisory authority:

  • EU: Your national Data Protection Authority
  • UK: Information Commissioner's Office (ICO)
  • Switzerland: Federal Data Protection and Information Commissioner (FDPIC)