Customers that utilize Abstrakt's products to collect and store personal data of EU citizens are considered data controllers under the European General Data Protection Regulation (GDPR). Abstrakt, as a data processor, can facilitate GDPR compliance through its Data Processing Addendum (DPA) which is designed to enable data transfers under the GDPR. For more information about our privacy practices and the ability to exercise your privacy rights under applicable data protection law, please refer to our Privacy Policy.