Trust · 04 · GDPR & privacy
A named Data Protection Officer and a 10-working-day DPA review SLA.
GDPR-aligned data processing is operational, not aspirational. The Data Protection Officer is reachable directly, the DPA template is downloadable, and the sub-processor list is available on request. Regulated-enterprise tenants get the same posture the Compliance & Governance desk publishes here.
Data Processing Agreement under one institutional desk
DPO · dpo@ascendia.eu · DPA template available · Sub-processor list on request
Compliance frames
Each frame names the regulation, its institutional implication, and (where available) a public source. No marketing claims that overpromise compliance Ascendia does not hold.
Lawful basis, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, accountability — recorded against each processing activity Ascendia performs as controller or processor.
Access, rectification, erasure, restriction, portability, and objection rights are routed through the DPO. Response cadence aligns to the GDPR one-month standard.
Where Ascendia acts as processor, an Article 28 Data Processing Agreement is executed. The DPA template is reviewable on request; signed return inside the published SLA.
Cookie posture and electronic-communications handling align with the ePrivacy Directive. Google Analytics 4 uses Consent Mode defaults set to denied; measurement is enabled only after analytics consent, while advertising storage and personalisation remain denied by default.
Documents and downloadable evidence
GDPR Article 28 DPA template — processor obligations, TOMs, sub-processor schedule, and signature block.
OpenStandard privacy policy covering Ascendia surfaces.
OpenEU data residency by default; full list on request to dpo@ascendia.eu within 5 working days.
OpenUser-facing cookie posture, Google Analytics 4 consent, and preference controls.
OpenDesk 03 · R&D, platform, compliance & governance
Gabriel Lazar
Research & Development Director — EC DEC member, technical evidence, accessibility, AI governance, and regulated-enterprise architecture
Service-level commitment
Next steps
Part of Accessibility