Effective date: 23 August 2025

At Trustigo, protecting personal data is not just a legal requirement, it is a core principle of how we operate. We are fully committed to compliance with the General Data Protection Regulation (GDPR) and to giving our users and their clients confidence that data is handled with the highest level of care, security, and transparency.

Our role under GDPR

When you use Trustigo to collect and manage client recommendations, you remain the data controller. You decide which data is collected and how it is used. Trustigo acts as a data processor, providing the tools and infrastructure to process this data securely and in compliance with GDPR.

This means:

• You stay in control of the data you collect.

• We only process data on your documented instructions.

• We ensure all processing activities meet GDPR requirements.

Data minimization and purpose limitation

We collect and process only the data that is strictly necessary to provide our Services. Data is never used for unrelated purposes, and it is not sold or shared with third parties for marketing.

Recommendations collected through Trustigo are used only to verify authenticity, display feedback, and strengthen your business reputation in line with the purpose of our platform.

Transparency and accountability

Trustigo provides full transparency on how data is collected, stored, and processed. Our Privacy Policy and Terms of Service clearly explain your rights and obligations.

We keep detailed records of our processing activities and review them regularly to ensure compliance. Our internal policies are updated to reflect the latest data protection standards.

Security measures

We apply strict technical and organizational measures to protect all personal data processed through Trustigo. These include:

• Encryption of data in transit and at rest

• Secure hosting within the European Union

• Regular monitoring and security audits

• Access control based on the principle of least privilege

Our goal is to reduce the risk of unauthorized access or misuse to the absolute minimum.

Data subject rights

Trustigo provides tools to help you honor data subject rights under GDPR, including:

• The right of access to personal data

• The right to rectification and erasure

• The right to restriction of processing

• The right to data portability

• The right to object

We respond promptly to all verified requests related to data subject rights and provide assistance to our users in fulfilling their legal obligations.

International data transfers

Trustigo processes and stores personal data primarily within the European Union. If data must be transferred outside the EU, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

Commitment to continuous compliance

GDPR is not a one-time effort but an ongoing responsibility. At Trustigo we:

• Continuously review and update our practices

• Train our team in data protection and compliance

• Work only with third-party providers that meet GDPR standards

• Monitor regulatory developments to ensure long-term compliance

Contact us

If you have questions about our GDPR practices or need further details about how Trustigo processes personal data, you can contact us at:

Email: info@trustigo.com