Privacy Policy TL;DR

This section provides a high-level overview of how TrustWorks processes personal data.
More detailed information is available in the Full Privacy Notice below.
Data Controller
Controller entity (Spain): QueryLayer S.L., trading as TrustWorks;
Controller entity (Brazil): TrustWorks LTDA.
More information: see Who we are – Full Privacy Notice.
Main Purposes of Processing
TrustWorks processes personal data mainly to:
operate and manage the TrustWorks website and SaaS platform;
provide and support privacy management and AI governance services;
manage customer relationships, communications and support requests;
analyse usage, improve services and ensure security and stability;
send relevant communications and marketing content, where permitted.
More information: see How we collect and use your personal data – Full Privacy Notice.
Lawful Bases
Personal data is processed based on one or more of the following lawful bases:
performance of a contract;
legitimate interests;
consent, where required;
compliance with legal or regulatory obligations.
More information: see Lawful Bases for Processing Personal Data – Full Privacy Notice.
Categories of Personal Data
Depending on your interaction with TrustWorks, we process:
identification and contact details;
usage, technical and interaction data;
support and communication data;
documentation and content submitted for analysis within the platform.
More information: see How we collect and use your personal data – Full Privacy Notice.
Processors or Subprocessors
Personal data is shared with:
trusted service providers acting as processors or sub-processors;
infrastructure, analytics, security and support providers;
competent authorities, where legally required.
More information: see Processors and Sub-processors – Full Privacy Notice.
International Data Transfers
Personal data is transferred to countries outside your jurisdiction, including the United States and Ireland, with appropriate safeguards in place, such as Standard Contractual Clauses.
More information: see International Transfers of Personal Data – Full Privacy Notice.
Data Subject Rights
You have rights under applicable data protection laws, including the right to:
access, correct or delete your personal data;
object to certain processing activities;
withdraw consent, where applicable;
lodge a complaint with a competent Data Protection Authority.
You can exercise your right here:
More information: see Data Subject Rights – Full Privacy Notice.
Contact / Data Protection Officer
TrustWorks has appointed a Data Protection Officer (DPO).
More information: see Data Protection Officer (DPO) – Full Privacy Notice.

Full privacy notice

For more details, read our complete privacy notice.