Data Processing (GDPR)

Controller and processor roles

For operator accounts (people who run a whitelabel site with us), Dala Primelab AB is the data controller.

For end customers of an operator's site, the operator is the data controller and Dala Primelab AB acts as the data processor, processing customer data only on the operator's documented instructions.

Subprocessors

We use a small set of subprocessors: Stripe for payment processing, our hosting and database provider for infrastructure, and an email provider for transactional email. Each is bound by a data processing agreement and processes data within the EU/EEA or under valid transfer safeguards.

Retention

We keep personal data only as long as the account or membership is active, plus the period required by accounting law. Deleting an operator account deletes the sites and customer records attached to it.

Your rights

You have the right to access, correct, export and delete your personal data, to restrict or object to processing, and to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.

To exercise any of these rights, email support@sidehustlers.me. We respond within 30 days.