GDPR Compliance Statement
Effective Date: April 2026
1. Commitment to Data Protection
As a digital growth agency, Workvra is committed to complying with the General Data Protection Regulation (EU) 2016/679 ("GDPR"). We adhere to data minimization principles and ensure that the websites and marketing infrastructure we build for our clients meet stringent European privacy standards.
2. Controller vs. Processor Roles
Under GDPR terminology:
- Data Controller: When we collect information from our direct clients (you), Workvra acts as the Data Controller.
- Data Processor:When we host websites, manage forms, or configure analytics for your end-users, Workvra acts as the Data Processor. You remain the Data Controller of your own customers' data.
3. Client Website Compliance
We build GDPR-ready features into the infrastructure we deploy for our clients:
- Cookie Consent: Integration of compliant cookie banners and consent management platforms.
- Secure Forms: Encryption of data at rest and in transit for lead generation forms.
- Privacy-First Analytics: Configuring Google Analytics 4 or alternatives to respect do-not-track requests and anonymize IPs where required.
4. Data Transfers & EU Storage
Workvra utilizes ISO-27001 and SOC 2 certified data centers. We offer our EU clients the option to host their web applications and databases exclusively within the European Economic Area (EEA).
5. Data Protection Officer (DPO)
If you have any questions regarding GDPR compliance or wish to request our standard Data Processing Agreement (DPA), please contact our DPO at: info@workvra.com