Last updated: 29 September 2026
Crittiks supports customers in the European Union and United Kingdom as part of its global service. The core GDPR/UK GDPR provisions — legal basis for processing, data subject rights, international transfer mechanisms, and breach notification timelines — are built into the main Crittiks Privacy Policy (Sections 4, 9, 10, and 12) and the Crittiks Data Processing Addendum, rather than kept in a separate document.
This page summarises where to find each:
| Topic | Where it’s covered |
|---|---|
| Roles (controller/processor) | Privacy Policy, Section 2 |
| Legal basis for processing | Privacy Policy, Section 4 |
| International transfers (SCCs/IDTA) | Privacy Policy, Section 9; full mechanism in the DPA |
| Data subject rights | Privacy Policy, Section 12 |
| Breach notification (72-hour rule) | Privacy Policy, Section 10 |
| Sub-processors | Sub-processors document |
| Full processor obligations | Data Processing Addendum |
To execute a Data Processing Addendum for your workspace, contact support@crittiks.com.
EU/UK representatives: Not currently appointed. Crittiks relies on the Article 27(2) GDPR exemption for occasional, limited-scale processing — see Privacy Policy, Section 1, for details. This position is reviewed regularly as our EU/UK customer base grows.
Contact: support@crittiks.com