# Privacy Policy & European Data Sovereignty

> EuScope commitment to General Data Protection Regulation (GDPR - Regulation EU 2016/679) compliance and sovereign European data residency.

---

## Data Protection Framework

EuScope is engineered from inception around European Data Sovereignty:

- **Data Controller & Supervision**: Data Controller is **EuScope OÜ** (Tallinn, Republic of Estonia), supervised by the Estonian Data Protection Inspectorate (*Andmekaitse Inspektsioon - AKI*).
- **100% Sovereign EU Hosting**: All primary application databases, audit logs, and ledger nodes execute exclusively within certified European Oracle Cloud Infrastructure (Frankfurt am Main, Germany, BSI C5:2020 and ISO 27001:2022 certified), backed by redundant failover snapshots in Dublin, Paris, and Stockholm.
- **No Third-Party Advertising Trackers**: The EuScope platform contains zero commercial telemetry beacons, zero third-party ad networks, and zero unauthorized cross-border data transfers.
- **Strict Role-Based Access Control (RBAC)**: Enterprise tenant isolation guarantees that sustainability activity records remain strictly confidential to authorized corporate roles.
- **Data Protection Officer (DPO)**: Contact our dedicated data protection office at [dpo@euscope.eu](mailto:dpo@euscope.eu).

Full policy details: [https://euscope.eu/privacy](https://euscope.eu/privacy)