Data Processing Information & DPA Requests
Effective date: 24 August 2026
This page explains how Primalog Mateusz Mrożek, trading as Primalog, may process personal data on behalf of business customers. It is informational and does not by itself enter the parties into a data processing agreement under Article 28 GDPR. If the customer's use of CubeOn Studio requires a binding DPA, contact us so that the parties can determine the required scope and agree it in writing.
1. Roles
For Studio account and project data relating to your end users or staff, you are typically the data controller and we are the processor, unless otherwise agreed in writing.
2. Subject matter and duration
Processing supports account management, cloud project storage (where enabled), export entitlement, support, and security monitoring for the duration of the service relationship.
3. Types of personal data
May include account identifiers, email addresses, project metadata, support correspondence, and technical logs. See the Privacy Policy for categories and retention.
4. Sub-processors
We use infrastructure and service providers (for example hosting, email delivery, and analytics when enabled) that may process data on our instructions. Current provider categories are listed in our Privacy Policy; security information is available in the Trust Center.
5. Security measures
We implement access controls, encryption in transit, and operational monitoring appropriate to the service. Details are summarised in the Trust Center.
6. Request DPA terms
To discuss and request appropriate processor terms for your organisation, contact info@primalog.pl.