For all Citizen Case Content submitted to, assigned to, accessed by, exported by, or otherwise handled by the Representative, the Representative acts as independent Data Controller. The Representative is responsible for identifying and documenting a lawful basis, complying with transparency obligations, responding to data subject requests, applying appropriate safeguards, and complying with any statutory, ethical, public-office, record-keeping, disclosure, or data-protection obligations applicable to the Representative.
Constituency acts as Data Processor only for the limited purposes of hosting, storing, transmitting, securing, supporting, and technically facilitating Citizen Case Content through the Platform, and only on documented Controller instructions except where required by law.
The Representative acknowledges that any failure to comply with applicable data protection laws may give rise to regulatory investigation or enforcement action by the competent supervisory authority.