GDPR Data Protection

TheCreew is the data controller responsible for processing your personal data in accordance with the General Data Protection Regulation (GDPR).

We process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for specific processing
• Contract: When processing is necessary for the performance of a contract
• Legal Obligation: When we need to comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate business interests

As a data subject, you have the following rights:

• Right of Access: You can request access to your personal data
• Right to Rectification: You can request correction of inaccurate data
• Right to Erasure: You can request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: You can request limitation of data processing
• Right to Data Portability: You can request transfer of your data
• Right to Object: You can object to processing of your data
• Right to Withdraw Consent: You can withdraw consent at any time

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this notice, unless a longer retention period is required or permitted by law.

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.

If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

To exercise any of your rights, please contact us at:

We will respond to your request within one month. If your request is complex, we may extend this period by up to two additional months.

If you believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with your local data protection authority.