GDPR and data protection

Templ is run by Wootemple AB, a Swedish company, and hosting your data under EU law is part of the service. This page explains how Templ complies with the GDPR, the agreement that governs how we process your data, where that data is stored, and how to exercise your rights.

Yes. Templ complies with the General Data Protection Regulation (GDPR). As an EU-based company we operate under Swedish and EU data protection law, and we apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or damage.

For the full details on what personal data we collect and how we use it, see the Privacy Policy.

Data Processing Agreement (DPA)

When you host a website on Templ, the data on that site (including your visitors' personal data) belongs to you. Under the GDPR, that makes you the data controller and Templ the data processor acting on your instructions.

This relationship is governed by our Data Processing Agreement (DPA), which is built on Article 28 of the GDPR. The DPA applies automatically to every customer - there's nothing to sign. It covers:

The technical and organizational security measures we maintain
Confidentiality obligations for anyone who handles the data
How we investigate and report security incidents
The rules for engaging sub-processors
Restrictions on transferring data outside the EU
Your right to audit our compliance

You can read the full DPA on the Legal page.

Where your data is stored

You choose the data center for each website when you create it, and you can move a site to another location later. For the list of available hosting locations, see the price list.

Backups are stored in a separate data center from your live site, by design, for redundancy. For sites in an EU location, that backup data center is another region within the EU, so your data stays in the EU.

Providers we use

To run the service, Templ relies on a set of carefully selected third-party providers (for example for infrastructure, email delivery, payments, and support chat). These providers may process personal data on our behalf and are bound to protect it. The current list is maintained in the Privacy Policy under "Service Providers".

Your data rights

You can request access to, or deletion of, the personal data Templ holds about you at any time. Contact support by chat or email and we'll handle the request.

Your responsibilities as a site owner

Templ processes your site's data on your behalf, but you remain the data controller for your visitors' personal data. That means responsibilities like publishing your own privacy policy, obtaining cookie consent where required, and honoring your visitors' data requests stay with you.