Data protection when engineers in Türkiye work on Slovak systems
Slovakia supplements the GDPR with Act No. 18/2018 Coll. on personal data protection, and the supervisory authority is the Úrad na ochranu osobných údajov Slovenskej republiky (dataprotection.gov.sk), which receives personal data breach notifications and notifications of a data protection officer. As of 2 October 2026, Türkiye is not on the European Commission's adequacy list, so a common tool is the Standard Contractual Clauses of Commission Implementing Decision (EU) 2021/914. Their controller to processor module matches the usual setup in which your company decides and the studio processes on your instructions. Under Clause 14, both parties warrant that they have no reason to believe the destination country's laws and practices prevent the importer from complying. It is worth having your lawyer confirm the module and the annexes. A sensible design goal is that production personal data rarely needs to be seen: seeded test data, scoped access and logs without personal fields.





