GDPR & Local Jurisdiction Desk Review TOS
Legal Notice
GDPR & Local Jurisdiction Desk Review Terms of Services
Version: 1.0
Last updated: 24 June 2026
These Terms of Service (“Terms”) govern the purchase and provision of the GDPR & Local Jurisdiction Desk Review (“Desk Review” or “Service”) supplied by Digital Synergy Ltd (“Digital Synergy”, “we”, “us” or “our”).
By placing an order, confirming acceptance of these Terms and completing payment, the Customer agrees to be bound by these Terms.
1. Service Provider
The Service is provided by:
Digital Synergy Ltd
Registered Office: Second Floor, 74 South Mall, T12F3FD Cork, Co. Cork
Registered in Ireland
Company Registration Number: 561118
Email: grc@digital-synergy.eu
Telephone: +353 21 203 1280
Digital Synergy Ltd is an Irish limited company.
2. Business Customers
The Desk Review is intended for businesses, organisations, public bodies, professionals and other persons acting in the course of their trade, business, craft or profession.
By placing an order, the Customer confirms that:
(a) it is purchasing the Service for business or professional purposes;
(b) the person placing the order has authority to act on behalf of the relevant organisation; and
(c) the Customer is authorised to request an assessment of the website identified in the order.
If mandatory consumer-protection legislation applies notwithstanding the above, nothing in these Terms excludes or restricts any statutory rights that cannot lawfully be excluded or restricted.
3. Description of the Service
The GDPR & Local Jurisdiction Desk Review is an independent professional compliance assessment of the website identified by the Customer.
Depending on the applicable website, jurisdiction, sector and agreed scope, the Desk Review may include:
- EU GDPR and ePrivacy assessment;
- applicable national or local jurisdiction requirements;
- privacy and transparency review;
- website forms and user-journey review;
- cookie and Consent Management Platform assessment;
- technical cookie and tracking observations;
- HAR and network-request analysis;
- relevant third-party service and transfer observations;
- structured compliance findings;
- risk scoring and prioritisation;
- evidence supporting material findings;
- recommended corrective actions;
- evidence recommended for closure of findings; and
- a prioritised remediation roadmap.
The final scope is determined by the Service description presented to the Customer at the time of ordering and these Terms.
4. Nature and Limitations of the Desk Review
The Desk Review is a professional compliance and technical assessment. It is not:
- a GDPR certification;
- an official determination of compliance or non-compliance by a supervisory authority;
- an assurance or audit engagement;
- a penetration test or vulnerability assessment;
- a forensic cybersecurity investigation;
- a substitute for a complete internal GDPR audit;
- an independent solicitor’s or barrister’s legal opinion; or
- a guarantee that a website or organisation complies fully with every applicable legal requirement.
The assessment is based on information and technical behaviour available during the review period and on the agreed scope.
Legal, regulatory and technical requirements may change, and websites, CMP configurations, tracking technologies, privacy notices and third-party services may be modified after the assessment.
Where definitive interpretation of national law, sector-specific law or a material legal issue is required, Digital Synergy may recommend validation by appropriately qualified local legal counsel.
5. Excluded Activities
Unless expressly agreed otherwise in writing, the Service does not include:
- administrative or backend access, source-code review, penetration testing, exploitation of vulnerabilities, circumvention of access controls, review of internal systems, employee records, complete RoPA, DPIA, DPA, SCC or TIA audits, incident investigations, litigation support, formal legal opinions or regulatory representation.
- Digital Synergy will not intentionally circumvent authentication, technical access restrictions or security controls in order to perform the standard Desk Review.
6. Customer Responsibilities and Authorisation
The Customer shall provide accurate and complete information required to perform the Service.
The Customer confirms that it owns, operates, manages or is otherwise duly authorised to request the assessment of the website identified in the order.
The Customer shall not knowingly provide Digital Synergy with passwords, authentication credentials, confidential production data, special-category personal data or other sensitive information unless this has been expressly agreed in advance.
Digital Synergy may suspend or refuse an assessment where there is reasonable doubt concerning authorisation, legality, security or the scope of the requested activity.
7. Price
The standard fee for one GDPR & Local Jurisdiction Desk Review is: EUR 1,490
Digital Synergy Ltd is not registered in the VAT system.
8. Payment
Payment is due in full at the time the order is placed.
Payments are processed through Stripe or another payment provider expressly identified during checkout.
Digital Synergy does not commence the five-business-day delivery period until:
- a valid order has been received;
- payment has been successfully received and cleared; and
- all information reasonably required to commence the Desk Review has been provided.
An electronic confirmation of the order will be sent to the business email address supplied by the Customer.
9. Contract Formation
The information displayed on the website constitutes an invitation to place an order.
The Customer places an order by completing the required information, accepting these Terms and completing the payment process.
A binding contract is formed when Digital Synergy receives successful payment and issues an order confirmation, unless Digital Synergy subsequently determines that the order cannot lawfully or technically be performed.
The contractual language is English.
The Customer should download or otherwise retain a copy of these Terms and the order confirmation for its records.
10. Delivery
The completed GDPR & Local Jurisdiction Desk Review will be delivered electronically within five (5) Business Days following receipt of a valid order and cleared payment, provided that Digital Synergy has received all information reasonably necessary to perform the Service.
For these Terms, a “Business Day” means Monday to Friday, excluding public holidays in the Republic of Ireland.
Delivery will normally be made to the business email address supplied with the order or through another secure electronic delivery method communicated to the Customer.
If additional information is required from the Customer, the delivery period may be suspended until that information is received.
Technical circumstances outside Digital Synergy’s reasonable control, including website unavailability, persistent anti-bot protection, access restrictions, major website changes or third-party service outages, may require an extension of the delivery period. The Customer will be informed where such circumstances materially affect delivery.
11. Changes to the Website
The Desk Review reflects the website and technical environment observed during the assessment period.
Changes made after the review, including changes to the website, privacy notices, forms, CMP configuration, cookies, tracking services, processors or third-party integrations, may invalidate individual findings or conclusions.
A subsequent re-assessment or remediation verification is not included in the EUR 1,490 fee unless expressly stated.
12. Cancellation and Refunds
Because the Desk Review is a bespoke professional service prepared for an identified Customer and website, work may commence promptly after successful payment.
For Business Customers: Before work has commenced: the Customer may request cancellation and a refund.
After substantive work has commenced: the Service fee is non-refundable except where Digital Synergy fails to provide the contracted Service, agrees otherwise in writing, or a refund is required by applicable law.
If Digital Synergy is unable to perform the Service for reasons attributable solely to Digital Synergy, the Customer will be offered either an appropriate alternative delivery arrangement or a refund of the amount attributable to the unperformed Service.
Nothing in this clause affects any mandatory statutory right that cannot lawfully be excluded.
13. Deliverables and Reliance
The Desk Review is prepared specifically for the Customer and the website identified in the order.
The Customer may use the report for:
- internal governance;
- compliance management;
- remediation planning;
- management and board reporting;
- discussions with its DPO;
- discussions with professional legal, technical or compliance advisers; and
- communications with competent regulatory or supervisory authorities where appropriate.
No third party is entitled to treat the report as having been prepared for that third party or to rely on it without Digital Synergy’s prior written agreement.
14. Intellectual Property
Digital Synergy retains all intellectual-property rights in its methodologies, assessment frameworks, report structures, templates, scoring methods, know-how and other pre-existing materials used in providing the Service.
Following full payment, the Customer receives a non-exclusive, non-transferable licence to use the final Desk Review for its own internal business and compliance purposes.
The Customer may provide the report to its employees, officers, professional advisers, insurers and competent authorities where reasonably necessary.
The report may not, without prior written permission from Digital Synergy:
- be resold;
- be commercially redistributed;
- be published publicly in full;
- be materially altered and represented as an original Digital Synergy report; or
- be used to provide a competing commercial assessment service.
The Customer retains ownership of its own materials and intellectual property.
15. Confidentiality
Digital Synergy will treat non-public information received from the Customer in connection with the Service as confidential and will use it only for the performance and administration of the engagement, subject to applicable law.
The Customer shall likewise treat non-public methodologies, working materials and other confidential Digital Synergy information as confidential.
Confidential information may be disclosed where disclosure is required by law, court order, regulatory authority or another legally binding obligation.
Digital Synergy will not publicly identify a Customer as having received a Desk Review, nor publish a Customer-specific report or finding, without prior consent, except where required by law.
16. Data Protection
Digital Synergy will process personal data in accordance with the General Data Protection Regulation (EU) 2016/679, the Irish Data Protection Act 2018, and other applicable data-protection legislation.
Personal data provided in connection with an order may be processed for purposes including:
- administering the order;
- verifying Customer and business information;
- processing and recording payment;
- performing and delivering the Desk Review;
- communicating with Customer representatives;
- managing contractual and professional records;
- complying with legal, tax and accounting obligations;
- maintaining security and preventing misuse of the Service; and
- handling complaints or disputes.
The applicable lawful basis will depend on the relevant processing activity and may include performance of a contract, compliance with a legal obligation and legitimate interests.
Further information concerning categories of personal data, lawful bases, recipients, international transfers, retention periods and data-subject rights is provided in the Digital Synergy Privacy Policy, which forms a separate transparency notice and is available at Privacy Policy.
Marketing communications are separate from the provision of the Desk Review and are subject to the Customer representative’s applicable marketing preferences and applicable law.
17. Customer Personal Data and Data Processing Agreements
The standard Desk Review is designed primarily to assess publicly accessible website content and agreed technical observations.
The Customer should not submit personal data relating to its customers, patients, employees or other individuals unless necessary and expressly agreed.
Where the agreed scope requires Digital Synergy to process personal data on behalf of the Customer as a processor, the parties will enter into an appropriate data-processing agreement before such processing takes place.
18. Technical Evidence and HAR Files
Where HAR or equivalent browser/network evidence is included in the agreed scope, technical records may contain URLs, network identifiers, cookies, request metadata or other technical information generated during the assessment.
Such evidence will be handled only for legitimate assessment, documentation, quality-control and remediation purposes and in accordance with the applicable Privacy Notice and agreed retention arrangements.
Technical observations represent the behaviour observed in the specific assessment environment and at the relevant time. They do not establish that identical behaviour occurs for every user, device, browser, geographic location or subsequent website session.
19. Standard of Service
Digital Synergy will perform the Service with reasonable professional skill, care and diligence.
The Customer acknowledges that compliance assessments necessarily involve professional judgement and that laws, regulatory interpretations, technical environments and website behaviour may evolve.
No particular regulatory, commercial or legal outcome is guaranteed.
20. Limitation of Liability
To the fullest extent permitted by applicable law, Digital Synergy shall not be liable for indirect, consequential or special loss, loss of profit, revenue, anticipated savings, opportunity, goodwill or business arising from or connected with the Service.
Subject to liabilities that cannot lawfully be limited or excluded, Digital Synergy’s aggregate contractual and non-contractual liability arising from a particular Desk Review shall not exceed the total fee actually paid by the Customer for that Desk Review.
Nothing in these Terms excludes or limits liability for fraud, fraudulent misrepresentation, wilful misconduct, or any other liability that applicable law does not permit to be excluded or limited.
The Customer remains responsible for its own legal, technical, organisational and management decisions and for determining whether and how recommendations are implemented.
21. Third-Party Services
The Service may involve observations concerning third-party technologies, CMP providers, hosting providers, analytics systems, advertising services, content-delivery networks or other external services.
Digital Synergy does not control such third parties and does not warrant the continuing availability, functionality or accuracy of third-party systems or information.
22. Force Majeure
Digital Synergy will not be liable for delay or failure caused by circumstances beyond its reasonable control, including significant internet or hosting outages, widespread service-provider failures, governmental action, natural disasters, industrial disputes, cyber incidents affecting third-party infrastructure or other comparable events.
Digital Synergy will use reasonable efforts to minimise the effect of such circumstances and resume performance as soon as reasonably practicable.
23. Complaints
Questions, service requests or complaints may be submitted to:
Digital Synergy Ltd
Email: grc@digital-synergy.eu
Postal address: Second Floor, 74 South Mall, T12F3FD Cork, Co. Cork, Republic of Ireland
Digital Synergy will acknowledge a service complaint or request in writing within 14 days of receipt and will make reasonable efforts to resolve complaints satisfactorily and without undue delay.
24. Governing Law and Jurisdiction
These Terms and any contractual or non-contractual dispute arising from them shall be governed by the laws of Ireland.
Subject to any mandatory rule of applicable law, the courts of Ireland shall have exclusive jurisdiction over disputes arising from or in connection with the Service.
Nothing in this clause deprives any person of mandatory rights or jurisdictional protections that cannot lawfully be waived.
25. Entire Agreement
These Terms, the applicable Service description, the order information, the payment confirmation and any expressly incorporated written terms constitute the agreement between Digital Synergy and the Customer concerning the relevant Desk Review.
They supersede prior discussions or representations concerning the same Service, except in the case of fraud or fraudulent misrepresentation.
26. Severability
If any provision of these Terms is held to be invalid, unlawful or unenforceable, that provision shall be interpreted or limited to the minimum extent necessary, and the remaining provisions shall continue in full force and effect.
27. No Waiver
A failure or delay by either party to exercise any contractual right shall not constitute a waiver of that right.
28. Assignment
The Customer may not assign or transfer its rights under the engagement without prior written consent from Digital Synergy.
Digital Synergy may use appropriately qualified employees, contractors or specialist providers in performing elements of the Service, subject to applicable confidentiality and data-protection obligations.
29. Amendments to These Terms
The version of these Terms accepted at the time of the order governs that order.
Digital Synergy may amend these Terms for future orders. Changes will not retrospectively alter an existing contract unless agreed by both parties or required by law.
30. Electronic Communications
The Customer agrees that contractual notices, invoices, order confirmations, reports and other engagement communications may be provided electronically to the business email address supplied with the order.
31. Contact
For questions concerning these Terms or the Desk Review:
Digital Synergy Ltd
grc@digital-synergy.eu
Second Floor, 74 South Mall, T12F3FD Cork, Co. Cork
Republic of Ireland
