How the GDPR applies to both relationships: as controller for this site's visitors, and as processor for conversations handled on a customer's behalf. Lawful bases, data subject rights and how to exercise them, international transfer mechanisms, and the response windows that apply.
If your data was processed because you contacted a business that uses our agents, that business is the controller and the request goes to them. We will assist them promptly. This routing is not a deflection — it is the legally correct path, and the notice says how to identify the right controller.
Some sub-processors are established in the United States. Transfers rely on standard contractual clauses with supplementary measures where required, and the sub-processor list states the location of each. Where an EU-resident processing option exists for a given function, it is noted.